Re: HP 3000 and decode issues

["Andrew R. Baker" <andrewb () sourcefire com>]

Robby Desmond wrote:
> The (snort_decoder) fires off a lot of alerts on traffic coming from out 
> of our HP3000 machine.

What types of alerts is it generating?

> 1) Anyone know why the HP fires these alerts like crazy? (crappy stack 
> programming?)
>
> 2) What other decoding do I have to disable?

Add "config disable_decode_alerts" to your snort.conf to turn off the 
alerts being genererated by the decoder.

-A



-------------------------------------------------------
This sf.net email is sponsored by: 
To learn the basics of securing your web site with SSL, 
click here to get a FREE TRIAL of a Thawte Server Certificate: 
http://www.gothawte.com/rd522.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users