[Emerging-Sigs] Question about Tor sig (2018789)

Darien Huss dhuss at emergingthreats.net
Tue Sep 23 15:57:46 EDT 2014


There may be FPs on 443, but we can run it through QA again and see what
comes up. We should have some more info tomorrow.

Regards,
Darien

On Tue, Sep 23, 2014 at 2:20 PM, Jake Warren <jake.warren at masergy.com>
wrote:

> Hi,
>
> When you guys were QA'ing 2018789, did you measure how bad the performance
> hit would be to include port 443? The reason I ask is because I'm seeing
> this signature miss the majority of TOR traffic since most of the Tor
> traffic I'm seeing is going out over 443 versus 9001.
>
> Thanks,
> Jake
>
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro
> http://www.emergingthreats.net
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20140923/0e114282/attachment.html>


More information about the Emerging-sigs mailing list