[Snort-sigs] 14all/traffic/mrtg.cgi

Chris Green cmg at ...26...
Mon Feb 4 09:43:03 EST 2002


Took about 4 hours for this to become one of the most popular alerts
on my machines.

alert $EXTERNAL_NET any -> $HOME_NET 80 (msg: "14all.cgi access
(14all)"; uricontent: "14all"; content: "cfg"; )
                
alert $EXTERNAL_NET any -> $HOME_NET 80 (msg: "14all.cgi access
(traffic)"; uricontent: "traffic"; content: "cfg"; )

alert $EXTERNAL_NET any -> $HOME_NET 80 (msg: "14all.cgi access
(mrtg)"; uricontent: "mrtg"; content: "cfg"; )
-- 
Chris Green <cmg at ...26...>
To err is human, to moo bovine.




More information about the Snort-sigs mailing list