[Snort-users] How can I filter...
vosipov at ...2096...
Fri Jun 22 08:53:32 EDT 2001
RTFM and comment out all the rules in icmp.conf (or maybe somewhere else
in .conf files) which match the signature you don't want to be reported
Fred Edwards wrote:
> I have the feeling that this question has been asked more times then I
> could count, but I would like a bit of help just the same...
> How can I filter out or remove the incredible amounts of "snort: ICMP
> Destination Unreachable" alerts that I get?
> Fred Edwards
> Library Systems Technician
> Patrick Power Library
> Saint Mary's University
> Halifax, Nova Scotia B3H 3C3
> Phone: (902) 420-5096
> Fax: (902) 420-5561
> E-mail: Fred.Edwards at ...2110...
> Website: http://www.stmarys.ca/administration/library/
> Quis custodiet ipsos custodes?
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users