casa-mp-base

--- etc/snort.conf.org  2007-03-22 10:34:21.000000000 -0700

+++ etc/snort.conf  2007-04-18 21:48:31.000000000 -0700

@@ -194,7 +194,7 @@

 # Load all dynamic preprocessors from the install path

 # (same as command line option --dynamic-preprocessor-lib-dir)

 #

-dynamicpreprocessor directory /usr/local/lib/snort_dynamicpreprocessor/

+# dynamicpreprocessor directory /usr/local/lib/snort_dynamicpreprocessor/

 #

 # Load a specific dynamic preprocessor library from the install path

 # (same as command line option --dynamic-preprocessor-lib)

@@ -204,7 +204,7 @@

 # Load a dynamic engine from the install path

 # (same as command line option --dynamic-engine-lib)

 #

-dynamicengine /usr/local/lib/snort_dynamicengine/libsf_engine.so

+# dynamicengine /usr/local/lib/snort_dynamicengine/libsf_engine.so

 #

 # Load all dynamic rules libraries from the install path

 # (same as command line option --dynamic-detection-lib-dir)

@@ -235,7 +235,7 @@

 #

 # See README.flow for additional information

 #

-preprocessor flow: stats_interval 0 hash 2

+# preprocessor flow: stats_interval 0 hash 2

 # frag2: IP defragmentation support

 # -------------------------------

@@ -320,8 +320,8 @@

 #                           bind_to 10.3.1.0/24

 #preprocessor frag3_engine: policy bsd

-preprocessor frag3_global: max_frags 65536

-preprocessor frag3_engine: policy first detect_anomalies

+#preprocessor frag3_global: max_frags 65536

+#preprocessor frag3_engine: policy first detect_anomalies

 # stream4: stateful inspection/stream reassembly for Snort

@@ -400,7 +400,7 @@

 #   13      Stealth scan: SYN-FIN scan

 #   14      TCP forward overlap

-preprocessor stream4: disable_evasion_alerts

+#preprocessor stream4: disable_evasion_alerts

 # tcp stream reassembly directive

 # no arguments loads the default configuration 

@@ -436,7 +436,7 @@

 #

 # Using the default random flushpoints, the smallest flushpoint is 512,

 # and the largest is 1725 bytes.

-preprocessor stream4_reassemble

+#preprocessor stream4_reassemble

 # stream5: Target Based stateful inspection/stream reassembly for Snort

 # ---------------------------------------------------------------------

@@ -472,11 +472,11 @@

 # lots of options available here. See doc/README.http_inspect.

 # unicode.map should be wherever your snort.conf lives, or given

 # a full path to where snort can find it.

-preprocessor http_inspect: global \