Re: Unable to disable X-link2state alerts.

["M. Shirk" <shirkdog_list () hotmail com>]

UPGRADE

It worked in 2.7.0 according to the snort forum thread. 

2.8.0.1 is out now....PORT LIST BITCHES>>..!!!!!>>????!??

Shirkdog
' or 1=1-- 

http://www.shirkdog.us

> Date: Tue, 11 Dec 2007 15:57:32 -0500
> From: Stephen.Bachelor.ctr () socom mil
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Unable to disable X-link2state alerts.
>
> I've got a problem with X-Link2state alerts.  I'd like to disable them,
> as I'm getting tons of false positives from normal Exchange server
> traffic.  But, as a two year old unanswered question* on the snort.org
> forums states, xlink2state { disable } in the smtp preprocessor
> statement just doesn't do anything.  The only possibility I can imagine
> is that version 2.6.1.3 (Build 36), what I use, may have some sort of
> bug.  Does anybody here have a better idea than the unfortunate
> forumgoers in the linked thread?
>
>
> *http://www.snort.org/reg-bin/forums.cgi?forum_id=1&topic_id=4066
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by: 
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________________
i’m is proud to present Cause Effect, a series about real people making a difference.
http://im.live.com/Messenger/IM/MTV/?source=text_Cause_Effect

-------------------------------------------------------------------------
SF.Net email is sponsored by: 
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users