[Emerging-Sigs] Question about Tor sig (2018789)
dhuss at emergingthreats.net
Tue Sep 23 15:57:46 EDT 2014
There may be FPs on 443, but we can run it through QA again and see what
comes up. We should have some more info tomorrow.
On Tue, Sep 23, 2014 at 2:20 PM, Jake Warren <jake.warren at masergy.com>
> When you guys were QA'ing 2018789, did you measure how bad the performance
> hit would be to include port 443? The reason I ask is because I'm seeing
> this signature miss the majority of TOR traffic since most of the Tor
> traffic I'm seeing is going out over 443 versus 9001.
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> Support Emerging Threats! Subscribe to Emerging Threats Pro
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Emerging-sigs