topic Re: Signature 5558-0 false positives in Network Security https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414273#M100199 <HTML><HEAD></HEAD><BODY><P>Thanks and will do...on monday;-) Have a good weekend.</P></BODY></HTML> Sat, 07 Jan 2006 03:37:47 GMT mhellman 2006-01-07T03:37:47Z Signature 5558-0 false positives https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414271#M100146 <P>I've looked at a trace and for the life of me can't figure out why this is firing. This is an IIS server (i.e normally no cgi-bin directory and "cgi-bin" nowhere in trace). It's not running the webcart program. known issue?</P> Sun, 10 Mar 2019 09:49:47 GMT https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414271#M100146 mhellman 2019-03-10T09:49:47Z Re: Signature 5558-0 false positives https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414272#M100173 <HTML><HEAD></HEAD><BODY><P>This is the first report of false positives with this signature. We will research this further and update you. If you do have the traffic capture, could you please mail it to <A href="mailto:rupadras@cisco.com">rupadras@cisco.com</A>? It will greatly help us with our research.</P></BODY></HTML> Fri, 06 Jan 2006 23:50:15 GMT https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414272#M100173 rupadras 2006-01-06T23:50:15Z Re: Signature 5558-0 false positives https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414273#M100199 <HTML><HEAD></HEAD><BODY><P>Thanks and will do...on monday;-) Have a good weekend.</P></BODY></HTML> Sat, 07 Jan 2006 03:37:47 GMT https://community.cisco.com/t5/network-security/signature-5558-0-false-positives/m-p/414273#M100199 mhellman 2006-01-07T03:37:47Z