[Snort-sigs] Update to Adware gator rule 7829

Scott, Joshua J. Joshua.Scott at ...3352...
Thu Apr 24 16:15:35 EDT 2008


Rule:  SPYWARE-PUT Adware gator user-agent detected

Sid: 7829

False Positives:  

 

Using the newsgator web based RSS feeder fires of IDS alerts due to the
fact that the word gator is found after the User-Agent.

 

Here is the complete UA text for newsgator.  

 

User-Agent: FeedDemon/2.6 (http://www.newsgator.com/; Microsoft Windows)


 

 

Joshua Scott, CISSP

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20080424/3d8e0f84/attachment.html>


More information about the Snort-sigs mailing list