[Snort-sigs] Holy False Positives Batman

Brian bmc at ...95...
Tue Jun 15 13:38:00 EDT 2004


On Tue, Jun 15, 2004 at 02:46:13PM -0500, Matthew Jonkman wrote:
> Nice work on all the new signature changes Brian. Except one of them. 
> 2570 is hitting a false positive on about every http hit in and out of 
> networks we watch. I can't find anything unusual about what it's hitting on.
> 
> Anyone else seeing this?

Really?  Can you send me pcap?

Brian




More information about the Snort-sigs mailing list