| Main Archive Page > Month Archives > snort-users archives |
[Snort-users] preprocessor alert
From: ll <ibeginhere_at_nospam>Date: Wed Aug 04 2010 - 09:30:37 GMT
To: "snort-users@lists.sourceforge.net" <snort-users@lists.sourceforge.net>
hi,all
the preprocess create too many alerts. for example "stream5: Limit on
number of overlapping TCP packets reached".whether I disabled the
preprocessor stream5 or some way can disabled there alerts ? which will
be better ? and if I want to disabled some alerts created by the
preprocessor when I know the the preprocessor SID,how to do that .I just
know how to disabled the rules when I know the rules SID.
------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users