Rules & reference (ACID)

["Bruno Gimenes Pereti" <pereti () ump edu br>]

Hi All,

I updated to Snort 1.8.2 from the rpm avalible in www.snort.com and I'm
using the rules that comes with it.
I've got some attempts of "WEB-MISC readme.eml autoload attempt" and ACID
report shows: "[url] WEB-MISC readme.eml autoload attempt". I mean...
Shouldn't the be something like [CVE] with the link to the www.cert.org
page?

I'm using ACID v0.9.6 with schema 104.
Do I need to update my ACID?

Thank's.

Bruno Gimenes Pereti.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users