[Snort-users] porn rules

Tudor Panaitescu tpanaitescu at ...2032...
Mon Feb 25 13:27:06 EST 2002

It can be users checking their webmail accounts (especially hotmail.com) and
actually reading spam with porn invitations. Check out the addresses (dig,
traceroute etc.) to see where they are going. It may be users surfing porn as
well ... the destination address tells you.


Ralf Hildebrandt <Ralf.Hildebrandt at ...3909...> on 02/25/2002 03:20:10 PM
  To:          snort-users at lists.sourceforge.net              
  cc:          (bcc: Tudor Panaitescu/ColorconUS)             
  Subject      Re: [Snort-users] porn rules                   

On Mon, Feb 25, 2002 at 02:46:19PM -0500, Basil Saragoza wrote:
> Enabled porn rules, just to see what is this, and now I have a lot of
> porn-related alerts.
> What is the meaning of porn rules? Are they attacks or just alerts on ads
> sent to my local network?

It's somebody surfing for p0rn.

Ralf Hildebrandt (Im Auftrag des Referat V A)   Ralf.Hildebrandt at ...3909...
Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
OpenVMS is today what Microsoft wants Windows NT v8.0 to be!

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list