looks false-positive

[David Bianco <bianco () jlab org>]

Ronneil Camara writes:
> I've got an SMTP chameleon overflow. And below is the payload.
> Looks like it's a legitimate mail.

It seems legitimate.  It might not be a good idea to post the contents of
people's email to a public list like this, though, especially when the
text includes email addresses.

     David

-- 
David J. Bianco, GSEC           <bianco () jlab org>
Thomas Jefferson National Accelerator Facility

     The views expressed herein are soley those of the author and
            not those of SURA/Jefferson Lab or the US DOE.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users