[Snort-sigs] Holy false Positives

Joe Matusiewicz joem at ...555...
Wed Jun 16 07:34:02 EDT 2004

At 10:01 AM 6/16/2004, Goodson, Jacob wrote:
>What could be causing the L3retriever Ping signature to trigger?  I think 
>it is a false positive.

Some windows third party software that checks to see if a host is up.  I 
turn this rule off to turn down the noise that I don't want to see.

-- Joe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040616/a67e717f/attachment.html>

More information about the Snort-sigs mailing list