Snort mailing list archives
Re: disabling the new spew of spp_rpc_decode alerts
From: AppleAnnie331 () aol com
Date: Thu, 06 Mar 2003 15:01:29 -0500
preprocessor rpc_decode: 111 32771 no_alert_multiple_requests no_alert_large_fragments no_alert_incomplete in your config file does the trick ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- disabling the new spew of spp_rpc_decode alerts AppleAnnie331 (Mar 06)
- <Possible follow-ups>
- Re: disabling the new spew of spp_rpc_decode alerts AppleAnnie331 (Mar 06)
- Re: disabling the new spew of spp_rpc_decode alerts Jason Haar (Mar 06)
- ports running RPC svcs (was Re: disabling the new spew of spp_rpc_decode alerts) Bennett Todd (Mar 07)
- Re: disabling the new spew of spp_rpc_decode alerts Jason Haar (Mar 06)