Snort mailing list archives
Update to REAME.decode on Snort.org request
From: Robert Cotter <robert.cotter () avagotech com>
Date: Wed, 29 Jul 2015 10:59:08 +1200
Would it be possible to make it clearer which decode ‘Options’ are enabled/disabled by default. At the moment you need to read down the list to item number 7. ‘enable_decode_oversized_alerts’ to see the text that says. “Note that this is the only decoder alert option that is disabled by default.” This would help making it easier to point out to the not so experienced what the original setting were without referring to the default snort.conf in the ruleset. Thanks in advance. Regards *Robert Cotter* *Field Application Engineer – Endace, a division of Avago* robert.cotter () avagotech com DDI: +64 9 926 2931 Mob: +64 21 67 5550 LinkedIn: Robert Cotter <http://nz.linkedin.com/pub/robert-cotter/4/3b/9a8>; Skype: endace.robert.cotter <skype:endace.robert.cotter?add> Level 2, Building A 600 Great South Road Ellerslie, Auckland 1051, New Zealand Postal :- PO Box 12894 Penrose Auckland 1642, New Zealand http://www.endace.com/; LinkedIn <http://www.linkedin.com/companies/endace>; follow us on Twitter <http://twitter.com/endace> This message contains Avago confidential information intended only for specific recipients and is not to be forwarded to anyone else. If you have received this message in error, please delete it immediately. Thank you
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Update to REAME.decode on Snort.org request Robert Cotter (Jul 28)