[Snort-users] P2P GNUTella GET

Chris Green cmg at ...1935...
Tue Aug 27 11:06:05 EDT 2002

"Tony Wong" <tony.wong at ...5535...> writes:

> I am getting this in ACID from an external source to one of my apache
> web servers.
> P2P GNUTella GET
> What is it?

A bad signature to detect p2p GETs from gnutella.

It just looks for gets on non-port 80
Chris Green <cmg at ...1935...>
Warning: time of day goes back, taking countermeasures.

More information about the Snort-users mailing list