Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 27 subscribers
  • Views 17803 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to disable snort_decoder rules?

DavidWilliams1

How do you disable snort_decoder rules?   Like this:

They don't show up in the Signature lists.


I know how to disable Individual Signatures, but the decoder don't show up.  I've even disabled the entire Misc category and it does not disable these.



This thread was automatically locked due to age.
Parents
  • 0

    Uh, the problem seems to has fixed itself.   All the erroneous "IPv4 broadcast" packet drops have stopped. 

    It seems to coincide with the outside interface (I'm in bridge mode) bouncing because the upstream router was restarted. 

    The last bad message was just before I see the IPv4 / IPv6 gateway up log messages.  After that, no bad snort hits.  Interface reset cause the snort rules to reload?

     Weird things going on here.

Reply
  • 0

    Uh, the problem seems to has fixed itself.   All the erroneous "IPv4 broadcast" packet drops have stopped. 

    It seems to coincide with the outside interface (I'm in bridge mode) bouncing because the upstream router was restarted. 

    The last bad message was just before I see the IPv4 / IPv6 gateway up log messages.  After that, no bad snort hits.  Interface reset cause the snort rules to reload?

     Weird things going on here.

Children
No Data