Snort mailing list archives
Re: Please post a good Nachi.B Signature
From: Dan <sophie_bo () earthlink net>
Date: Sat, 21 Feb 2004 16:08:25 -0800 (PST)
* I had already checked the snort sigs mailing list archives to no avail. * I help secure a 100,000 + node network. The sig for the original Nachi virus worked great. Now, can anyone provide some real help and post a working sig for Nachi.B? Thanks, Dan -----Original Message----- From: Erek Adams <erek () snort org> Sent: Feb 21, 2004 1:48 PM To: Dan <sophie_bo () earthlink net> Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Please post a good Nachi.B Signature On Sat, 21 Feb 2004, Dan wrote:
If anyone has a confirmed working Nachi.B Snort signature, please post it.
I'd like to stress two things--One personal, one non-personal. * For signatures, check the snort-sigs mailing list [0]. You can find a rather good set of archives here [1]. * (personal, so no flames needed)--NEVER, EVER, EVER, EVER consider an IDS as something to deal with/help with/mitigate a virus problem. Firewalls, AV filters, Scanning, etc... That's the way to go. BUT!!!! Yes, they are good to have for what you miss with the others. If you rely on them as your only protection, then you're going to be stiffed--IMHO. Cheers! ----- Erek Adams "It looks just like a Telefunken U-47. You'll love it..." -- Frank Zappa [0] https://lists.sourceforge.net/mailman/listinfo/snort-sigs [1] http://marc.theaimsgroup.com/?l=snort-sigs&r=1&w=2 ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Please post a good Nachi.B Signature Dan (Feb 21)
- Re: Please post a good Nachi.B Signature Erek Adams (Feb 21)
- Re: Please post a good Nachi.B Signature Jason Haar (Feb 22)
- <Possible follow-ups>
- Re: Please post a good Nachi.B Signature Dan (Feb 21)
- Re: Please post a good Nachi.B Signature James Riden (Feb 21)
- Re: Please post a good Nachi.B Signature SN ORT (Feb 23)
- Re: Please post a good Nachi.B Signature Erek Adams (Feb 21)