Snort mailing list archives

how to remove (portscan : open port) alert


From: "FRANCIS PROVENCHER" <francis.provencher () msp gouv qc ca>
Date: Tue, 16 Oct 2007 11:48:12 -0400

Hi all, i read on some forum how to stop alarm from (portscan: Open
port).
 
Some tell to include in snort.conf this lines;
 
suppress gen_id 122, sig_id 27:
suppress gen_id 122, sig_id 19:
suppress gen_id 119, sig_id 4:

I add it but alerts seem to continues
 
Any one can help me please?
 
 
Francis Provencher
Ministère de la Sécurité publique du Québec
Direction des technologies de l'information
Division de la sécurité informatique
Tél: 1 418 646-3258
Courriel:   Francis.provencher () Msp gouv qc ca 
 
CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +

Attachment: FRANCIS PROVENCHER4.vcf
Description:

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: