[Snort-sigs] Re: DDOS false positive

Askin, Hank - XICN Hank.Askin at ...2082...
Mon Dec 29 05:54:01 EST 2003

BI :According to the signature db, there aren't any known false positives,
BI :but I seem to be getting a bunch when people go the autoconnect (now
BI :autotrader) website.

	Are you using HP Openview in your environment? I have read that this
is known to cause false positives for this event.

-Hank Askin

More information about the Snort-sigs mailing list