[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Fri Jul 7 21:00:15 EDT 2006


[***] Results from Oinkmaster started Fri Jul  7 21:00:14 2006 [***]

[///]     Modified active rules:     [///]

 2003002 - BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port TLS (bleeding-policy.rules)
 2003003 - BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port SSLv3 (bleeding-policy.rules)
 2003004 - BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port Case 2 (bleeding-policy.rules)
 2003005 - BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port SSLv3 (bleeding-policy.rules)
 2003006 - BLEEDING-EDGE POLICY TLS/SSL Client Key Exchange on High Port (bleeding-policy.rules)
 2003007 - BLEEDING-EDGE POLICY TLS/SSL Client Key Exchange on High Port SSLv3 (bleeding-policy.rules)
 2003008 - BLEEDING-EDGE POLICY TLS/SSL Client Cipher Set on High Port (bleeding-policy.rules)
 2003009 - BLEEDING-EDGE POLICY TLS/SSL Client Cipher Set on High Port SSLv3 (bleeding-policy.rules)
 2003010 - BLEEDING-EDGE POLICY TLS/SSL Server Hello on High Port (bleeding-policy.rules)
 2003011 - BLEEDING-EDGE POLICY TLS/SSL Server Hello on High Port SSLv3 (bleeding-policy.rules)
 2003012 - BLEEDING-EDGE POLICY TLS/SSL Server Certificate Exchange on High Port (bleeding-policy.rules)
 2003013 - BLEEDING-EDGE POLICY TLS/SSL Server Certificate Exchange on High Port SSLv3 (bleeding-policy.rules)
 2003014 - BLEEDING-EDGE POLICY TLS/SSL Server Key Exchange on High Port (bleeding-policy.rules)
 2003015 - BLEEDING-EDGE POLICY TLS/SSL Server Key Exchange on High Port SSLv3 (bleeding-policy.rules)
 2003016 - BLEEDING-EDGE POLICY TLS/SSL Server Hello Done on High Port (bleeding-policy.rules)
 2003017 - BLEEDING-EDGE POLICY TLS/SSL Server Hello Done on High Port SSLv3 (bleeding-policy.rules)
 2003018 - BLEEDING-EDGE POLICY TLS/SSL Server Cipher Set on High Port (bleeding-policy.rules)
 2003019 - BLEEDING-EDGE POLICY TLS/SSL Server Cipher Set on High Port SSLv3 (bleeding-policy.rules)
 2003020 - BLEEDING-EDGE POLICY TLS/SSL Encrypted Application Data on High Port (bleeding-policy.rules)
 2003021 - BLEEDING-EDGE POLICY TLS/SSL Encrypted Application Data on High Port SSLv3 (bleeding-policy.rules)
 2400000 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound (bleeding-drop.rules)
 2400001 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound (bleeding-drop.rules)
 2400002 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound (bleeding-drop.rules)
 2400003 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound (bleeding-drop.rules)
 2401000 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound - BLOCKING SOURCE (bleeding-drop-BLOCK.rules)
 2401001 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound - BLOCKING SOURCE (bleeding-drop-BLOCK.rules)
 2401002 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound - BLOCKING SOURCE (bleeding-drop-BLOCK.rules)
 2401003 - BLEEDING-EDGE DROP Spamhaus DROP Listed Traffic Inbound - BLOCKING SOURCE (bleeding-drop-BLOCK.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (20):
        2003002 || BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port TLS
        2003003 || BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port SSLv3
        2003004 || BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port Case 2
        2003005 || BLEEDING-EDGE POLICY TLS/SSL Client Hello on High Port SSLv3
        2003006 || BLEEDING-EDGE POLICY TLS/SSL Client Key Exchange on High Port
        2003007 || BLEEDING-EDGE POLICY TLS/SSL Client Key Exchange on High Port SSLv3
        2003008 || BLEEDING-EDGE POLICY TLS/SSL Client Cipher Set on High Port
        2003009 || BLEEDING-EDGE POLICY TLS/SSL Client Cipher Set on High Port SSLv3
        2003010 || BLEEDING-EDGE POLICY TLS/SSL Server Hello on High Port
        2003011 || BLEEDING-EDGE POLICY TLS/SSL Server Hello on High Port SSLv3
        2003012 || BLEEDING-EDGE POLICY TLS/SSL Server Certificate Exchange on High Port
        2003013 || BLEEDING-EDGE POLICY TLS/SSL Server Certificate Exchange on High Port SSLv3
        2003014 || BLEEDING-EDGE POLICY TLS/SSL Server Key Exchange on High Port
        2003015 || BLEEDING-EDGE POLICY TLS/SSL Server Key Exchange on High Port SSLv3
        2003016 || BLEEDING-EDGE POLICY TLS/SSL Server Hello Done on High Port
        2003017 || BLEEDING-EDGE POLICY TLS/SSL Server Hello Done on High Port SSLv3
        2003018 || BLEEDING-EDGE POLICY TLS/SSL Server Cipher Set on High Port
        2003019 || BLEEDING-EDGE POLICY TLS/SSL Server Cipher Set on High Port SSLv3
        2003020 || BLEEDING-EDGE POLICY TLS/SSL Encrypted Application Data on High Port
        2003021 || BLEEDING-EDGE POLICY TLS/SSL Encrypted Application Data on High Port SSLv3

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (20):
        2003002 || BLEEDING-EDGE TROJAN TLS/SSL Client Hello on High Port TLS
        2003003 || BLEEDING-EDGE TROJAN TLS/SSL Client Hello on High Port SSLv3
        2003004 || BLEEDING-EDGE TROJAN TLS/SSL Client Hello on High Port Case 2
        2003005 || BLEEDING-EDGE TROJAN TLS/SSL Client Hello on High Port SSLv3
        2003006 || BLEEDING-EDGE TROJAN TLS/SSL Client Key Exchange on High Port
        2003007 || BLEEDING-EDGE TROJAN TLS/SSL Client Key Exchange on High Port SSLv3
        2003008 || BLEEDING-EDGE TROJAN TLS/SSL Client Cipher Set on High Port
        2003009 || BLEEDING-EDGE TROJAN TLS/SSL Client Cipher Set on High Port SSLv3
        2003010 || BLEEDING-EDGE TROJAN TLS/SSL Server Hello on High Port
        2003011 || BLEEDING-EDGE TROJAN TLS/SSL Server Hello on High Port SSLv3
        2003012 || BLEEDING-EDGE TROJAN TLS/SSL Server Certificate Exchange on High Port
        2003013 || BLEEDING-EDGE TROJAN TLS/SSL Server Certificate Exchange on High Port SSLv3
        2003014 || BLEEDING-EDGE TROJAN TLS/SSL Server Key Exchange on High Port
        2003015 || BLEEDING-EDGE TROJAN TLS/SSL Server Key Exchange on High Port SSLv3
        2003016 || BLEEDING-EDGE TROJAN TLS/SSL Server Hello Done on High Port
        2003017 || BLEEDING-EDGE TROJAN TLS/SSL Server Hello Done on High Port SSLv3
        2003018 || BLEEDING-EDGE TROJAN TLS/SSL Server Cipher Set on High Port
        2003019 || BLEEDING-EDGE TROJAN TLS/SSL Server Cipher Set on High Port SSLv3
        2003020 || BLEEDING-EDGE TROJAN TLS/SSL Encrypted Application Data on High Port
        2003021 || BLEEDING-EDGE TROJAN TLS/SSL Encrypted Application Data on High Port SSLv3





More information about the Snort-sigs mailing list