Re: help with "disable_decode_alerts" in the config file

[Erek Adams <erek () snort org>]

On Thu, 23 Jan 2003 AppleAnnie331 () aol com wrote:

> In the archives I found the solution to a problem I am having with
> "(snort_decoder) Unknown Datagram decoding problem" and ICMP messages.
> I am supposed to disable_decode_alerts in the config file.  I don't know
> where in the config file to do that.  Does it going in one of the
> preprocessor sections?  If so which one.  Thanks in advance for any help
> you can provide.

http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.1.3

Search for 'disable_decode_alerts'.

Since this is under the 'config' section, it would be something like
"config:  disable_decode_alerts".

Always check the docs and FAQ!!  :)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users