Re: sfportscan - open ports

[Jeremy Hewlett <jh () sourcefire com>]

On Tue, Mar 29, Hin wrote:
> Can someone give me some advise on how to suppress the "portscan:
> open port" alert? I have put "suppress gen_id 122, sig_id 27" on the

Hin -

There is a fix for this in CVS' SNORT_2_3 branch. Could you check out
this branch and let me know if it suits your needs?





-------------------------------------------------------
This SF.net email is sponsored by Demarc:
A global provider of Threat Management Solutions.
Download our HomeAdmin security software for free today!
http://www.demarc.com/info/Sentarus/hamr30
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users