[Snort-sigs] sig 528 false positive
wintermt at ...1143...
Wed Jul 14 13:12:54 EDT 2004
Just sending false positive info on sig 528.
Sorry if it's redundant.
# This is a template for submitting snort signature descriptions to
# the snort.org website
# Ensure that your descriptions are your own
# and not the work of others. References in the rules themselves
# should be used for linking to other's work.
# If you are unsure of some part of a rule, use that as a commentary
# and someone else perhaps will be able to fix it.
bad-traffic loopback traffic
Ease of Attack:
When ices and icecast reside on the same server, this sig will be triggered.
More information about the Snort-sigs