[Snort-users] Little false alert 'warning'.

Vitaly McLain twistah at ...93...
Tue Aug 1 04:00:06 EDT 2000


Just wanted to drop a note and say that if you have Napster active on your
network, and you see alerts concerning "IDS162 -- Ping Nmap 2.36BETA", it is
probably a 'false alert'. I believe Napster clients send out a similiar ping
when a user is trying to connect to your computer.

Note that snort does include rules to check for Napster, but there are
Napster users out there that disable/remove these rules.

Vitaly McLain
twistah at ...93...
Hmm, it's 3:00am...

More information about the Snort-users mailing list