[Snort-sigs] detect most binary file formats

Matthew Jonkman matt at ...2436...
Tue Jul 13 07:33:01 EDT 2004


Good point. I'll do that shortly.

THanks

Jason Haar wrote:

> I'd like to suggest the classtype be changed: those aren't "misc-attack" -
> they are completely informational - so something like "misc-activity"
> would be better.
> 
> After all, it *might* be part of an attack - but it is *probably* normal
> traffic.
> 
> Jason
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & Training.
> Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
> digital self defense, top technical experts, no vendor pitches, 
> unmatched networking opportunities. Visit www.blackhat.com
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs




More information about the Snort-sigs mailing list