Snort mailing list archives
Re: stream4
From: Chris Green <cmg () sourcefire com>
Date: Thu, 10 Apr 2003 16:27:09 -0400
Erek Adams <erek () snort org> writes:
On Thu, 10 Apr 2003, Steven Rudolph wrote:Is it possible to ignore hosts in the stream 4 plug-in. I have some load balancers that send out traffic that alerts very frequently on this. I really do not want to log this traffic. Here is an example alert:
Remove "detect_scans" from your stream4 preprocessor config line. -- Chris Green <cmg () sourcefire com> "Yeah, but you're taking the universe out of context." ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- stream4 Steven Rudolph (Apr 10)
- Re: stream4 Erek Adams (Apr 10)
- Re: stream4 Chris Green (Apr 10)
- Re: stream4 Erek Adams (Apr 10)