[Snort-users] Team0x42 Snort rules

Justin Heath justin.heath at ...11827...
Mon Apr 7 22:08:57 EDT 2008


We can't all be paid to write Snort rules full time. So, thanks for
contributing, keep it up an keep learning.

Cheers,
Justin

On Mon, Apr 7, 2008 at 9:53 PM, Paul Melson <pmelson at ...11827...> wrote:

> > Some good snort rules by Team0x42
> > Shellcode detection, Web attack detection, DoS detection and web-misc
> rules You can download the rule set from:
> > http://team0x42.homeunix.org/projects.html
>
> I mean, good for you for learning to write Snort rules and then sharing
> that
> back with the community.  Keep it up.  But honestly, I wouldn't actually
> run
> this rule set.  If you're interested in hearing my reasons why, I'm happy
> to
> share them with the intent that you may learn to write better rules.
>
> PaulM (Revere)
>
> PS - BMC's got his own room at the back of the bus.
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
> Register now and save $200. Hurry, offer ends at 11:59 p.m.,
> Monday, April 7! Use priority code J8TLD2.
>
> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20080407/bb988d73/attachment.html>


More information about the Snort-users mailing list