Snort mailing list archives
Is this a real nimda?
From: "Ronneil Camara" <ronneilc () remingtonltd com>
Date: Thu, 25 Apr 2002 14:39:57 -0500
000 : 00 00 00 6E FF 53 4D 42 32 00 00 00 00 18 07 C8 ...n.SMB2....... 010 : 00 00 20 72 55 B6 13 9E F3 04 00 00 00 E0 08 00 .. rU........... 020 : 03 10 C3 37 0F 2A 00 00 00 02 00 28 00 00 00 00 ...7.*.....(.... 030 : 00 00 00 00 00 00 00 2A 00 44 00 00 00 00 00 01 .......*.D...... 040 : 00 05 00 2D 00 01 00 00 EC 03 00 00 00 00 5C 00 ...-..........\. 050 : 43 00 4D 00 43 00 55 00 53 00 54 00 5C 00 44 00 C.M.C.U.S.T.\.D. 060 : 44 00 45 00 4D 00 4C 00 2E 00 44 00 4C 00 4C 00 D.E.M.L...D.L.L. 070 : 00 00 Thanks. Neil _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Is this a real nimda? Ronneil Camara (Apr 25)
- <Possible follow-ups>
- RE: Is this a real nimda? Sheahan, Paul (PCLN-NW) (Apr 25)