[Snort-sigs] RE: {Snort-sigs] sig for recent massive ICMP's

Richard Ullrich hostmaster at ...1909...
Fri Sep 26 06:09:11 EDT 2003


Could this be the 'Nachia' worm?  The 'code-blue' to the MSBlaster
virus?
  I've used a sig similar to yours to catch it...

Just a thought...

Richard





More information about the Snort-sigs mailing list