[Snort-users] Strange Alert

Nigel Houghton nhoughton at ...1935...
Wed Feb 10 09:08:04 EST 2010


On Wed, Feb 10, 2010 at 8:54 AM, Jens Link <jenslink at ...348...> wrote:
> Nigel Houghton <nhoughton at ...1935...> writes:
>
>> Then if you look in the doc directory (it's in the distribution, look
>> for it) you will find the document that accompanies this event, it is
>> named 133-34.txt. (I thought the gid-sid.txt naming convention might be
>> helpful)
>
> Thanks for your help Nigel,
>
> apparently there is no doc/signatures directory in the 2.8.5.2
> tarball. There is one in the 2.8.5.1 tarball though. I guess that's why
> I couldn't find it.
>
> cheers,
>
> Jens
> --
> -------------------------------------------------------------------------
> | Foelderichstr. 40  | 13595 Berlin, Germany | +49-151-18721264         |
> | http://www.quux.de | http://blog.quux.de   | jabber: jenslink at ...14772...0... |
> -------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
> http://p.sf.net/sfu/solaris-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>


FYI: You will also find the doc/signatures directory in the rules tarball.

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/




More information about the Snort-users mailing list