Re: Help to configure SNORT

[Matt Kettler <mkettler () evi-inc com>]

At 04:25 PM 12/23/2003, Lorenzo Rossi wrote:

> Could you help me to solve this problem?

Ok, you made it to snort-users... did you get the rest of my message? I 
made the effort to offer some suggestions about your problem itself, and 
you reposted your question without any changes to reflect that you'd tried 
my suggestions.


----------------
You should be able to get rid of these by configuring spp_stream4 with 
disable_evasion_alerts.

This is also the default setting in the default snort.conf, so I'm not sure 
why you've been getting these alerts.
----------------

Do you already have disable_evasion_alerts as a parameter to spp_stream4 in 
your snort.conf?




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users