[Snort-sigs] Questions 101 & Dire Straits

JP Vossen vossenjp at ...1431...
Fri Apr 4 16:01:08 EST 2003


On Thu, 3 Apr 2003 snort-sigs-request at lists.sourceforge.net wrote:

> Message: 4
> Date: Thu, 03 Apr 2003 16:44:19 -0500
> To: snort-sigs at lists.sourceforge.net
> From: Matt Kettler <mkettler at ...189...>
> Subject: Re: [Snort-sigs] Questions 101
>
> I can feel the members of Dire Straits shuddering from here.
>
> At 04:04 PM 4/3/2003 -0500, Chris Green wrote:
> >alert ip 192.168.1.1 any -> $HOME_NET any (msg: "I want my... I want my...
> >AYE PEA";)

Yeah, shouldn't it be:

alert ip 192.168.1.1 any -> any any (msg: "I want my... I want my...  I want
my I.P.A.";)


(OK, it's Friday, it's after 5, and it was a long week... :-)
JP
------------------------------|:::======|--------------------------------
JP Vossen, CISSP              |:::======|                jp at ...1432...
My Account, My Opinions       |=========|       http://www.jpsdomain.org/
------------------------------|=========|--------------------------------
"The software said it requires Windows 98 or better, so I installed
Linux..."






More information about the Snort-sigs mailing list