Snort mailing list archives
preprocessor alert
From: ll <ibeginhere () gmail com>
Date: Wed, 04 Aug 2010 17:30:37 +0800
hi,all the preprocess create too many alerts. for example "stream5: Limit on number of overlapping TCP packets reached".whether I disabled the preprocessor stream5 or some way can disabled there alerts ? which will be better ? and if I want to disabled some alerts created by the preprocessor when I know the the preprocessor SID,how to do that .I just know how to disabled the rules when I know the rules SID. ------------------------------------------------------------------------------ The Palm PDK Hot Apps Program offers developers who use the Plug-In Development Kit to bring their C/C++ apps to Palm for a share of $1 Million in cash or HP Products. Visit us here for more details: http://p.sf.net/sfu/dev2dev-palm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- preprocessor alert ll (Aug 04)
- Re: preprocessor alert Jason Wallace (Aug 04)
- Re: preprocessor alert Russ Combs (Aug 04)
- Re: preprocessor alert Jason Wallace (Aug 04)