[Snort-sigs] FP on 5803

Weir, Jason jason.weir at ...3410...
Thu Feb 17 13:51:40 EST 2011


Triggers just visiting this url

http://apnews.myway.com/article/20110217/D9LEGDMG0.html


GET
/images/nocache/tr/gca/m.gif?rand=473750261&a=excite_myway_default_js&u=
http%3A//apnews.myway.com/article/20110217/D9LEGDMG0.html&r=-1&w=5&k=&v=
&g=&s=&h= HTTP/1.1
Host: imgfarm.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13)
Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://apnews.myway.com/article/20110217/D9LEGDMG0.html

-J


_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.


More information about the Snort-sigs mailing list