[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] FP 3:16663
From:       Joel Esler <jesler () sourcefire ! com>
Date:       2010-10-15 14:41:30
Message-ID: 26D77FC1-E1F4-417C-8ED7-EB821CCD90A1 () sourcefire ! com
[Download RAW message or body]

Can you submit some pcaps, if possible, to research?

J

On Oct 14, 2010, at 3:16 PM, waldo kitty wrote:

> 
> 
> it appears that 3:16663:1 is triggering in the middle of a datastream... it has 
> halted several java updates on w2k boxen at 98%...  i finally had to 
> disable/suppress it for those updates to complete :?
> 
> 
>    ,,_     -*> Snort! <*-
>   o"  )~   Version 2.8.6.1 GRE (Build 39)
>    ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
>            Copyright (C) 1998-2010 Sourcefire, Inc., et al.
>            Using PCRE version: 7.8 2008-09-05
>            Using ZLIB version: 1.2.3
> 
> 
> ------------------------------------------------------------------------------
> Beautiful is writing same markup. Internet Explorer 9 supports
> standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
> Spend less time writing and  rewriting code and more time creating great
> experiences on the web. Be a part of the beta today.
> http://p.sf.net/sfu/beautyoftheweb
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs

--
Joel Esler
302-223-5974


------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
[prev in list] [next in list] [prev in thread] [next in thread]