Re: threshold.conf and suppress 119 19

[jason lytle <jlytle.demandware () gmail com>]

i had the same problem - wasn't able to suppress that in threshold.conf
I "silenced" the alert by editing snort.conf:

in the section preprocessor http_inspect_server:

I changed this default line:
max_header_length 750 \

to this:
max_header_length 0 \

essentially disabling the header length check

YMMV, but worked for me ;)
good luck!

------------------------------------------------------------------------------
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users