[Snort-users] Configuring False positives

Erek Adams erek at ...577...
Fri Nov 23 11:41:02 EST 2001

On Fri, 23 Nov 2001, Arvind Clemente wrote:

>     I am new to snort. I am getting a lot of Code Red v2 alerts from
> other machines. How can i configure snort for false positives so that
> it does not alert me  for only code red v2.

Find the rule in the corresponding rule file, then disable it with a '#' at
the front of the line.

Erek Adams

More information about the Snort-users mailing list