[Snort-users] Configuring False positives
erek at ...577...
Fri Nov 23 11:41:02 EST 2001
On Fri, 23 Nov 2001, Arvind Clemente wrote:
> I am new to snort. I am getting a lot of Code Red v2 alerts from
> other machines. How can i configure snort for false positives so that
> it does not alert me for only code red v2.
Find the rule in the corresponding rule file, then disable it with a '#' at
the front of the line.
More information about the Snort-users