[Snort-sigs] virus rules for snort
bmc at ...95...
Wed Oct 31 19:19:02 EST 2001
According to Tim Kramer:
> Has any volunteered to maintain the virus ruleset for Snort?
> I'm just starting out with Snort but have been doing something
> similar with a Perl filters on mail relays (filters subject
> line, filename attachments, keywords in content, etc.). Put
> me down on the volunteer list if no one else is doing it.
Ok. Feel free to send the list (or myself) updates, modifications,
and new signatures.
One thing that I must require is that all the signatures have a
references. Also, if you could provide a dump of an alert, that would
be great too.
Silliness is the last refuge of the doomed. -- P. Opus
More information about the Snort-sigs