Re: how to disable spp_porscan?

[Chris Green <cmg () uab edu>]

robe () alfa21 com (Roberto Suarez Soto) writes:

>       So, to say it in another way: how can I *totally* disable
> spp_portscan? Don't tell me that I just comment it in snort.conf, because
> that's how it is now and it's still reporting portscans. I can show you my
> snort.conf if you don't believe me :-)

Ok. Please do.  Also please include the alerts you are complaining
about so we can tell you what to disable.
-- 
Chris Green <cmg () uab edu>
Let not the sands of time get in your lunch.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users