Snort mailing list archives

RE: Is this right one?


From: "Briggs, Bruce" <Bruce.Briggs () suny edu>
Date: Tue, 25 Oct 2005 11:28:56 -0400

The format should be:
suppress gen_id 1, sig_id 1070

Make sure that you have an uncommented   include on snort.conf  for
threshold.conf.

Also you could comment out  sid_id 1070 in web-misc.rules

Many use oinkmaster to automatically update new Snort sigs and keep mods
to their Snort rules.

Bruce

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Peter
Rodger
Sent: Tuesday, October 25, 2005 10:35 AM
To: s
Subject: [Snort-users] Is this right one?

Hi all,
I try to suppress this one event .  
WEB-MISC WebDAV search access
I added suppress sid_id 1070 in the threshold.conf.
Is this right?

Thanks,

Peter



                
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: