[Snort-sigs] (smtp) Attempted response buffer overflow

Dan Roberts danroberts2604 at ...2420...
Wed Dec 3 11:10:36 EST 2014


Hello,
I'm running SNORT since many days right now, and every day I get many
alerts associated to (smtp) buffer overflow.
I've noticed that the alerts are generated on both incoming/outgoing SMTP
traffic.
Questions: does it make sense to limit the alerts on incoming smtp traffic
only ?
If yes, how to implement this ?
Thanks for your help

Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20141203/3d8ee3ff/attachment.html>


More information about the Snort-sigs mailing list