snort-sigs March 2011 archive
Main Archive Page > Month Archives  > snort-sigs archives
snort-sigs: Re: [Snort-sigs] GPL sig 1313

Re: [Snort-sigs] GPL sig 1313

From: Nigel Houghton <nhoughton_at_nospam>
Date: Fri Mar 18 2011 - 17:43:04 GMT
To: "Weir, Jason" <jason.weir@nhrs.org>

On Fri, 18 Mar 2011 12:01:47 -0400, Weir, Jason wrote:
> Seeing what could be a FP on 1313
>
> Here's the data - no "up skirt" that I can see....
>
> -J
>

Is that SID correct? We don't have a rule with that particular SID.

-- Nigel Houghton Head Mentalist SF VRT Department of Intelligence Excellence http://vrt-blog.snort.org/ && http://labs.snort.org/ ------------------------------------------------------------------------------ Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d _______________________________________________ Snort-sigs mailing list Snort-sigs@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org