Snort mailing list archives
Re: Is there any statistic for snort rules false positive alert?
From: "Keith W. McCammon" <keith-list () mccammon org>
Date: Wed, 31 Mar 2004 14:18:21 -0500
False positives are target-dependent. A FP on Network_A may not be a FP on Network_B. Back to the drawing board...
Lin Zhong wrote:
Hi, I wonder whether there is any statistics for the false positive alert created by the current snort rules. And is there any other existing snort rules for the most updated virus, worms or malwares and give more specific alerts? Do you know where I can find more information on it?Thank you very much. Lin ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&opÌk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Is there any statistic for snort rules false positive alert? Lin Zhong (Mar 31)
- Re: Is there any statistic for snort rules false positive alert? Keith W. McCammon (Mar 31)