[Snort-users] spp_unidecode false positive

Ben Keepper bkeepper at ...4822...
Mon Feb 18 11:30:16 EST 2002


I am getting a lot of 

spp_unidecode: CGI Null Byte attack detected

and

spp_unidecode: Unicode Directory Transversal attack detected

coming from my firewall NAT IP address going to particular web sites
(Compaq and Ingrammicro).

Any way to eliminate this false positive.

Thanks,

Ben




More information about the Snort-users mailing list