RE: Individual rule msg definitions

["Scott" <scottr () vdot net>]

Yes I am aware of the bugtraq, IDS numbers and cert ones, but what about
those that aren't referenced such as the ones I listed in the previous
email. I did a google but all I found were incidents but no definitions as
to what was the meaning.

Scotty


> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Dragos Ruiu
> Sent: Friday, July 27, 2001 4:42 AM
> To: Scott; snort-users () lists sourceforge net
> Subject: Re: [Snort-users] Individual rule msg definitions
>
>
> For the snort.org rules that contain a  references keyword like
> a bugtraq ID or a whitehats IDS number, you can reference the appropriate
> website for further details...
>
> cheers,
> --dr
>
> On Thu, 26 Jul 2001, Scott wrote:
> > Is there a URL or file that contains the definition of these
> rule messages,
> > such as:
> >
> > WEB-MISC Invalid URL Classification: Attempted Information Leak
> > or
> > [110:2:1]  spp_unidecode: Unicode Directory Transversal
> >
> > I have no idea as to whether these alerts are serious or what they mean.
> >
> > Thanks
> >
> > Scotty
> >
> >
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> --
> Dragos Ruiu <dr () dursec com>   dursec.com ltd. / kyx.net - we're
> from the future
> gpg/pgp key on file at wwwkeys.pgp.net or at http://dursec.com/drkey.asc
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users