Snort mailing list archives
Re: threshold.conf and suppress 119 19
From: jason lytle <jlytle.demandware () gmail com>
Date: Thu, 14 Apr 2011 14:47:04 -0700 (PDT)
i had the same problem - wasn't able to suppress that in threshold.conf I "silenced" the alert by editing snort.conf: in the section preprocessor http_inspect_server: I changed this default line: max_header_length 750 \ to this: max_header_length 0 \ essentially disabling the header length check YMMV, but worked for me ;) good luck!
------------------------------------------------------------------------------ Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: threshold.conf and suppress 119 19 jason lytle (Apr 15)