[Snort-sigs] False +ves: SID 2517 Message IMAP PCT Client_Hello overflow attempt

Russell Fulton r.fulton at ...575...
Tue Jun 22 16:59:03 EDT 2004

H Folks,

I am seeing large numbers of false +ves on this rule, is there anything
that can be done to tighten it up?

Russell Fulton, Computer and Network Security Officer.
The University of Auckland, New Zealand.

More information about the Snort-sigs mailing list