Re: Unknown EK

["lists () packetmail net" <lists () packetmail net>]

On 07/02/2013 06:31 PM, Joel Esler wrote:
> I am sure you meant depth:2;.  But in the rule I am committing, I’m not putting
> a depth, doesn’t look like we need it really.
>
> Also, in the second rule, the colon after the second content match, is a semi
> colon, probably just a typo.

Yeah, I was running on empty by the time I set the email out but wanted the
community to be aware of the in-use EK to prevent future infection.  Thanks Joel
for cleaning up the mess and giving the signatures some TLC.

Cheers,
Nathan


------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!