Snort mailing list archives
how to remove (portscan : open port) alert
From: "FRANCIS PROVENCHER" <francis.provencher () msp gouv qc ca>
Date: Tue, 16 Oct 2007 11:48:12 -0400
Hi all, i read on some forum how to stop alarm from (portscan: Open port). Some tell to include in snort.conf this lines; suppress gen_id 122, sig_id 27: suppress gen_id 122, sig_id 19: suppress gen_id 119, sig_id 4: I add it but alerts seem to continues Any one can help me please? Francis Provencher Ministère de la Sécurité publique du Québec Direction des technologies de l'information Division de la sécurité informatique Tél: 1 418 646-3258 Courriel: Francis.provencher () Msp gouv qc ca CEH - Certified Ethical Hackers SSCP - System Security Certified Practitionner Sec+ - Security +
Attachment:
FRANCIS PROVENCHER4.vcf
Description:
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- how to remove (portscan : open port) alert FRANCIS PROVENCHER (Oct 16)