OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Fiona Campbell (fjcampbellhotmail.com)
Date: Thu May 09 2002 - 03:23:16 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    Hi

    We have RealSecure Network Sensor 6.0 and are seeing large numbers of
    TCP_Overlap_Data events. The signature description says that there are no
    false positives for this event and that they should never happen naturally
    on a network, but have been observed in conjunction with malfuntioning
    network equipment. With many of the events if I visit the site which is the
    source I see more events occuring at the moment I enter the site. I have
    been in contact with the source of some of the events and they have told me
    that they do not have any malfunctioning network equipment but they believe
    that use of an Internet VPN for conectivity to vendors can cause false
    positives.

    Has anyone else heard this or knows of any false positives for
    TCP_Overlap_Data?

    Thanks,

    _________________________________________________________________
    MSN Photos is the easiest way to share and print your photos:
    http://photos.msn.com/support/worldwide.aspx