Re: P2P GNUTella GET

[Chris Green <cmg () sourcefire com>]

"Tony Wong" <tony.wong () stanford edu> writes:

> I am getting this in ACID from an external source to one of my apache
> web servers.
>
> P2P GNUTella GET
>
> What is it?

A bad signature to detect p2p GETs from gnutella.

It just looks for gets on non-port 80
-- 
Chris Green <cmg () sourcefire com>
Warning: time of day goes back, taking countermeasures.



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users