Snort mailing list archives

sfportscan


From: JJ Truax <jtruax () optivel com>
Date: Thu, 26 May 2005 18:48:30 -0500

I'm getting too many false positives from sfportscan
is there an equivialnt to the following for sfportscan from portscan2

to preprocessor portscan2-ignoreports-to: 80 25 53 443 161
preprocessor portscan2-ignoreports-from: 80 139 53 443 137 123

JJ

Attachment: signature.asc
Description: OpenPGP digital signature


Current thread: