pop: Unknown POP3 response/command

[Matteo De Rosa <matteo.derosa () enea it>]

I have just installed snort and I observe a lot of false (I suppose) positive. I start from this:

 < Signature >   < Classification >      < Total # >     Sensor #        < Source Address >      < Dest. Address >      
 < First >       < Last > 
        [snort] pop: Unknown POP3 response      protocol-command-decode 2962(0%)        1       37      

Source address is correctly our mail-server. Dest address are our LAN client.
Can it a version problem from server and client ?
But, the thing that is close to my heart: how can i ack this event and don't see in BASE web front-end ?

Thanks to all for any contribution

Matteo


------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!