TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
We also see quite a bit from cold fusion apps in the Web DMZ. -----Original Message----- From: Kenneth Yip [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 09, 2002 10:14 PM To: Fiona Campbell Cc: [EMAIL PROTECTED] Subject: Re: TCP_Overlap_Data TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- We see false positive for TCP_Overlap_Data commonly on traffic to/from busy website. On Thu, 9 May 2002, Fiona Campbell wrote: > > TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to > [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! > ---------------------------------------------------------------------------- > > Hi > > We have RealSecure Network Sensor 6.0 and are seeing large numbers of > TCP_Overlap_Data events. The signature description says that there are no > false positives for this event and that they should never happen naturally > on a network, but have been observed in conjunction with malfuntioning > network equipment. With many of the events if I visit the site which is the > source I see more events occuring at the moment I enter the site. I have > been in contact with the source of some of the events and they have told me > that they do not have any malfunctioning network equipment but they believe > that use of an Internet VPN for conectivity to vendors can cause false > positives. > > Has anyone else heard this or knows of any false positives for > TCP_Overlap_Data? > > Thanks, > > _________________________________________________________________ > MSN Photos is the easiest way to share and print your photos: > http://photos.msn.com/support/worldwide.aspx > > >
