[Snort-sigs] porn.rules

Bryan Irvine bryan.irvine at ...1441...
Mon Apr 28 17:32:41 EDT 2003


OK I got it reporting but it reports all of the sample as coming from 

"alt.binaries.pictures.erotica"

These are the unmodified sample rules...

--Bryan

On Mon, 2003-04-28 at 15:29, Bryan Irvine wrote:
> I'm trying to sniff my network for porno fiends, and I have activated
> the porn rules via the snort.conf file, yet when i try to do a search on
> google for some of the criteria i don't see anything in the logs about
> it.  If I portscan I see those, so i'm not sure what's going on.
> 
> Any ideas?  I'm just using the sample porn.rules file.
> 
> --Bryan
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> 





More information about the Snort-sigs mailing list