anthall Mon, 04/15/2002 - 15:02
User Badges:
  • Cisco Employee,

You are seeing this false positive because the arguments after scr.pl are not seperated with a hook (?), but instead by an ampersand (&) which is usually only used to separate arguments. Since this is a non-standard webserver I would suggest that you use the RecordOfExcludedAddress and exclude that webserver from alarm 5191.

Actions

This Discussion