[Snort-sigs] W32.Dumaru Sig

Nigel Houghton nigel at ...435...
Wed Oct 29 05:15:07 EST 2003


Around 7:30am Nick Duda said:

ND :Anyone have a sig for W32.Dumaru at ...110...? Or better yet a sig to detect IRC
ND :traffic.

Anything wrong with chat.rules?

ND :Lastly, I hate to ask questions that either have been asked before or
ND :have a resource to look at. Does anyone know of a KB of snort sigs?

Something like this:

 http://www.snort.org/cgi-bin/done.cgi

and:

 http://www.snort.org/docs/

or do you mean something else?

-------------------------------------------------------------
Nigel Houghton   Security Research Engineer   Sourcefire Inc.
                 Vulnerability Research Team

"Mankind hasn't even got the technology to create a toupee
that doesn't get big laughs." -- Lister




More information about the Snort-sigs mailing list