Snort mailing list archives
Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger
From: Community Signatures <lists () packetmail net>
Date: Wed, 21 Mar 2012 14:22:02 -0500
On 03/21/12 14:18, Bad Horse wrote:
Hello. Wouldn't this be "from_server" and not "to_server" along with "$HOME_NET any -> any any" ? I could be not understanding this though but if the page is being served I think it should be "from_server".
100% correct Bad Horse, thank you, and apologies to all for this mistake. I appreciate the peer review and this mistake was made on the ET side as well, would you mind correcting it there too? Thanks, Nathan ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Community Signatures (Mar 20)
- Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Bad Horse (Mar 21)
- Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Community Signatures (Mar 21)
- Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Matt Jonkman (Mar 21)
- Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Community Signatures (Mar 21)
- Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger Bad Horse (Mar 21)