Snort mailing list archives

Re: RFC: SHELLCODE and WEDAV alerts


From: Frank Knobbe <frank () knobbe us>
Date: Thu, 18 Mar 2004 11:50:31 -0600

As a follow-up: 

When Nachi detects a WebDAV enabled server, it sends about 20-25
packets/alerts with NOP sleds (though missing shellcode). If you only
see one or two WebDAV Search alerts, it's probably just a normal WebDAV
probe.

Regards,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: