[Snort-sigs] false positive

TRAVIS LEE tkmlee at ...3251...
Mon Sep 25 13:29:25 EDT 2006


 
Rule:  http_inspect: BARE BYTE UNICODE ENCODING
 
--
Sid: 119:4
 
 
--
False Positives: comes up all the time when our mcafee virusscan
enterprise clients contact our mcafee epo server over port 80.
 

 

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20060925/9c95c396/attachment.html>


More information about the Snort-sigs mailing list