02-06-2004 11:21 AM - edited 03-09-2019 06:21 AM
Hello Everyone,
I know this is only an "informational" Sig but it has helped me locate chatty worms, et al chattiness.
I want to reconfigure this signature to ignor outbound port 80. There are just too many ads and banner ads server on the internet (which is causing this signature to produce quite a bit of FP) to filter.
Thanks for your help.
Damien
02-06-2004 02:28 PM
You cannot change the behavior of this signature in that manner because it is "built-in". Instead, you can disable it, create your own, and not look at port 80.
02-18-2004 02:34 PM
And how does one "not look" at a port?
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide