[Prelude NIDS] manager-addr = 127.0.0.1; user = prelude; [Tcp-Reasm] statefull-only; both; [SnortRules] ruleset=/usr/local/etc/prelude-nids/ruleset/prelude.rules; [ScanDetect] high-port-cnx-count = 50; low-port-cnx-count = 5; cnx-ttl = 60; [Shellcode] nops_raise_alert = 60; [TelnetMod] port-list = 23 21; [HttpMod] double-encode; flip-backslash; max-whitespace = 10; codepage-file = /usr/local/etc/prelude-nids/unitable.txt; codepage-number = 437; port-list = 80 8080;