[Emerging-Sigs] observation on 2008041 and 2008042

[Matt Jonkman]

I made a flowbit modification to that yesterday. Are you running rev 2 
of 2008041?

That will likely fix your issues there.

Matt

Russell Fulton wrote:
> I'm seeing lots (1000s) of hits on these rules some I've confirmed are  
> FPs from these caused by Bit Torrent traffic.  Others ??
> 
> I'll try and get some pcaps.
> 
> Russell
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc