Update to REAME.decode on Snort.org request

[Robert Cotter <robert.cotter () avagotech com>]

Would it be possible to make it clearer which decode  ‘Options’ are
enabled/disabled by default.



At the moment you need to read down the list to item number 7.
‘enable_decode_oversized_alerts’
to see the text that says.



“Note that this is the only decoder alert option that is disabled by
default.”



This would help making it easier to point out to the not so experienced
what the original setting were without referring to the default snort.conf
in the ruleset.



Thanks in advance.





Regards



*Robert Cotter*

*Field Application Engineer – Endace, a division of Avago*



robert.cotter () avagotech com

DDI: +64 9 926 2931 Mob: +64 21 67 5550

LinkedIn: Robert Cotter <http://nz.linkedin.com/pub/robert-cotter/4/3b/9a8>;
Skype: endace.robert.cotter <skype:endace.robert.cotter?add>



Level 2, Building A

600 Great South Road

Ellerslie, Auckland 1051, New Zealand



Postal :-

PO Box 12894 Penrose

Auckland 1642, New Zealand



http://www.endace.com/; LinkedIn <http://www.linkedin.com/companies/endace>;
follow us on Twitter <http://twitter.com/endace>



This message contains Avago confidential information intended only for
specific recipients and is not to be forwarded to anyone else. If you have
received this message in error, please delete it immediately. Thank you

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!