Re: ROFL (me too)

[Brian <bmc () snort org>]

According to Ryan Russell:
> This is something that drives us nuts on the ARIS project.  Some of the
> signatures will go off when discussing the signature.  So, someone
> discusses . s c r on this list, and all of the subscribers (who all run
> Snort, naturally) suddenly have the rule go off.

Again, one of the reasons that virus.rules is disabled by default.

Cause they suck.

-- 
Save the whales.  Collect the whole set.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users