[Snort-sigs] any way to disable these alerts:http_inspect: OVERSIZE REQUEST-URI DIRECTORY

Joel Esler joel.esler at ...435...
Mon Jul 31 08:33:23 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Russell,

You can suppress a preprocessor alert, the same as you would suppress  
a rule alert.


On Jul 30, 2006, at 11:29 PM, Russell Fulton wrote:

> No matter how high I set the limit on this there seem to be some sites
> that use longer uris.  Is there any way of disabling the alerts
> altogether...
>
> R
>
> ---------------------------------------------------------------------- 
> ---
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to  
> share your
> opinions on IT & business topics through brief surveys -- and earn  
> cash
> http://www.techsay.com/default.php? 
> page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>

+---------------------------------------------------------------------+
Joel Esler          Senior Security Consultant         1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
        Snort - Open Source Network IPS/IDS -- http://www.snort.org
          GPG Key: http://demo.sourcefire.com/jesler.pgp.key
            AIM:eslerjoel  YMSG:eslerjoel Gtalk:eslerj
+---------------------------------------------------------------------+


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFEzfiTKbCSyXHckt4RAl0aAKCR8m3VauRq5iZrJR/S9F7MB00ZwwCggq+X
cQfkXoP5wsITDw4viHIXj8E=
=dh4A
-----END PGP SIGNATURE-----




More information about the Snort-sigs mailing list