Snort mailing list archives
Re: ROFL (me too)
From: Brian <bmc () snort org>
Date: Wed, 28 Nov 2001 09:48:45 -0500
According to Ryan Russell:
This is something that drives us nuts on the ARIS project. Some of the signatures will go off when discussing the signature. So, someone discusses . s c r on this list, and all of the subscribers (who all run Snort, naturally) suddenly have the rule go off.
Again, one of the reasons that virus.rules is disabled by default. Cause they suck. -- Save the whales. Collect the whole set. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ROFL Jim Forster (Nov 27)
- Re: ROFL (me too) Chr. v. Stuckrad (Nov 27)
- Re: ROFL (me too) Ryan Russell (Nov 27)
- Re: ROFL (me too) Brian (Nov 28)
- Re: ROFL (me too) Jim Forster (Nov 28)
- Re: ROFL (me too) Ryan Russell (Nov 27)
- Re: ROFL (me too) Chr. v. Stuckrad (Nov 27)
- Re: ROFL John Sage (Nov 27)