Snort mailing list archives

preprocessor alert


From: ll <ibeginhere () gmail com>
Date: Wed, 04 Aug 2010 17:30:37 +0800

hi,all
the preprocess create too many alerts. for example "stream5: Limit on 
number of overlapping TCP packets reached".whether I disabled the 
preprocessor stream5 or some way can disabled there alerts ? which will 
be better ? and if I want to disabled some alerts created by the 
preprocessor when I know the the preprocessor SID,how to do that .I just 
know how to disabled the rules when I know the rules SID.


------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: