Re: [Snort-users] Help to configure SNORT

At 04:25 PM 12/23/2003, Lorenzo Rossi wrote:

>Could you help me to solve this problem?

Ok, you made it to snort-users... did you get the rest of my message? I
made the effort to offer some suggestions about your problem itself, and
you reposted your question without any changes to reflect that you'd tried
my suggestions.


----------------
You should be able to get rid of these by configuring spp_stream4 with
disable_evasion_alerts.

This is also the default setting in the default snort.conf, so I'm not sure
why you've been getting these alerts.
----------------

Do you already have disable_evasion_alerts as a parameter to spp_stream4 in
your snort.conf?




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users