[Oisf-users] sid 2017625

Travis Green travis at travisgreen.net
Mon Jul 31 16:25:40 UTC 2017

Hi Erik, you're always welcome to submit at support at emergingthreats.net or
via the emerging-sigs mailing list (

I'll have a look at that sid.


On Mon, Jul 31, 2017 at 7:51 AM, erik clark <philosnef at gmail.com> wrote:

> I was trying to submit a few false positive issues through
> emergingthreats.net, but it wont accept a twikiname that I feel
> comfortable using.
> sid 2017625 falsepositives consistently on content:"thawte_seal_generator.exe";
> http_uri
> sid 20176017 false positives: Adobe xmp content has <?php xpacket
> end=\r\"?> in the content of the gif. This should be ignored
> Ive been chewing through a bunch of these and would like to contribute. If
> someone from the site can explain to me why my twikiname wont work off
> list, that would be great. :)
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170731/88c7308a/attachment-0002.html>

More information about the Oisf-users mailing list