Re: Stream preprocessor 3WHS port suppression

[wkitty42 () windstream net]

On 07/13/2016 05:44 AM, Andrea Venturoli wrote:
> On 07/07/16 13:27, Andrea Venturoli wrote:
>
> > > I don't think there's an option to ignore the ports as well.
> >
> > Is there a reason behind that?
> > I mean, would it be sensible to support filtering by port or would that
> > be illogical for whatever reason I'm not aware of?
>
> Since I got no answer, I guess there is no reason *not* to have this
> option; so I patched the source code and I think it's working.

ummm... did you try simply removing that option from the original conf line? 
normally if you want to disable an option in those processors, you just remove 
it...

-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!