Snort mailing list archives

Re: Query


From: Joel Esler <eslerj () gmail com>
Date: Wed, 1 Jun 2005 06:30:25 -0400

To disable all rules in Snort configuration...

edit snort.conf and comment "#" all the "$RULE_PATH/" lines at the bottom.

Frag2 preprocessor, please refer to Snort Manual..  good description in there.

Stream4..  See Snort Manual.

Joel

On 6/1/05, Mukesh <mukeshsuccess () yahoo com> wrote:
Hello Users, 
  
     Can anyone tell me 
  
  
1) How to disable all rules in Snort Configuration 
  
2) How to change preprocessor Frag2 (Change Session Timeout, Change
Fragmentation Buffer). 
  
3) How to change Preprocessor Stream4 
    (How to enable parameter for detecting stealth port, Session Timeout,
Default Reassembly buffer) 
  
  
Please mail me 
  
THE SOLUTION 
  
As soon as Possible.. 
  
  
Thanx a Lot, 
  
  
Regards, 
Mukesh.

 ________________________________
Do you Yahoo!?
 Yahoo! Mail - You care about security. So do we. 




-- 
Joel Esler
BASE Project Lead
http://sourceforge.net/projects/secureideas


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: