[Snort-users] P2P GNUTella GET

Chris Green cmg at ...1935...
Tue Aug 27 11:06:05 EDT 2002


"Tony Wong" <tony.wong at ...5535...> writes:

> I am getting this in ACID from an external source to one of my apache
> web servers.
>
> P2P GNUTella GET
>
> What is it?

A bad signature to detect p2p GETs from gnutella.

It just looks for gets on non-port 80
-- 
Chris Green <cmg at ...1935...>
Warning: time of day goes back, taking countermeasures.





More information about the Snort-users mailing list