[Oisf-users] "ETPRO EXPLOIT NetSupport Manager Client Buffer Overflow Relative"; sid:2801281; rev:5; )

[Russell Fulton]

Hi

Puzzled by this one.  Suri is triggering this sig on traffic *from* port 443 but the sig says "From server"?  
I am not seeing this on my snort sensor which is running the same ruleset — supposedly on the same traffic.

Russell