Aw...

[Tim Sailer <sailer () bnl gov>]

It's a sad day when both snort.org and whitehats are both down at the same 
time.

I'm seeing a LOT of the ssh crc attacks in the logs of the machines that
actually log to my central machine. Does someone have a snort rule to
detect this?

Tim

-- 
Tim Sailer <sailer () bnl gov> 
Manager, Cyber Security Operations
Brookhaven National Laboratory  (631) 344-3001

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users