[Snort-users] How can I filter...

Vitaly Osipov vosipov at ...2096...
Fri Jun 22 08:53:32 EDT 2001


RTFM and comment out all the rules in icmp.conf (or maybe somewhere else
in .conf files) which match the signature you don't want to be reported
:)

regards,
Vitaly.

Fred Edwards wrote:
> 
> I have the feeling that this question has been asked more times then I
> could count, but I would like a bit of help just the same...
> 
> How can I filter out or remove the incredible amounts of "snort: ICMP
> Destination Unreachable" alerts that I get?
> 
> Thanks!
> 
> ============================================
> Fred Edwards
> Library Systems Technician
> Patrick Power Library
> Saint Mary's University
> Halifax, Nova Scotia    B3H 3C3
> 
> Phone:    (902) 420-5096
> Fax:        (902) 420-5561
> E-mail:    Fred.Edwards at ...2110...
> Website: http://www.stmarys.ca/administration/library/
> ============================================
> 
> Quis custodiet ipsos custodes?
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list