The new Code Alert

[Anthony Geoffron <anthonyg () passinglane com>]

It seems the code alert 2 becomes crasy here
(Los angeles) I keep receiving 1 alert / 2 minutes
of a new attack. (web dir, web command attempt.)





-----Original Message-----
From: Migus, Adam [mailto:Adam_Migus () NAI com]
Sent: Monday, August 06, 2001 1:38 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] Definitive Code Red rule


Ok so there's a thousand emails going around about the Code Red Worm.  So
what is the definitive rule/signature for snort 1.7 and 1.8 that people are
using?

Adam

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users