[Snort-users] ROFL (me too)
bmc at ...950...
Wed Nov 28 06:46:03 EST 2001
According to Ryan Russell:
> This is something that drives us nuts on the ARIS project. Some of the
> signatures will go off when discussing the signature. So, someone
> discusses . s c r on this list, and all of the subscribers (who all run
> Snort, naturally) suddenly have the rule go off.
Again, one of the reasons that virus.rules is disabled by default.
Cause they suck.
Save the whales. Collect the whole set.
More information about the Snort-users