Snort mailing list archives

Too many false positives - Forgot the screenshot


From: "Paul Slinski" <pauls () globaliqx com>
Date: Fri, 18 Jan 2002 10:10:04 -0500



-----Original Message-----
From: Paul Slinski [mailto:pauls () globaliqx com]
Sent: Friday, January 18, 2002 10:06 AM
To: Snort-Users
Subject: Too many false positives
Sensitivity: Confidential


Does this look like msn access to you?

I have 3 Linux servers running 1.8.3 all logging to a MySql 
database at a remote location through ssh tunnels. Sometimes, I'm 
not sure why the logs show strange results for signatures.

Is this a common problem? I can send more examples if needed.

---
Paul Slinski <pauls () globaliqx com>
Network Administrator
Global IQX 


Current thread: