[Snort-users] SQL Slapper Worm rule for 1.8.7

L. Christopher Luther CLuther at ...6333...
Tue Jan 28 09:34:09 EST 2003


Here ya go:  

    http://www.snort.org/snort-db/sid.html?sid=2003

To use this rule on Snort 1.8.6 and 1.8.7, drop the "sid:2003; rev:2;" text
from the rule, as there is no SID value of 2003 for Snort 1.8.x (at least I
could not find one in my sid-msg.map file).  Everything else in the rule
seems to work fine.  


Cheer! 
  Christopher  


-----Original Message-----
From: "Dhruv Chandra" <dhruvc at ...125...>
To: snort-users at lists.sourceforge.net
Date: Tue, 28 Jan 2003 09:27:13 -0500
Subject: [Snort-users] SQL Slapper Worm rule for 1.8.7

Hi

Where can I get the rule for SQL Slapper worm for Snort 1.8.7.

If someone can  provide me any information ... it'll be gretly appreciated.

Cheers and have a wonderful day.

Dhruv
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030128/dca98094/attachment.html>


More information about the Snort-users mailing list