inliniac/suricata — pull request #594 by ken-tilera (2013-10-17 03:58:35+00:00)
Title: Allow disabling detect keywords from yaml file.

For comparing alerts generated from pcap file and live traffic replay, it is
useful to remote time dependency, such as thresholds. This change allows
disabling any set of keywords by adding them to the suricata.yaml file.

The format is:
testing:
detect-disable-keywords:
-
-

Any number of keywords can be specified.