Code Red and port 443 (was RE: Code Red HELP!!!!)

["George D. Nincehelser" <george () ccitriad net>]

On a related note, does the worm every try secure web servers (e.g. on port
443)?

If something did try to spread on an encrypted service, would Snort have any
chance of picking it up?  I would think not, but you never know...

George

----- Original Message -----
From: "Carolyn Beckman" <beckman () clone concordia ca>
To: "s I n" <sin () Aniela EU ORG>
Cc: "Nigel Morse" <N.Morse () hyperknowledge com>; "Advanced Hosting UNIX Admin
Daniel Fairchild" <danielf () supportteam net>;
<snort-users () lists sourceforge net>; <netfilter () lists samba org>;
<bridge () math leidenuniv nl>
Sent: Tuesday, August 07, 2001 1:48 PM
Subject: [Snort-users] RE: Cod Red HELP!!!!


> On Tue, 7 Aug 2001, s I n wrote:
>
> > Date: Tue, 7 Aug 2001 21:02:06 +0300 (EEST)
> > From: s I n <sin () Aniela EU ORG>
> > To: Nigel Morse <N.Morse () hyperknowledge com>
> > Cc: Advanced Hosting UNIX Admin Daniel Fairchild
<danielf () supportteam net>,
> >      snort-users () lists sourceforge net, netfilter () lists samba org,
> >      bridge () math leidenuniv nl
> > Subject: RE: Cod Red HELP!!!!
>
> It seems to me that one method of getting rid of code red
> is to reconfigure the server so that it does not use port
> 80.  This may or may not be practical with a big machine.
> It is only an thought based on the logs of my server on
> port 8080. There are no code red entries.
>
> =================================================================
> beckman () clone concordia ca
> Carolyn Beckman
> =================================================================
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users