detecting code red

["Souza, Chris" <csouza () incharge org>]

I saw traces of the code red worm on my IIS logs but didn't see it on my
alert file on snort.
Has anyone expereinced this or would know why?

Thanks
Chris

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users