[Snort-sigs] Outbound string contains c m d.exe, but from where?

Noller, Gregory Noller2G at ...256...
Thu Jan 24 07:17:07 EST 2002

Oh great wizards of snort....are any of you seeing outbound c m d . e x e
where it ought not to be?

I am seeing the following string in some infrequent packets exiting my nat
router that sits in front of my outbound proxy array:

More information about the Snort-sigs mailing list