[Snort-users] sfportscan - open ports

Jeremy Hewlett jh at ...1935...
Wed Mar 30 14:01:39 EST 2005


On Tue, Mar 29, Hin wrote:
> Can someone give me some advise on how to suppress the "portscan:
> open port" alert? I have put "suppress gen_id 122, sig_id 27" on the

Hin -

There is a fix for this in CVS' SNORT_2_3 branch. Could you check out
this branch and let me know if it suits your needs?







More information about the Snort-users mailing list