SSL DoS Signatures

["Gibson, Nathan J. (HSC)" <Nathan-Gibson () ouhsc edu>]

Has anyone see an uptick on the amount of hits for the SSL Dos Signatures listed below. 12 hours ago we started seeing 
a lot of hits on these for signatures. We are still investigating but right now it appears it might be a false 
positive.  Wanted to check and see if anyone else has seen an uptick.

At this point we are thinking it might have been a browser update or something.


20436
20437
20438
20439

http://vrt-blog.snort.org/2011/10/ssl-dos-snort-and-you.html

GIBBY
_____________________________
Nathan J. Gibson, MsIA, CISSP, CISM,CCNA, MCSA
IT Architect
Infrastructure Services
The University of Oklahoma HSC
voice: 405.271.2644 x50340
fax:    405.271.2181
Feedback?  Email comments to Chris Hodges<mailto:chris-hodges () ouhsc edu?subject=Heads%20up%20about%20Gibby>
--------------------------
CONFIDENTIALITY NOTICE: This e-mail communication and any attachments may contain confidential and privileged 
information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby 
notified that you have received this communication in error and that any review, disclosure, dissemination, 
distribution or copying of it or its contents is prohibited. If you have received this communication in error, please 
destroy all copies of this communication and any attachments.

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!