[Snort-sigs] detect most binary file formats

Jason Haar Jason.Haar at ...651...
Mon Jul 12 23:03:13 EDT 2004


I'd like to suggest the classtype be changed: those aren't "misc-attack" -
they are completely informational - so something like "misc-activity"
would be better.

After all, it *might* be part of an attack - but it is *probably* normal
traffic.

Jason




More information about the Snort-sigs mailing list