[Snort-users] Outbound string contains c m d.exe, but from where?

Noller, Gregory Noller2G at ...4290...
Thu Jan 24 07:17:13 EST 2002


Oh great wizards of snort....are any of you seeing outbound c m d . e x e
where it ought not to be?


I am seeing the following string in some infrequent packets exiting my nat
router that sits in front of my outbound proxy array:



More information about the Snort-users mailing list