Snort mailing list archives
Re: Question on SID 18358
From: "Lay, James" <james.lay () wincofoods com>
Date: Fri, 8 Apr 2011 12:36:42 -0600
The user agent applies to the client request and is not associated with a particular URL. If the application requesting the URL declares itself as User-Agent: NSIS_NETLOAD", then this rule will fire. Matt Thanks Matt....guess I was originally wondering if this was malicious or not...this link may help though: http://xp.yimg.com/gj/msgr/10/ini/ymsgr10_us.ini My guess is that this the appusage gets reported on install maybe, since I've never seen this fire until yesterday, and haven't seen it since. Very strange. James
------------------------------------------------------------------------------ Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Question on SID 18358 Lay, James (Apr 07)
- Re: Question on SID 18358 Matt Olney (Apr 08)
- Re: Question on SID 18358 Lay, James (Apr 08)
- Re: Question on SID 18358 Joel Esler (Apr 08)
- Re: Question on SID 18358 Lay, James (Apr 08)
- Re: Question on SID 18358 Matt Olney (Apr 08)