TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

We see false positive for TCP_Overlap_Data commonly on traffic 
to/from busy website.


On Thu, 9 May 2002, Fiona Campbell wrote:

> 
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
> ----------------------------------------------------------------------------
> 
> Hi
> 
> We have RealSecure Network Sensor 6.0 and are seeing large numbers of 
> TCP_Overlap_Data events. The signature description says that there are no 
> false positives for this event and that they should never happen naturally 
> on a network, but have been observed in conjunction with malfuntioning 
> network equipment. With many of the events if I visit the site which is the 
> source I see more events occuring at the moment I enter the site. I have 
> been in contact with the source of some of the events and they have told me 
> that they do not have any malfunctioning network equipment but they believe 
> that use of an Internet VPN for conectivity to vendors can cause false 
> positives.
> 
> Has anyone else heard this or knows of any false positives for 
> TCP_Overlap_Data?
> 
> Thanks,
> 
> _________________________________________________________________
> MSN Photos is the easiest way to share and print your photos: 
> http://photos.msn.com/support/worldwide.aspx
> 
> 
> 



Reply via email to