[Snort-sigs] repeated signatures?
jnorman at ...1256...
Tue Sep 2 06:39:06 EDT 2003
both check for different strings returned by telnet
"Login failed" and "Login incorrect"
setting that aside they are the same.
Johnathan Norman, SCNA,CCSP,ISSP
Network Security Analyst
Alert Logic, Inc.
jnorman at ...1256... / jnorman-pager at ...1256...
On Tue, 2 Sep 2003, keshav wrote:
> I just have started learning to understand signatures. Are SID 492 and SID 1251 are same? Both are about bad telnet logins. If they are same, why duplicates? If they are not (if there's some difference that i could not recognize), what is it?
More information about the Snort-sigs