Re: established connection and ids signatures
"lola marais" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
>This used to be accomplished with the -z switch. You might want to take >a look at deactivating the stream4 preprocessor in snort.conf, too. thanks andrew, i disabled the following parameters and it worked. the snort process no longer looks at the state of the session when the binary files are re-passed. # preprocessor stream4: disable_evasion_alerts # preprocessor stream4_reassemble _________________________________________________________________ Access your MSN favourites from anywhere - download MSN Toolbar today! http://toolbar.msn.co.za?DI=1054&XAPID=2083 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions