From 205a9bb4c5e69dbba6656ae99f183ed7cb5d2e68 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Sat, 7 Jul 2007 21:26:33 +0000
Subject: Reduce false positives.

See
 http://forum.pfsense.org/index.php/topic,3616.0/topicseen.html

---
 packages/snort/snort.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'packages/snort/snort.inc')

diff --git a/packages/snort/snort.inc b/packages/snort/snort.inc
index 5f456922..e80b11fc 100644
--- a/packages/snort/snort.inc
+++ b/packages/snort/snort.inc
@@ -386,7 +386,7 @@ preprocessor telnet_decode
 #sf Portscan
 preprocessor sfportscan: proto { all } \
 						scan_type { all } \
-						sense_level { high } \
+						sense_level { low } \
 						ignore_scanners { \$HOME_NET }
 							
 						
-- 
cgit v1.2.3