<html><head></head><body bgcolor="#FFFFFF"><div>If you comment the rule out in the stub file as JJ suggested, it should turn the rule off.  <br><br>--<div>Joel Esler</div></div><div><br>On Feb 2, 2012, at 6:25 PM, "Lawrence R. Hughes, Sr." <<a href="mailto:lhughes@...14822...">lhughes@...846....14822...</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>

<meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 8.00.6001.19120">

<div><font size="2" face="Arial">no, that does not work, infact this is what the 
p2p.rules header says:</font></div>
<div><font size="2" face="Arial"># Autogenerated skeleton rules file.  Do NOT 
edit by hand</font></div>
<div><font size="2" face="Arial"></font> </div>
<div> </div>
<blockquote style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px" dir="ltr">
  <div style="FONT: 10pt arial">----- Original Message ----- </div>
  <div style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><b>From:</b> 
  <a title="cummingsj@...11827..." href="mailto:cummingsj@...11827...">JJ Cummings</a> 
  </div>
  <div style="FONT: 10pt arial"><b>To:</b> <a title="lhughes@...14972...." href="mailto:lhughes@...14822...">Lawrence R. Hughes, Sr.</a> </div>
  <div style="FONT: 10pt arial"><b>Cc:</b> <a title="snort-users@...8192...sourceforge.net" href="mailto:snort-users@lists.sourceforge.net>"><snort-users@lists.sourceforge.net></a> 
  </div>
  <div style="FONT: 10pt arial"><b>Sent:</b> Thursday, February 02, 2012 6:21 
  PM</div>
  <div style="FONT: 10pt arial"><b>Subject:</b> Re: [Snort-users] snort 2.9.2 
  disable alerts for so_rules (p2p)</div>
  <div><br></div>
  <div>#</div>
  <div><br><br>Sent from the iRoad</div>
  <div><br>On Feb 2, 2012, at 18:05, "Lawrence R. Hughes, Sr." <<a href="mailto:lhughes@...14822...">lhughes@...14822...</a>> 
  wrote:<br><br></div>
  <div></div>
  <blockquote type="cite">
    <div>
    <meta name="GENERATOR" content="MSHTML 8.00.6001.19120">
    <style></style>

    <div><font size="2" face="Arial">Hi,</font></div>
    <div><font size="2" face="Arial"></font> </div>
    <div><font size="2" face="Arial">I want to disable alerts for sid:7019 gid:3 
    (under p2p.rules in so_rules) how would I turn off that single 
    rule?</font></div>
    <div><font size="2" face="Arial"></font> </div>
    <div><font size="2" face="Arial">Thanks,</font></div>
    <div><font size="2" face="Arial">Larry</font></div>
    <div> </div></div></blockquote>
  <blockquote type="cite">
    <div><span>------------------------------------------------------------------------------</span><br><span>Keep 
    Your Developer Skills Current with LearnDevNow!</span><br><span>The most 
    comprehensive online learning library for Microsoft 
    developers</span><br><span>is just $99.99! Visual Studio, SharePoint, SQL - 
    plus HTML5, CSS3, MVC3,</span><br><span>Metro Style Apps, more. Free future 
    releases when you subscribe now!</span><br><span><a href="http://p.sf.net/sfu/learndevnow-d2d">http://p.sf.net/sfu/learndevnow-d2d</a></span></div></blockquote>
  <blockquote type="cite">
    <div><span>_______________________________________________</span><br><span>Snort-users 
    mailing list</span><br><span><a href="mailto:Snort-users@...3054...forge.net">Snort-users@lists.sourceforge.net</a></span><br><span>Go 
    to this URL to change user options or unsubscribe:</span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/snort-users">https://lists.sourceforge.net/lists/listinfo/snort-users</a></span><br><span>Snort-users 
    list archive:</span><br><span><a href="http://www.geocrawler.com/redir-sf.php3?list=snort-users">http://www.geocrawler.com/redir-sf.php3?list=snort-users</a></span><br><span></span><br><span>Please 
    visit <a href="http://blog.snort.org">http://blog.snort.org</a> to stay 
    current on all the latest Snort 
news!</span></div></blockquote></blockquote>
</div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br><span>Keep Your Developer Skills Current with LearnDevNow!</span><br><span>The most comprehensive online learning library for Microsoft developers</span><br><span>is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,</span><br><span>Metro Style Apps, more. Free future releases when you subscribe now!</span><br><span><a href="http://p.sf.net/sfu/learndevnow-d2d">http://p.sf.net/sfu/learndevnow-d2d</a></span></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Snort-users mailing list</span><br><span><a href="mailto:Snort-users@lists.sourceforge.net">Snort-users@lists.sourceforge.net</a></span><br><span>Go to this URL to change user options or unsubscribe:</span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/snort-users">https://lists.sourceforge.net/lists/listinfo/snort-users</a></span><br><span>Snort-users list archive:</span><br><span><a href="http://www.geocrawler.com/redir-sf.php3?list=snort-users">http://www.geocrawler.com/redir-sf.php3?list=snort-users</a></span><br><span></span><br><span>Please visit <a href="http://blog.snort.org">http://blog.snort.org</a> to stay current on all the latest Snort news!</span></div></blockquote></body></html>