[Snort-users] Virus Rules

Harper, Patrick patrick.harper at ...11593...
Mon Jul 26 20:48:00 EDT 2004


I use a lot of them on both my snort sensors and sourcefire sensors


-----Original Message-----
From: Bill Warren [mailto:bwarren at ...12173...] 
Sent: Monday, July 26, 2004 3:36 PM
Cc: 'snort users'
Subject: Re: [Snort-users] Virus Rules

How well do they work?

Patrick S. Harper wrote:

> check out http://www.bleedingsnort.com/
>  
>
>
> Patrick S. Harper | CISSP RHCT MCSE
> www.internetsecurityguru.com
>
> www.ntsug.org - Snort Users Group
>
> "If there is no light at the end of the tunnel, get down there and 
> light the damn thing yourself!"
>  
>
>  
>
> ----------------------------------------------------------------------
> --
> *From:* snort-users-admin at lists.sourceforge.net
> [mailto:snort-users-admin at lists.sourceforge.net] *On Behalf Of *nt
> *Sent:* Sunday, July 25, 2004 10:06 AM
> *To:* snort users
> *Subject:* [Snort-users] Virus Rules
>
> Does anyone have a good set of new virus rules.
>
> ----------------------------------------------------------------------
> --
> Do you Yahoo!?
> Yahoo! Mail Address AutoComplete
> <http://us.rd.yahoo.com/mail_us/taglines/aac/*http://promotions.yahoo.
> com/new_mail/static/ease.html>
> - You start. We finish.
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.726 / Virus Database: 481 - Release Date: 7/22/2004
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.726 / Virus Database: 481 - Release Date: 7/22/2004
>

-- 

**********************************
Bill Warren
Optivel, Inc.
E-mail: bwarren at ...12173...
Voice:  317.275.2305
Fax:    317.275.2301
Web:    http://www.optivel.com
**********************************


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java
Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. 







More information about the Snort-users mailing list