Default signature
set was used with the following changes:
All "LDP" signatures enabled
All "SNMP" signatures enabled
All "TCP" signatures disabled
"Authentication::Authentication BE" disabled
"FTP::Compliance" disabled
"WWW" signatures enabled: apache, iis attacks,
cgi attacks, coldfusion attacks, user-defined variables
"WWW" Signatures disabled: strict compliance,
bad guy, general web logs
Installed "OS Fingerprint" package (not included
base 3.2 install)
Variable "www_iis mult_host_alert_FILTER" =
0.0.0.0/0 (false positive)
Signatures were updated to current versions as of 3/26/2003.