alarms generated by legitimate network traffic rather than actual attacks.
an alert on an event that isn't a security incident. as an example, occurs if the nids raises an alert but activity on the network is normal.
a report that isn't true... a false alarm.