[Snort-sigs] F5 BIG-IP

Y M snort at ...3751...
Fri Feb 10 17:39:14 EST 2017

This is a gid:3 signature; a shared object rule. The detection part of a is a compiled object. What you see is the signature stub.

From: Joshua Ochsankehl <joshua.ochsankehl at ...2420...>
Sent: Saturday, February 11, 2017 1:31:26 AM
To: snort-sigs at lists.sourceforge.net
Subject: [Snort-sigs] F5 BIG-IP

Snort talos rules 41547-8 don't contain any content and only have commands within metadata.  What is it actually doing?

Joshua "Ox" Ochsankehl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20170210/daa84eaa/attachment.html>

More information about the Snort-sigs mailing list