RE: My Sql DataBase break down.. :-(

["Drew Stockman" <Drew.Stockman () cibmis com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Here is a sig for Slammer.

alert udp $EXTERNAL_NET any -> $HOME_NET 1434 (msg: "SQLSLAMMER"; content: 
"dllhel32hkernQhounthickChGetTf"; classtype:bad-unknown;)

Drew Stockman
Security Analyst
CIBMIS


- -----Original Message-----
From: Lee Jun [mailto:mistra_knight () hotmail com]
Sent: Tuesday, February 11, 2003 12:12 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] My Sql DataBase break down.. :-(


Hi

My Sql Database broke down.

Tcphdr, event and icmphdr table are blank! 

I created another databse, but I need the slammer signature data.

Anyone have slammer signature?

If you'll send capture data tha slammer signature run by ACID, it will vert 
helpfull me. :-)

Have nicde Day

/Lee - Jun



_________________________________________________________________
????? ???? ? ?? ???? MSN Hotmail? ?? ???.    
http://loginnet.passport.com/login.srf?id=2&svc=mail&cbid=24325&msppjph=1&lc=1042 
 



- -------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA+AwUBPkkLdTK/qMtUmsxZEQJQ/ACcD9PFrTKrAVmy1n0UPs14M5EHeMwAmJ3r
wpNGcJcNjUdEg3SwQ4KOxL4=
=NG1V
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users