[Snort-users] Re: MyDoom Outbound Impossible Detects

McCash, John John.McCash at ...10979...
Fri Feb 6 13:58:31 EST 2004


Chris,
	Looking at the decode of the SNMP session, the message that's tripping the alert is definitely an original outbound MyDoom message, not a bounce.
		John
------------------------------------------------------------------------------------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information.  
If you have received it in error, please notify the sender
immediately and delete the original.  Any unauthorized use of
this email is prohibited.
------------------------------------------------------------------------------------------------
[mf2]




More information about the Snort-users mailing list