[Snort-users] threshold.conf and suppress 119 19

jason lytle jlytle.demandware at ...11827...
Thu Apr 14 17:47:04 EDT 2011


i had the same problem - wasn't able to suppress that in threshold.conf
I "silenced" the alert by editing snort.conf:

in the section preprocessor http_inspect_server:

I changed this default line:
max_header_length 750 \

to this:
max_header_length 0 \

essentially disabling the header length check

YMMV, but worked for me ;)
good luck!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110414/1c32ba91/attachment.html>


More information about the Snort-users mailing list