Snort mailing list archives
new rule 40268
From: "Johnson, John" <jj () wfec com>
Date: Mon, 26 Sep 2016 18:49:55 +0000
Hey. The new rule 40268 (9/22/16) has triggered a couple of times here and I'm not really convinced its not a false positive. I see a match on the 32 characters in an email - what else can I do to verify this is a legitimate hit? -j
------------------------------------------------------------------------------
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- new rule 40268 Johnson, John (Sep 26)
- Re: new rule 40268 Stanwyck, Carraig - ASOC - Kansas City, MO (Sep 26)
- Re: new rule 40268 Joel Esler (jesler) (Sep 26)
- Re: new rule 40268 Stanwyck, Carraig - ASOC - Kansas City, MO (Sep 26)