Re: FP 3:16663

[Joel Esler <jesler () sourcefire com>]

Can you submit some pcaps, if possible, to research?

J

On Oct 14, 2010, at 3:16 PM, waldo kitty wrote:

> it appears that 3:16663:1 is triggering in the middle of a datastream... it has 
> halted several java updates on w2k boxen at 98%...  i finally had to 
> disable/suppress it for those updates to complete :?
>
>
>    ,,_     -*> Snort! <*-
>   o"  )~   Version 2.8.6.1 GRE (Build 39)
>    ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
>            Copyright (C) 1998-2010 Sourcefire, Inc., et al.
>            Using PCRE version: 7.8 2008-09-05
>            Using ZLIB version: 1.2.3
>
>
> ------------------------------------------------------------------------------
> Beautiful is writing same markup. Internet Explorer 9 supports
> standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
> Spend less time writing and  rewriting code and more time creating great
> experiences on the web. Be a part of the beta today.
> http://p.sf.net/sfu/beautyoftheweb
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs

--
Joel Esler
302-223-5974


------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs