[Snort-sigs] SMS dos rule

Johnathan Norman jnorman at ...1256...
Thu Jul 15 16:34:10 EDT 2004


alert tcp any any -> $HOME_NET 2702 (msg:"DOS Microsoft SMS dos attempt";
pcre:"/RCH0####RCHE.{130,}/smi"; reference:url,www.securityfocus.com/archive/1/368911/2004-07-12/2004-07-18/0;
rev:1; sid:1000084; classtype:attempted-dos;)


Johnathan Norman, SCNA,CCSP,ISSP,GCIA
Network Security Analyst
Alert Logic, Inc.
Office: 713-484-8383




More information about the Snort-sigs mailing list