(no subject)

[Lakshmi <lakshmi_rm () sify com>]

Hi all,
     The IDS we use works on snort 1.8.3 and we use demarc 1.05 to monitor the alerts.Our alerts consists of a number 
of "spp_unidecode: Invalid Unicode String detected".
Is there any problem if this alert is disabled as a whole? will any genuine alert be prevented from coming up in doing 
so?..that is will we miss out any attempted intrusion from being alerted?while monitoring the payloads of these alerts 
we felt that only some of them refer to some suspicious activity.Is there any possibility to restrict this alert for 
specified ips alone?
Can someone help out?
      

-------------------------------------------------
Sify Mail - now with Anti-virus protection powered by Trend Micro, USA.
Know more at http://mail.sify.com

Want to get into IIM? Take the Sify Mock CAT now!
http://education.sify.com/mockcat


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users