[Snort-sigs] 2522 WEB-MISC SSLv3 invalid Client_Hello attempt FP's

Matthew Jonkman jonkman at ...2436...
Mon May 10 10:21:52 EDT 2004

I'm getting a false positive on every single ssl request to and from 
clients and servers. IIS, apache, the whole deal. And none are attacks.

Anyone else seeing this? I don't have a dump of a real attack to use to 
try to pick this apart.


Matthew Jonkman, CISSP
Senior Security Engineer

More information about the Snort-sigs mailing list