[Snort-sigs] Sid 2003
erek at ...95...
Wed Feb 5 09:18:02 EST 2003
On Wed, 5 Feb 2003, Michael Wright wrote:
> Call me crazy, but I can't find SID 2003 (SQL Slammer) in the normal
> signature set anywhere.
> The News page for Snort.org says "The rule is available at here or from your
> normal rule updates." I'm downloading
> http://www.snort.org/dl/rules/snortrules-stable.tar.gz and I don't find the
> SQL slammer rule, SID 2003.
> Am I doing something wrong or has it been omitted?
Nope. The rule is in -current not in -stable. It's not been backported
into -stable yet.
You should be able to have a look at it and manually add it yourself.
"When things get weird, the weird turn pro." H.S. Thompson
More information about the Snort-sigs