Snort mailing list archives

Re: Re-affermentain, Opps, I mean re-affirmation of the morons on the net


From: Ryan Russell <ryan () securityfocus com>
Date: Sat, 9 Feb 2002 20:49:46 -0700 (MST)

On Sat, 9 Feb 2002, Phil Wood wrote:

56 minutes of snort web rules alerts starting Sat Feb  9 18:52:57 MST.
The leading number is frequency. (sort file | uniq -c | sort -rn).
Check out the moron that is going to pull down cool.dll.
(No, this was not captured on my home machine.)

The default.ida requests are CodeRed.b, and the cool.dll one is Nimda.e

                                        Ryan


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: