WEB-MISC long basic authorization string

[RAMALINGA Reddy <Rgreddy1 () covansys com>]

Hello,
        We are running snort on linux. I am getting  so many "WEB-MISC long
basic authorization string" alerts. I notice that for all these messages the
destination ip is our proxy server ( for accessing the internet). The number
of hits from various ips to our proxy server which result in "WEB-MISC long
basic authorization string" alert range from 21 to 500. What could be wrong
? Do I need to change the security policy at proxy server ?

Rali

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users