[Snort-users] Disabling two alert messages

Jukka Juslin jtjuslin at ...7943...
Tue Apr 29 05:20:44 EDT 2003


I am using the newest stable snort release. After moving from 1.9 I now
encounter two alerts that are so numerous, that they are filling up my
hard disk:

(snort_decoder): Truncated Tcp Options
(snort_decoder): T/TCP Detected

Do you know what is the best way to disable these? They produce too much
noise - I am not able to see the real alerts any more.

Thanks,
Jukka




More information about the Snort-users mailing list