[Snort-sigs] sig 528 false positive

Dan Heideman wintermt at ...1143...
Wed Jul 14 13:12:54 EDT 2004


Just sending false positive info on sig 528.
Sorry if it's redundant.

 - Dan

# This is a template for submitting snort signature descriptions to
# the snort.org website
#
# Ensure that your descriptions are your own
# and not the work of others.  References in the rules themselves
# should be used for linking to other's work. 
#
# If you are unsure of some part of a rule, use that as a commentary
# and someone else perhaps will be able to fix it.
# 
# $Id$
#
# 

Rule:  
bad-traffic loopback traffic 
--
Sid:
528
--
Summary:

--
Impact:

--
Detailed Information:

--
Affected Systems:

--
Attack Scenarios:

--
Ease of Attack:

--
False Positives:
When ices and icecast reside on the same server, this sig will be triggered.
--
False Negatives:

--
Corrective Action:

--
Contributors:

-- 
Additional References:





More information about the Snort-sigs mailing list