[Snort-sigs] virus rules for snort

Brian bmc at ...95...
Wed Oct 31 19:19:02 EST 2001


According to Tim Kramer:
> Has any volunteered to maintain the virus ruleset for Snort?
> 
> I'm just starting out with Snort but have been doing something
> similar with a Perl filters on mail relays (filters subject
> line, filename attachments, keywords in content, etc.).  Put
> me down on the volunteer list if no one else is doing it.

Ok.  Feel free to send the list (or myself) updates, modifications,
and new signatures.

One thing that I must require is that all the signatures have a
references.  Also, if you could provide a dump of an alert, that would
be great too.

-- 
Silliness is the last refuge of the doomed. -- P. Opus




More information about the Snort-sigs mailing list