Re: snort ok now

[Y M <snort () outlook com>]

As I said before, it is better to send help requests and/or solutions to the list and not in private. Other people may 
benefit and there are highly skilled people that can provide good information.

Having that said, did you review the VRT ruleset? You may find what you are looking for; indicator-shellcode.rules 
might be a good start.

Thanks.
________________________________
From: MCLEOD, DONNIE<mailto:DMCLEO11 () caledonian ac uk>
Sent: ‎4/‎20/‎2013 12:55 PM
To: Y M<mailto:snort () outlook com>
Subject: RE: snort ok now

Hi YM , could you help with a rule for shell code?  that I can use in the rules, thanks


Don,
________________________________
From: Y M [snort () outlook com]
Sent: 19 April 2013 16:55
To: MCLEOD, DONNIE
Cc: snort-users () lists sourceforge net
Subject: RE: snort ok now

Glad it is working now. Please post to the entire list as it may help someone else.

Thanks.

________________________________

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!