Snort mailing list archives

Re: CRv3?? [was RE: Code Red Rule?]

From: Andreas Brenk <ab () aegisnet de>
Date: Wed, 1 Aug 2001 02:54:53 +0200

* Mike Baptiste <baptiste () cc-concepts com> [010801 01:53]:

I guess it could be folks trying to find and alert anyone with a vulnerable 
host, but for the probes to appear 3 hours before the next infection window is, 
well, interesting.


When exactly does the next phase start? Wasn't that 02:00 CEST (20:00 EDT)?

So it's already started?

Here's hoping for a dull evening. :)


That depends on where you live... it's actually a little later. :-)

Good night I'd normally say at this time here in Germany.


--
Mit freundlichen Grüßen

Andreas Brenk
mailto:ab () aegisnet de

AegisNet IT-Dienstleistungen
Postfach 62 03 71
22403 Hamburg
http://www.aegisnet.de
Tel. und Fax: +49-(0)700-AEGISNET


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

Code Red Rule? Richard Parker (Jul 30)
- RE: Code Red Rule? John Berkers (Jul 31)
  - CRv3?? [was RE: Code Red Rule?] Mike Baptiste (Jul 31)
    - Re: CRv3?? [was RE: Code Red Rule?] Douglas R. Wilson (Jul 31)
    - Re: CRv3?? [was RE: Code Red Rule?] Mike Baptiste (Jul 31)
    - Re: CRv3?? [was RE: Code Red Rule?] Andreas Brenk (Jul 31)