Re: Lotsa 13974

["Lay, James" <james.lay () wincofoods com>]

From: Alex Kirk [mailto:akirk () sourcefire com] 
Sent: Wednesday, October 05, 2011 9:47 AM
To: Lay, James
Cc: snort-sigs () lists sourceforge net
Subject: Re: [Snort-sigs] Lotsa 13974

Whenever you've got something you're concerned is a false positive, we
need a PCAP to do any sort of diagnostics on the matter. I've seen you
specifically use the snort.org form, and that's been most helpful for us
dealing with issues like this. If you could send along PCAP data, via
whatever method you prefer, on these, that'd be great.

Hi Alex,

Last couple days I've tried to use the uploads link, but I get an error
and I'm not sure if it goes through or not.  I'll send along to the
research () sourcefire com instead.  Thanks Alex.

James 

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!