[Snort-users] ROFL (me too)

Ryan Russell ryan at ...35...
Tue Nov 27 12:02:15 EST 2001

This is something that drives us nuts on the ARIS project.  Some of the
signatures will go off when discussing the signature.  So, someone
discusses . s c r on this list, and all of the subscribers (who all run
Snort, naturally) suddenly have the rule go off.


On Tue, 27 Nov 2001, Chr. v. Stuckrad wrote:

> On Tue, Nov 27, 2001 at 11:43:30AM -0700, Jim Forster wrote:
> > Ok, the rule works...  Just got a nice fresh copy of the worm from someone
> > on the list.  I'm contacting them directly.  :P
> Interesting, I so far only got all the *Virus-Warnings*
> containg the strings, including the newest Mails of the list :-)
> So if you read 'bugtraq' and similars, do not wonder ....

More information about the Snort-users mailing list