[Snort-sigs] GPL sig 1313

Nigel Houghton nhoughton at ...435...
Fri Mar 18 13:43:04 EDT 2011


On Fri, 18 Mar 2011 12:01:47 -0400, Weir, Jason wrote:
> Seeing what could be a FP on 1313
> 
> Here's the data - no "up skirt" that I can see....
> 
> -J
> 

Is that SID correct? We don't have a rule with that particular SID.

--
Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/




More information about the Snort-sigs mailing list