[Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES i d check returned userid "

Erek Adams erek at ...95...
Thu Jun 5 21:30:04 EDT 2003


On Wed, 4 Jun 2003, Esler, Joel  Contractor wrote:

> Then restart snort with the -o option and add the following line into your
> snort.conf  ==
> "config order: pass log alert activation dynamic"

If using '-o' there's no need to use 'config order: <foo>'.  -o uses the
same function as config order does to make taht change.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-sigs mailing list