disabling the new spew of spp_rpc_decode alerts

[AppleAnnie331 () aol com]

Has any one figured out how to turn off these new rpc alerts yet (without crippling all the rcp related alerts we had 
pre v1.9.1?)  I've tried via snortcenter and keep getting
"Unknown argument to rpc_decode preprocessor:" errors no matter what combo I try.  Some of the combos I have tried are:

preprocessor rpc_decode: 111 32771 no_alert_multiple_requests, no_alert_large_fragments, no_alert_incomplete

and

preprocessor rpc_decode: no_alert_multiple_requests, no_alert_large_fragments, no_alert_incomplete

and 

preprocessor rpc_decode: 111 32771 no_alert_large_fragments, no_alert_incomplete



-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users