Snort mailing list archives
Re: RFC: SHELLCODE and WEDAV alerts
From: Frank Knobbe <frank () knobbe us>
Date: Thu, 18 Mar 2004 11:50:31 -0600
As a follow-up: When Nachi detects a WebDAV enabled server, it sends about 20-25 packets/alerts with NOP sleds (though missing shellcode). If you only see one or two WebDAV Search alerts, it's probably just a normal WebDAV probe. Regards, Frank
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- RFC: SHELLCODE and WEDAV alerts Michael Shirk (Mar 18)
- Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
- Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
- Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)