[Snort-sigs] False Positive Information

Nigel Houghton nigel at ...435...
Tue Dec 30 08:38:02 EST 2003


A quick note for everyone, thanks for all the false positive information
that has been submitted to the list recently. I am looking in to each case
and will include the information in the rule documentation database where
appropriate.

Keep up the good work and don't forget, the documents need to evolve, just
because a document exists for a rule doesn't mean it can't be improved.
False positive/negative information is very useful to everyone using
Snort and needs to be included in the rule doc.

-----------------------------------------------------------------------
Nigel Houghton        Security Research Engineer        Sourcefire Inc.
                     Vulnerability Research Team

"In an emergency situation involving two or more officers of equal rank,
seniority will be granted to whichever officer can program a vcr."




More information about the Snort-sigs mailing list