[Snort-sigs] false positive FYI

Daniel Schreiber scrober at outlook.de
Thu Dec 7 14:45:26 EST 2017


these Rule here:
119:33 (http_inspect) UNESCAPED SPACE IN HTTP URI

Cause some false positve on my setup.

it blocks Apple Facetime server IPs and steam akamaitechnologies IPs that seems to reffer to the Steam Network.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20171207/d2a510f8/attachment.html>

More information about the Snort-sigs mailing list