[Snort-users] removing a ruleset

Martin Roesch roesch at ...421...
Thu Nov 30 15:46:15 EST 2000


Open up ping-lib, find the line with that message in its "msg" field, comment
it out with a "#".

   -Marty

"Souza, Chris" wrote:
> 
> Hi,
> 
> I get this log a lot
> 
> [**] PING-ICMP Destination Unreachable [**]
> 11/28-18:24:22.211961 209.251.34.129 -> 192.168.100.197
> ICMP TTL:114 TOS:0x0 ID:56514
> DESTINATION UNREACHABLE: PORT UNREACHABLE
> 
> How could i remove the ruleset to exclude detection of PING-ICMP
> 
> Thanks
> 
>  Chris Souza
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list