[Snort-sigs] FW: Metasploit - CVE-2012-1823 - Snort Sleeping

MA Bel mab_generic at ...3751...
Mon Apr 29 10:48:24 EDT 2013



From: mab_generic at ...3751...
To: jlay at ...3266...
Subject: RE: [Snort-sigs] Metasploit - CVE-2012-1823 - Snort Sleeping
Date: Mon, 29 Apr 2013 14:47:42 +0000




HOME and EXTERNAL networks are set to ANY.

http_inspect & stream5  : not found in snort.conf  , I will look into that.


> To: snort-sigs at lists.sourceforge.net
> Date: Fri, 26 Apr 2013 15:49:37 -0600
> From: jlay at ...3266...
> Subject: Re: [Snort-sigs] Metasploit - CVE-2012-1823 - Snort Sleeping
> 
> On 2013-04-26 15:40, rmkml wrote:
> > Hi James,
> > Can you try with ipvar HOME_NET any please? (or 192.168.0.0/16)
> > Regards
> > Rmkml
> 
> Ya giddyup!
> 
> Action Stats:
>       Alerts:            2 ( 11.111%)
>       Logged:            2 ( 11.111%)
>       Passed:            0 (  0.000%)
> 
> Ya fires for me too now../24...WTH was I thinking 8-|  Thanks RM.
> 
> James
> 
> 
> ------------------------------------------------------------------------------
> Try New Relic Now & We'll Send You this Cool Shirt
> New Relic is the only SaaS-based application performance monitoring service 
> that delivers powerful full stack analytics. Optimize and monitor your
> browser, app, & servers with just a few lines of code. Try New Relic
> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
> 
> 
> Please visit http://blog.snort.org for the latest news about Snort!
 		 	   		   		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130429/acc4b954/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: snort.conf
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130429/acc4b954/attachment.ksh>


More information about the Snort-sigs mailing list