Snort mailing list archives
RE: SQL Slapper Worm rule for 1.8.7
From: "L. Christopher Luther" <CLuther () Xybernaut com>
Date: Tue, 28 Jan 2003 12:33:40 -0500
Here ya go: http://www.snort.org/snort-db/sid.html?sid=2003 To use this rule on Snort 1.8.6 and 1.8.7, drop the "sid:2003; rev:2;" text from the rule, as there is no SID value of 2003 for Snort 1.8.x (at least I could not find one in my sid-msg.map file). Everything else in the rule seems to work fine. Cheer! Christopher -----Original Message----- From: "Dhruv Chandra" <dhruvc () hotmail com> To: snort-users () lists sourceforge net Date: Tue, 28 Jan 2003 09:27:13 -0500 Subject: [Snort-users] SQL Slapper Worm rule for 1.8.7 Hi Where can I get the rule for SQL Slapper worm for Snort 1.8.7. If someone can provide me any information ... it'll be gretly appreciated. Cheers and have a wonderful day. Dhruv
Current thread:
- SQL Slapper Worm rule for 1.8.7 Dhruv Chandra (Jan 28)
- <Possible follow-ups>
- RE: SQL Slapper Worm rule for 1.8.7 L. Christopher Luther (Jan 28)