[Snort-users] Rules & reference (ACID)
Bruno Gimenes Pereti
pereti at ...3411...
Sat Nov 10 03:24:03 EST 2001
I updated to Snort 1.8.2 from the rpm avalible in www.snort.com and I'm
using the rules that comes with it.
I've got some attempts of "WEB-MISC readme.eml autoload attempt" and ACID
report shows: "[url] WEB-MISC readme.eml autoload attempt". I mean...
Shouldn't the be something like [CVE] with the link to the www.cert.org
I'm using ACID v0.9.6 with schema 104.
Do I need to update my ACID?
Bruno Gimenes Pereti.
More information about the Snort-users