[Snort-sigs] Sourcefire VRT Certified Rules Update

research at ...435... research at ...435...
Tue Sep 18 12:55:03 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sourcefire VRT Certified Rules Update

Synopsis:
This release provides two new rule groupings, Voice over IP (VoIP) rules and Content-Replace rules.

Details:
Voice over IP rules:
This group contains rules that are concerned with Voice over IP (VoIP) detection. This rule group focuses on known exploit attempts as well as providing detection for anomalous events.

Content-Replace rules:
This group contains rules that concentrate on replacing transaction data with innocuous strings to effectively deny a valid transaction while keeping a connection active. This allows a deployment where instant messaging may be allowed for communication purposes but where file transfer is prohibited.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2007-09-17.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)

iD8DBQFG7/U+oFlcG+k7cPwRAgwFAJ4oWDjeaPsxakLUZ50Xu8h9S3mY4QCfb8lZ
b6vKijAyWDuas7I3p225N3o=
=djB7
-----END PGP SIGNATURE-----





More information about the Snort-sigs mailing list