FW: Metasploit - CVE-2012-1823 - Snort Sleeping

[MA Bel <mab_generic () outlook com>]

From: mab_generic () outlook com
To: jlay () slave-tothe-box net
Subject: RE: [Snort-sigs] Metasploit - CVE-2012-1823 - Snort Sleeping
Date: Mon, 29 Apr 2013 14:47:42 +0000




HOME and EXTERNAL networks are set to ANY.

http_inspect & stream5  : not found in snort.conf  , I will look into that.


> To: snort-sigs () lists sourceforge net
> Date: Fri, 26 Apr 2013 15:49:37 -0600
> From: jlay () slave-tothe-box net
> Subject: Re: [Snort-sigs] Metasploit - CVE-2012-1823 - Snort Sleeping
>
> On 2013-04-26 15:40, rmkml wrote:
> > Hi James,
> > Can you try with ipvar HOME_NET any please? (or 192.168.0.0/16)
> > Regards
> > Rmkml
>
> Ya giddyup!
>
> Action Stats:
>       Alerts:            2 ( 11.111%)
>       Logged:            2 ( 11.111%)
>       Passed:            0 (  0.000%)
>
> Ya fires for me too now../24...WTH was I thinking 8-|  Thanks RM.
>
> James
>
>
> ------------------------------------------------------------------------------
> Try New Relic Now & We'll Send You this Cool Shirt
> New Relic is the only SaaS-based application performance monitoring service 
> that delivers powerful full stack analytics. Optimize and monitor your
> browser, app, & servers with just a few lines of code. Try New Relic
> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!

Attachment: snort.conf
Description:

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!