Home page logo

snort logo Snort mailing list archives

Re: [Spam] Re: Possible FP 17363
From: "Lay, James" <james.lay () wincofoods com>
Date: Tue, 26 Oct 2010 11:14:17 -0600

Thanks Alex...I'll send them to the research email instead.




From: Alex Kirk [mailto:akirk () sourcefire com] 
Sent: Tuesday, October 26, 2010 11:08 AM
To: Lay, James
Cc: snort-sigs () lists sourceforge net
Subject: Re: [Snort-sigs] [Spam] Re: Possible FP 17363


Honestly, please keep sending them in. It's trivial enough for us to say
"hey, we already fixed that" in cases where we have, and if you've got
something we hadn't previously seen, you're helping everyone out.


Though I am still honestly confused at how several of the reports you've
sent in have failed to contain some of the fixed strings necessary for
detection. If you can send actual PCAPs, that would be helpful
(research () sourcefire com will do the trick if you don't want to send to
the list at large).

On Tue, Oct 26, 2010 at 1:01 PM, Lay, James <james.lay () wincofoods com>

I see.  The personal price is nice, however I'm sure I would have to go
business subscription.  I guess I'll stop posting false positives for
snort rules to the sig group since maybe it's already fixed.  From the



Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
alex.kirk () sourcefire com

Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
Snort-sigs mailing list
Snort-sigs () lists sourceforge net

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]