[Snort-sigs] Email Collector Agent Rule

Hugo van der Kooij hvdkooij at ...481...
Fri May 21 10:12:01 EDT 2004


On Fri, 21 May 2004 Giles.Caunter at ...2506... wrote:

> Has anyone written any rules to alert if an "e-mail address collection
> bot" is running against a web server?

And just how does one recognize one?

Hugo.

-- 
 All email sent to me is bound to the rules described on my homepage.
    hvdkooij at ...481...		http://hvdkooij.xs4all.nl/
	    Don't meddle in the affairs of sysadmins,
	    for they are subtle and quick to anger.




More information about the Snort-sigs mailing list