Re: snort 1.7 vs snort 1.8p1 less info.. why?

[Patrick Hawley <phawley () ociweb com>]

On Thu, 26 Jul 2001, alexus wrote:
> > If you want to see these alerts just turn them on.  Just be forwarned
> > that you will suffer a performance hit.  You will see a huge increase
> > in the number of alerts generated.
> would you please tell me where and how would i could enable them?

look at the bottom of your snort.conf and you will see your rules
files...look for:

# include icmp-info.rules

and remove the "#" from that line, and you should be set.

Patrick


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users