Re: how to disable spp_porscan?

[robe () alfa21 com (Roberto Suarez Soto)]

On Dec/18, Phil Wood wrote:

>   preprocessor stream4: noalerts

        Ok, I'm trying now, but ... what has stream4 to do with spp_portscan?
:-m (forgive me if this is told somewhere in the FAQs; "rtfm" would be a good
response, if so :-))

        [... a few minutes after ...]

        Nope, it doesn't work :-/ Thank you for the hint, anyway :-)

-- 
Roberto Suarez Soto                                     Alfa21 Outsourcing
    robe () alfa21 com                               http://www.alfa21.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users