Re: excessive numbers of Possible RETRANSMISSION detected

[diphen () agitation net]

Oops! Thanks much.

-g

On Wed, Aug 01, 2001 at 04:47:06PM -0500, Chris Green wrote:
> diphen () agitation net writes:
>
> > This is how I have it configured in my snort.conf:
> >
> > preprocessor stream4_reassemble: both,noalerts,ports default
> >
> > I'm running snort 1.8p1 from snort.org.
>
> I don't have a 1.8p1 laying around but noalerts should have done it
> looking at the C level.
>
> Oh wait.
>
> its in
>
> preprocessor stream4: noalerts
>
> and not the stream4_reassemble:
> -- 
> Chris Green <cmg () uab edu>
>  "Not everyone holds these truths to be self-evident, so we've worked
>                   up a proof of them as Appendix A." --  Paul Prescod

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users