[Snort-sigs] Additional HTTP_PORTS rules

Kreimendahl, Chad J Chad.Kreimendahl at ...361...
Mon May 13 10:21:06 EDT 2002


I have 78 of them, here are their SID, current revision and group.  They're
split about 50/50 on source port and dest port being 80.

1544                1                   experimental                    
1552                1                   experimental                    
1436                1                   multimedia                      
1437                1                   multimedia                      
1438                1                   multimedia                      
1292                2                   attack-responses                
1439                1                   multimedia                      
1440                1                   multimedia                      
855                 2                   web-cgi                         
1318                3                   porn                            
1319                3                   porn                            
106                 3                   backdoor                        
112                 3                   backdoor                        
1320                3                   porn                            
488                 2                   info                            
494                 3                   attack-responses                
495                 3                   attack-responses                
496                 4                   attack-responses                
497                 3                   attack-responses                
1310                3                   porn                            
1311                3                   porn                            
1312                3                   porn                            
1313                3                   porn                            
1314                3                   porn                            
1315                3                   porn                            
1316                3                   porn                            
1317                3                   porn                            
311                 4                   exploit                         
1114                3                   web-misc                        
1121                2                   web-misc                        
619                 1                   scan                            
283                 4                   exploit                         
1603                2                   experimental                    
1618                2                   experimental                    
1626                2                   experimental                    
1666                1                   attack-responses                
1545                2                   experimental                    
1546                2                   experimental                    
1551                2                   experimental                    
1559                3                   experimental                    
1560                2                   experimental                    
1561                2                   experimental                    
1563                2                   experimental                    
1564                2                   experimental                    
1423                5                   experimental                    
1425                4                   experimental                    
1741                1                   experimental                    
1742                1                   experimental                    
1743                1                   experimental                    
1744                1                   experimental                    
1745                1                   experimental                    
1749                1                   experimental                    
1750                1                   experimental                    
1497                2                   web-cgi                         
1667                2                   experimental                    
1670                2                   experimental                    
1671                2                   experimental                    
1500                2                   experimental                    
1519                3                   experimental                    
1520                3                   experimental                    
1521                3                   experimental                    
1522                3                   experimental                    
1523                3                   experimental                    
1524                2                   experimental                    
1525                2                   experimental                    
1526                2                   experimental                    
1527                2                   experimental                    
1528                2                   experimental                    
1540                2                   experimental                    
1619                1                   experimental                    
1567                2                   experimental                    
1568                2                   experimental                    
1735                1                   experimental                    
1736                2                   experimental                    
1737                1                   experimental                    
1738                1                   experimental                    
1739                1                   experimental                    
1740                1                   experimental                    




More information about the Snort-sigs mailing list