Snort mailing list archives
False Positives on POP3 USER & PASS overflow attempt?
From: "James M. Driskell" <jdriskell () ups edu>
Date: Thu, 1 May 2003 14:51:38 -0700
Hello All, We're seeing a ton of alerts for the POP3 USER & PASS overflow attempts. Could these alerts be false positives? A quick review of some of these alerts indicates that they are probably legitimate traffic. I'm running snort v 1.9.0 with the latest rules. Has anyone else seen this? Thanks, Jim Driskell ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- False Positives on POP3 USER & PASS overflow attempt? James M. Driskell (May 01)