Snort mailing list archives

Re: Rule


From: "Lay, James" <james.lay () wincofoods com>
Date: Fri, 4 Nov 2011 15:32:51 -0600

From: Joel Esler [mailto:jesler () sourcefire com] 
Sent: Friday, November 04, 2011 3:22 PM
To: Lay, James
Cc: snort-sigs () lists sourceforge net
Subject: Re: [Snort-sigs] Rule

This was recently updated to use the new rule keywords...  I took the cve and Googled around a bit:

http://www.phreedom.org/solar/exploits/apache-openssl/

J



Thanks Joel...bytes and structure were just what I was looking for...clearly my google fu is weak ;)

James

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: