Re: any details/sigs for "Magic Lantern"?

[Brian <bmc () snort org>]

On Mon, Mar 17, 2003 at 12:55:32PM -0500, Travis Farmer wrote:
> I may just be paranoid, but has anybody found communication to/from magic
> lantern, at least enough to build a signature on?
>
> The most I got was that it connects to FedWU.windowsupdate.com, and a ip
> lookup brings up 207.46.131.197.

How do you know thats magic lantern?

-brian


-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users