[Snort-sigs] False +ves: SID 2517 Message IMAP PCT Client_Hello overflow attempt

Russell Fulton r.fulton at ...575...
Tue Jun 22 16:59:03 EDT 2004


H Folks,

I am seeing large numbers of false +ves on this rule, is there anything
that can be done to tighten it up?

Russell.
-- 
Russell Fulton, Computer and Network Security Officer.
The University of Auckland, New Zealand.





More information about the Snort-sigs mailing list