Snort mailing list archives
W32/Sober.b snort rule
From: jbendure () dfamilk com
Date: Thu, 18 Dec 2003 11:32:52 -0600
Has anyone seen a snort rule posted yet to look for the new W32/Sober-B worm that is in the wild? And is there one to implement if a machine gets infected? I need to implement it on all of my snort boxes. ANY help would be great. Thanks! Jeff Bendure Network Consultant Reliance Technical jbendure () reliancetechnical com ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rule order? Toby Rodwell (Dec 17)
- Re: Rule order? Ralf Spenneberg (Dec 18)
- W32/Sober.b snort rule jbendure (Dec 18)
- Re: Rule order? Ralf Spenneberg (Dec 18)