[Snort-sigs] Sid 2003

Erek Adams erek at ...95...
Wed Feb 5 09:18:02 EST 2003

On Wed, 5 Feb 2003, Michael Wright wrote:

> Call me crazy, but I can't find SID 2003 (SQL Slammer) in the normal
> signature set anywhere.
> The News page for Snort.org says "The rule is available at here or from your
> normal rule updates."  I'm downloading
> http://www.snort.org/dl/rules/snortrules-stable.tar.gz and I don't find the
> SQL slammer rule, SID 2003.
> Am I doing something wrong or has it been omitted?

Nope.  The rule is in -current not in -stable.  It's not been backported
into -stable yet.

You should be able to have a look at it and manually add it yourself.


Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-sigs mailing list