[Snort-sigs] sid:617 usage requested.

Brian bmc at ...95...
Thu Jan 17 12:56:10 EST 2002


According to James:
> > I am also wading through the signatures trying to document them.  This
> > is a head scratchre.
> > 
> 
> http://www.google.com/search?q=ssh+research+scanner&btnG=Google+Search

Thanks for the incredibly useful information.

did you read the signature?  

Nothing from that google search explains what the content looking for 
and why.  (content:"|00 00 00 60 00 00 00 00 00 00 00 00 01 00 00 00|";)

-- 
Remember - if all you have is an axe, every problem looks like hours of fun.





More information about the Snort-sigs mailing list