[Snort-sigs] Lotsa 13974

Alex Kirk akirk at ...435...
Wed Oct 5 12:04:10 EDT 2011


FWIW, it hasn't gone through. I'll sic the web team on that.

On Wed, Oct 5, 2011 at 11:54 AM, Lay, James <james.lay at ...3513...>wrote:

> From: Alex Kirk [mailto:akirk at ...435...]
> Sent: Wednesday, October 05, 2011 9:47 AM
> To: Lay, James
> Cc: snort-sigs at lists.sourceforge.net
> Subject: Re: [Snort-sigs] Lotsa 13974
>
> Whenever you've got something you're concerned is a false positive, we
> need a PCAP to do any sort of diagnostics on the matter. I've seen you
> specifically use the snort.org form, and that's been most helpful for us
> dealing with issues like this. If you could send along PCAP data, via
> whatever method you prefer, on these, that'd be great.
>
> Hi Alex,
>
> Last couple days I've tried to use the uploads link, but I get an error
> and I'm not sure if it goes through or not.  I'll send along to the
> research at ...435... instead.  Thanks Alex.
>
> James
>



-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk at ...435...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20111005/01079dc7/attachment.html>


More information about the Snort-sigs mailing list