[Snort-users] snort 2.9.2 disable alerts for so_rules (p2p)

waldo kitty wkitty42 at ...14940...
Fri Feb 3 22:08:41 EST 2012


On 2/3/2012 09:22, Joel Esler wrote:
> The correct way of doing it, actually, is to use the disablesid.conf file in
> pulledpork and disable the sid. That way the comment will transverse updates.

that's in pulledpork but what about the rest of the world that doesn't/can't use 
pulledpork in their environment??? :? :(




More information about the Snort-users mailing list