Re: Snort Decoder Alerts with Multiple Configs

[Bhagya Bantwal <bbantwal () sourcefire com>]

Hello Shawn,

Can you send us your configs? Also, which decoder alerts you are seeing?


-B
On Mon, Mar 21, 2011 at 1:41 PM, Jefferson, Shawn <
Shawn.Jefferson () bcferries com> wrote:

>  Hi,
>
> I'm using the multiple configs feature of Snort, and even though I have
> both "config disable_decode_alerts" and "config
> disable_tcpopt_experimental_alerts" in my bound config, I am still getting
> these alerts anyhow.
>
> Is this a bug?  Snort v.2.9.0.4  Anyone else see this behaviour?
>
> --
> Shawn Jefferson
>
>
>
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users