[Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24)

Jason security at ...704...
Tue Aug 16 08:51:30 EDT 2005


rmkml wrote:
>> it is easy enough to create a rule to detect this.
> 
> 
> send "easy" rule to the list ?


alert udp $EXTERNAL_NET any -> $HOME_NET 135:1030 (msg:"Policy Messenger 
Traffic - Fix your network"; content:"|04 00|"; depth:2; sid:1000000; 
rev:1; )

A bill is also on the way. ;)

> Regards
> Rmkml
> 




More information about the Snort-sigs mailing list