Snort mailing list archives
Re: False positives on mysql traffic
From: For Sinton <forsin () inbox kg>
Date: Tue, 28 Apr 2015 09:54:06 +0600 (KGT)
Hello here is pcap traffic: 0000000: 41 00 00 00 03 53 45 4c 45 43 54 20 74 5f 5f 30 2e 2a 0a 46 52 4f 4d 20 0a 76 A....SELECT.t__0.*.FROM..v 000001A: 69 65 77 73 5f 76 69 65 77 20 74 5f 5f 30 0a 57 48 45 52 45 20 20 28 6e 61 6d iews_view.t__0.WHERE..(nam 0000034: 65 20 49 4e 20 20 28 27 70 6f 6c 6c 73 27 29 29 20 e.IN..('polls')). ----- Исходное сообщение ----- От: snort-users-request () lists sourceforge net Кому: "forsin" <forsin () inbox kg> Отправленные: Вторник, 28 Апрель 2015 г 9:52:50 Тема: Welcome to the "Snort-users" mailing list Welcome to the Snort-users () lists sourceforge net mailing list! This list is for general discussion of Snort usage, problems, design, etc. Do not use this list, or the members of this list to market your or any other products to. We value our Community's privacy and their right not to receive unsolicited email. Any attempts to do so will result in your being banned from the lists indefinitely. To post to this list, send your email to: snort-users () lists sourceforge net General information about the mailing list is at: https://lists.sourceforge.net/lists/listinfo/snort-users If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: https://lists.sourceforge.net/lists/options/snort-users/forsin%40inbox.kg You can also make such adjustments via email by sending a message to: Snort-users-request () lists sourceforge net with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: gbplfghj Normally, Mailman will remind you of your lists.sourceforge.net mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: False positives on mysql traffic For Sinton (Apr 27)
- Re: False positives on mysql traffic Al Lewis (allewi) (Apr 28)
- Re: False positives on mysql traffic Jacobi, Michael W CIV NSWCCD Philadelphia, 10432 (Apr 28)
- Re: False positives on mysql traffic Al Lewis (allewi) (Apr 28)
- Re: False positives on mysql traffic Jacobi, Michael W CIV NSWCCD Philadelphia, 10432 (Apr 28)
- Re: False positives on mysql traffic Al Lewis (allewi) (Apr 28)