[Snort-sigs] Netsky.P Signature

Cam Beasley, ISO cam at ...2154...
Mon Mar 22 14:25:12 EST 2004


Netsky.P:
------------------------------------

alert tcp any any -> any 25 (msg:"Netsky.P";
content:"EtLD/LKApGoCW/8UJHP3M8n/FCRzGDPA/xQkcyGzAkGwEP8UJBLAc/l1P6rr3Oh
DAAAAK8t1";
classtype:misc-attack; rev:1;)

I would be interested to know of any
false positives/negatives you encounter.

~cam.

Cam Beasley
Information Security Office
The University of Texas at Austin
cam at ...2154...




More information about the Snort-sigs mailing list