[Snort-users] GET /.hash=
tschenz-snort-users at ...7018...
Tue Dec 3 00:01:11 EST 2002
> 188.8.131.52 - - [02/Dec/2002:03:21:52 -0600] "GET
> /.hash=c53afc03d9fbdd5ffd2e7fed919ee6ff9f2633cb HTTP/1.1" 416 385
Have a look at following thread:
There is one mail on snort-sigs that says that 'GET /.hash=' seems to be
the signature of Kazaa Desktop 2. Haven't seen such packets yet, so I
don't know if that's true or not ;).
More information about the Snort-users