[Snort-sigs] (no subject)

Kreimendahl, Chad J Chad.Kreimendahl at ...361...
Mon Mar 25 08:58:42 EST 2002


alert tcp any any -> [232.0.0.0/8,233.0.0.0/8,239.0.0.0/8] any
(msg:"EXPERIMENTAL BAD TRAFFIC syn to multicast address"; flags:S+; s
id:1431; rev:1;)

This rule has no classtype...  someone wanna get that?




More information about the Snort-sigs mailing list