[Snort-sigs] Rule

Lay, James james.lay at ...3513...
Fri Nov 4 17:32:51 EDT 2011


From: Joel Esler [mailto:jesler at ...435...] 
Sent: Friday, November 04, 2011 3:22 PM
To: Lay, James
Cc: snort-sigs at lists.sourceforge.net
Subject: Re: [Snort-sigs] Rule

This was recently updated to use the new rule keywords...  I took the cve and Googled around a bit:

http://www.phreedom.org/solar/exploits/apache-openssl/

J



Thanks Joel...bytes and structure were just what I was looking for...clearly my google fu is weak ;)

James




More information about the Snort-sigs mailing list