[Snort-sigs] False positive on SID 469 (ICMP ping nmap)

Niklas Schiffler nick at ...1938...
Mon Oct 6 17:03:18 EDT 2003


i don't know if this is the right place to report this:

The online update function of Avast Antivirus (www.avast.com) generates
false positives on SID 469. It seems to use a ICMP ping message with data
size 0 to check if www.avast.com can be reached.


More information about the Snort-sigs mailing list