[Snort-users] MS-SQL Worm Signature

Erick Mechler emechler at ...7719...
Mon Jan 27 13:17:05 EST 2003


:: Snort says this rule is invalid (assumedly based on the content string?)
:: Anyone have a working version?

I'm using the one on snort.org referred to by Marty earlier this weekend.

  http://www.snort.org/snort-db/sid.html?sid=2003

Cheers - Erick




More information about the Snort-users mailing list