[Snort-users] Rules & reference (ACID)

Bruno Gimenes Pereti pereti at ...3411...
Sat Nov 10 03:24:03 EST 2001


Hi All,

I updated to Snort 1.8.2 from the rpm avalible in www.snort.com and I'm
using the rules that comes with it.
I've got some attempts of "WEB-MISC readme.eml autoload attempt" and ACID
report shows: "[url] WEB-MISC readme.eml autoload attempt". I mean...
Shouldn't the be something like [CVE] with the link to the www.cert.org
page?

I'm using ACID v0.9.6 with schema 104.
Do I need to update my ACID?

Thank's.

Bruno Gimenes Pereti.





More information about the Snort-users mailing list