stream4 alerts

[Tobias von Koch <tvk () weltcharts de>]

hi,

stream4 (1.8p1) generates lots of alerts like the following on one of my 
hosts:

07/21-12:39:11.129903  [**] [111:3:1] spp_stream4: Possible RETRANSMISSION 
detection [**] {TCP} 62.158.XXX.XXX:1023 -> host:22
07/21-12:39:27.349565  [**] [111:3:1] spp_stream4: Possible RETRANSMISSION 
detection [**] {TCP} 62.158.XXX.XXX:1027 -> host:6667
[...]

Now my question: Is it possible to turn off some of the alerts stream4 is 
able to generate (without modifying the source :>)?

I'm sure this alert isn't really one in my case, because 
both hosts are mine and they are ok (just doing SSH/IRC between them).

tvk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users