RE: Snort rules updated?

["Jim Grossl" <jim () idahy org>]

FWIW, Symantec has snort sigs available in this pdf file:
https://tms.symantec.com/members/AnalystReports/030811-Alert-DCOMworm.pd
f

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
CMartin () infosol com
Sent: Wednesday, August 13, 2003 11:58 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort rules updated?


Hello,

        Just wanted to get the word when the official rule sets get
updated with the rules to detect DCOM exploit as well as the worm
associated with the exploit (mblaster.exe).  I like the idea of adding
the rule myself; however, I wouldn't mind bringing my systems up to date
by downloading the rule sets with the new rules implemented.  I'm hoping
the rule sets that are on the site now are updated :)

Chris Martin
Infosol
cmartin () infosol com


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users