Re: (snort_decoder): T/TCP Detected alert

[Erek Adams <erek () snort org>]

On Sat, 30 Aug 2003, Cansu Akdeniz wrote:

> i am always getting a large number of "(snort_decoder): T/TCP Detected"
> alerts. i am thinking this as a false positive! i searched a bit to
> disable this rule but i can not find in which rule file this error was
> located. if anyone help me , i'll be very glad!

> From snort.conf lines 119-121:

   119  # Stop Alerts on T/TCP alerts
   120  #
   121  # config disable_ttcp_alerts


Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users