[Snort-users] spp_portscan

Andreas Brenk ab at ...2860...
Fri Sep 28 12:32:05 EDT 2001

Have a look inside snort.conf.

It's a preprocessor...

Am Fri, Sep 28, 2001 at 03:22:28PM -0400, schrieb cdowns:
> anyone know where spp_portscan is in the *.rules files ? so i can shut
> it off. Im not seeing doing: grep -r "spp_portscan" /rules/*

Andreas Brenk
mailto:ab at ...2860...

AegisNet IT-Dienstleistungen
Postfach 62 03 71
22403 Hamburg
Tel. und Fax: +49-(0)700-AEGISNET

More information about the Snort-users mailing list