[Snort-users] newbie: wondering about some alerts

Max Vision vision at ...4...
Fri Aug 11 00:26:08 EDT 2000


On Fri, 11 Aug 2000, Jonas Nyren wrote:
> Hi,
> I recently installed snort and I have some questions about some alerts:
> MISC - Shellcode X86 NOPS
> OVERFLOW-NOOP-X86
> MISC - Shellcode X86 Setgid0
> 
> I am wondering if theres some documentation covering the rules and what
> the person is trying to exploit ?
> 
> For a mortal like me its hard to understand
> 

IDS181/shellcode-x86-nops         http://whitehats.com/IDS/181
IDS284/shellcode-x86-setgid0      http://whitehats.com/IDS/284
IDS283/shellcode-x86-setuid0      http://whitehats.com/IDS/283
IDS291/shellcode-x86-stealth-nop  http://whitehats.com/IDS/291

When you see an IDS### indicator, you can go to
http://whitehats.com/IDS/### to see information about it.

Max








More information about the Snort-users mailing list