sfPortscan - false positive

[Izik Birka <Izik.Birka () hot net il>]

Hi
I'm trying to tune PortScan false Positive I found this explanation in snort site

Make use of the Priority Count, Connection Count, IP Count, Port Count, IP range, and Port range to determine false 
positives.

But I didn't understand where I can change those values ,

Who knows ?

Thanks
Izik Birka

This message (including any attachments) is intended only for the use of the individual or entity to which it is 
addressed and may contain materials protected by copyright or information that is non-public, proprietary, privileged, 
confidential, and exempt from disclosure under applicable law or agreement.

If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of 
this communication is strictly prohibited. If you have received this communication by error, notify the sender 
immediately and delete this message immediately.

Thank you.

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!