[Snort-sigs] Formatting problem.

Jeff Dell jdell at ...178...
Fri Nov 2 03:55:02 EST 2001


The following rule has the word Virus twice...

alert tcp any 110 -> any any (msg:"Virus - Virus - Possible Suppl Worm";
content:"filename=\"Suppl.doc\""; nocase; reference:MCAFEE,10361;
sid:752;  classtype:misc-activity; rev:3;)

It should be:

alert tcp any 110 -> any any (msg:"Virus - Possible Suppl Worm";
content:"filename=\"Suppl.doc\""; nocase; reference:MCAFEE,10361;
sid:752; classtype:misc-activity; rev:4;)

I also bumped up the rev since it changed...

Jeff





More information about the Snort-sigs mailing list