Re: SID Identification

[Alan Ptak <alan.ptak () gmail com>]

Greg,

Check: http://www.snort.org/search/sid/17276?r=1

The "Search rules" page is at http://www.snort.org/search

HTH .. Alan

On Oct 19, 2010, at 9:37 AM, Greg Lane wrote:

> I have 2.8.6.1 running with the last update on rules and I’m getting two alerts that are not in my gen-msg file.  Sid 
> 1:17246 and Sid 1:17276.  Does anybody know what these Sid’s are?
>  
> Greg Lane
> IT Manager
> Lane Enterprises
>  
> Email:  greglane () laneconstinc com
> Phone: (228)872-2414
>  
> ------------------------------------------------------------------------------
> Download new Adobe(R) Flash(R) Builder(TM) 4
> The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
> Flex(R) Builder(TM)) enable the development of rich applications that run
> across multiple browsers and platforms. Download your free trials today!
> http://p.sf.net/sfu/adobe-dev2dev_______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users