[Snort-users] So many of false alerts

Syed Mohammad Talha talha at ...3474...
Fri Oct 19 22:17:14 EDT 2001


I am getting so many of false alerts, like;

MISC source port 53 to <1024         7648
UDP scan                                               594
DNS zone transfer [arachNIDS]        396
TCP ******S* scan                                    291
Virus - Possible pif Worm                    197

and lots of more, can some one help me in reducing these.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20011019/40c1fc7c/attachment.html>

More information about the Snort-users mailing list