[Snort-sigs] Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger

Community Signatures lists at ...3397...
Wed Mar 21 15:22:02 EDT 2012

On 03/21/12 14:18, Bad Horse wrote:
> Hello.  Wouldn't this be "from_server" and not "to_server" along with
> "$HOME_NET any -> any any" ?
> I could be not understanding this though but if the page is being served
> I think it should be "from_server".

100% correct Bad Horse, thank you, and apologies to all for this
mistake.  I appreciate the peer review and this mistake was made on the
ET side as well, would you mind correcting it there too?


More information about the Snort-sigs mailing list