[Snort-users] how to remove (portscan : open port) alert

FRANCIS PROVENCHER francis.provencher at ...14009...
Tue Oct 16 11:48:12 EDT 2007


Hi all, i read on some forum how to stop alarm from (portscan: Open
port).
 
Some tell to include in snort.conf this lines;
 
suppress gen_id 122, sig_id 27:
suppress gen_id 122, sig_id 19:
suppress gen_id 119, sig_id 4:

I add it but alerts seem to continues
 
Any one can help me please?
 
 
Francis Provencher
Ministère de la Sécurité publique du Québec
Direction des technologies de l'information
Division de la sécurité informatique
Tél: 1 418 646-3258
Courriel:   Francis.provencher at ...14010... 
 
CEH - Certified Ethical Hackers
SSCP - System Security Certified Practitionner
Sec+ - Security +
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20071016/9b106d96/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: FRANCIS PROVENCHER4.vcf
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20071016/9b106d96/attachment.ksh>


More information about the Snort-users mailing list