|
|||||||||||
|
Re: [Snort-devel] question about 'within' rule option
From: Martin Roesch <roesch(at)sourcefire.com>
Date: Fri Feb 14 2003 - 09:26:28 EST -Marty On 2/13/03 3:18 PM, "Lawrence Reed" <Lawrence.Reed@noaa.gov> wrote: > I am receiving a lot of false postitives from sids 1734 and 1972 ( see
-- Martin Roesch - Founder/CTO, Sourcefire Inc. - (410)290-1616 Sourcefire: Professional Snort Sensor and Management Console appliances roesch(at)sourcefire.com - http://www.sourcefire.com Snort: Open Source Network IDS - http://www.snort.org ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ Snort-devel mailing list Snort-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/snort-develReceived on Fri Feb 14 09:33:26 2003 This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:08:03 EDT |
||||||||||
|
|||||||||||