[Snort-sigs] Re: DDOS false positive

Askin, Hank - XICN Hank.Askin at ...2082...
Mon Dec 29 05:54:01 EST 2003


BI :According to the signature db, there aren't any known false positives,
BI :but I seem to be getting a bunch when people go the autoconnect (now
BI :autotrader) website.

	Are you using HP Openview in your environment? I have read that this
is known to cause false positives for this event.


-Hank Askin




More information about the Snort-sigs mailing list