[Snort-sigs] false positive report

Chris Bennett chris at ...2392...
Mon Apr 19 05:00:20 EDT 2004

It was reported as NMAP.  It was not NMAP.

If it said "ICMP ECHO REQUEST" then it would be accurate.  By claiming it
was NMAP, it is generating a false positive.

----- Original Message ----- 
From: "Steve Drees" <drees at ...2397...>
To: "Chris Bennett" <chris at ...2392...>; <snort-sigs at lists.sourceforge.net>
Sent: Thursday, April 15, 2004 9:54 AM
Subject: RE: [Snort-sigs] false positive report

> > --
> > False Positives: I'm reporting a freakin false positive right now.
> >
> It wasn't a False Positive. What you were doing was a network scan.

More information about the Snort-sigs mailing list