[Snort-sigs] Snort SIG update - false positives on SID 2329

Dr. Christoph Wegener wegener at ...2349...
Mon Apr 5 07:00:22 EDT 2004


Hi together,
due to an damned typo in the $SQL_SERVERS variable this "false"
positives happended - I am very SORRY for the unconvinience...

Thanks a lot for your help
Christoph

> What is the $SQL_SERVERS variable set to?
>
>> Corrective Action:
>> Maybe exclude UDP port 2049 (NFS).
>
> This may lead to False negatives.
-- 
WECON EDV-Consulting
c/o Dr. Christoph Wegener
Sudfeldstr. 15
D-58285 Gevelsberg
mailto:wegener at ...2349...




More information about the Snort-sigs mailing list