[Snort-sigs] repeated signatures?

Johnathan Norman jnorman at ...1256...
Tue Sep 2 06:39:06 EDT 2003


both check for different strings returned by telnet

 "Login failed" and "Login incorrect"

setting that aside they are the same.

Johnathan Norman, SCNA,CCSP,ISSP
Network Security Analyst
Alert Logic, Inc.
jnorman at ...1256... / jnorman-pager at ...1256...
Office: 713-484-8383

On Tue, 2 Sep 2003, keshav wrote:

> Hello,
> I just have started learning to understand signatures. Are SID 492 and SID 1251 are same? Both are about bad telnet logins. If they are same, why duplicates? If they are not (if there's some difference that i could not recognize), what is it?
>
> regards,
> Keshav




More information about the Snort-sigs mailing list