Re: spp_portscan

[Andreas Brenk <ab () aegisnet de>]

Have a look inside snort.conf.

It's a preprocessor...

Am Fri, Sep 28, 2001 at 03:22:28PM -0400, schrieb cdowns:
> anyone know where spp_portscan is in the *.rules files ? so i can shut
> it off. Im not seeing doing: grep -r "spp_portscan" /rules/*

-- 
Andreas Brenk
mailto:ab () aegisnet de

AegisNet IT-Dienstleistungen
Postfach 62 03 71
22403 Hamburg
http://www.aegisnet.de
Tel. und Fax: +49-(0)700-AEGISNET


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users