Snort mailing list archives

SID 29999


From: Dan Rieille <snortuser2604 () gmail com>
Date: Thu, 6 Nov 2014 10:44:16 +0100

Hi guys,

Since a few days, I get a lot of alerts generated by the Snort SID 1:29999
This rule is associated to the "A Network Trojan was Detected" category,
and the nessage is
"BLACKLIST USER-AGENT known Malicious user agent - MSIE 9.0 in version 10
format"

Googling, I didn't find any information about this SID. Any idea ?

Thanks

Dan
------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: