Snort mailing list archives
pop: Unknown POP3 response/command
From: Matteo De Rosa <matteo.derosa () enea it>
Date: Fri, 18 Dec 2015 16:43:29 +0100
I have just installed snort and I observe a lot of false (I suppose) positive. I start from this: < Signature > < Classification > < Total # > Sensor # < Source Address > < Dest. Address > < First > < Last > [snort] pop: Unknown POP3 response protocol-command-decode 2962(0%) 1 37 Source address is correctly our mail-server. Dest address are our LAN client. Can it a version problem from server and client ? But, the thing that is close to my heart: how can i ack this event and don't see in BASE web front-end ? Thanks to all for any contribution Matteo
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- pop: Unknown POP3 response/command Matteo De Rosa (Dec 18)
- Re: pop: Unknown POP3 response/command Joel Esler (jesler) (Dec 18)
- Re: pop: Unknown POP3 response/command Al Lewis (allewi) (Dec 18)