[Snort-users] ROFL (me too)
ryan at ...35...
Tue Nov 27 12:02:15 EST 2001
This is something that drives us nuts on the ARIS project. Some of the
signatures will go off when discussing the signature. So, someone
discusses . s c r on this list, and all of the subscribers (who all run
Snort, naturally) suddenly have the rule go off.
On Tue, 27 Nov 2001, Chr. v. Stuckrad wrote:
> On Tue, Nov 27, 2001 at 11:43:30AM -0700, Jim Forster wrote:
> > Ok, the rule works... Just got a nice fresh copy of the worm from someone
> > on the list. I'm contacting them directly. :P
> Interesting, I so far only got all the *Virus-Warnings*
> containg the strings, including the newest Mails of the list :-)
> So if you read 'bugtraq' and similars, do not wonder ....
More information about the Snort-users