[Snort-sigs] false positive FYI

Daniel Schreiber scrober at outlook.de
Thu Dec 7 14:45:26 EST 2017


Hello,

these Rule here:
119:33 (http_inspect) UNESCAPED SPACE IN HTTP URI

Cause some false positve on my setup.

it blocks Apple Facetime server IPs and steam akamaitechnologies IPs that seems to reffer to the Steam Network.

Greetings



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20171207/d2a510f8/attachment.html>


More information about the Snort-sigs mailing list