[Snort-users] False positive rate in sfportscan

Bjarte Malmedal bjarte at ...12941...
Wed Jun 15 08:05:45 EDT 2005


Hi

I have been experimenting with sfportscan and notice that sensitivity 
level Medium produces more false positives than sensitivity level High. 
If I have understood how sfportscan works, this should be the other way 
around.

Can anyone offer an explanation on why these results are observed?

Thanks,
Bjarte




More information about the Snort-users mailing list