Snort mailing list archives
RE: Webx, GotoMyPc and Loophole
From: "Ron Jenkins" <rjenkins () dibr net>
Date: Wed, 8 Mar 2006 20:28:53 -0600
Thanks... -----Original Message----- From: Frank Knobbe [mailto:frank () knobbe us] Sent: Wednesday, March 08, 2006 7:55 PM To: Ron Jenkins Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Webx, GotoMyPc and Loophole On Wed, 2006-03-08 at 18:20 -0600, Ron Jenkins wrote:
Has anyone written a rule to detect these?
Sure, Have you checked the BleedingSnort rules? grep -i webex * | sed "s/:.*sid//" |sed "s/;.*//" bleeding-policy.rules: 2001712 bleeding-policy.rules: 2001713 bleeding-policy.rules: 2001714 grep -i gotomypc * | sed "s/:.*sid//" | sed "s/;.*//" bleeding-policy.rules: 2000309 bleeding-policy.rules: 2002022 policy.rules:1429 Nothing on loophole. Any info you can provide on that? Regards, Frank -- It is said that the Internet is a public utility. As such, it is best compared to a sewer. A big, fat pipe with a bunch of crap sloshing against your ports. ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Webx, GotoMyPc and Loophole Ron Jenkins (Mar 08)
- Re: Webx, GotoMyPc and Loophole Frank Knobbe (Mar 08)
- <Possible follow-ups>
- RE: Webx, GotoMyPc and Loophole Ron Jenkins (Mar 08)