[Snort-users] Question about why/when VRT rules are commented out?

Andy Berryman aberryman at ...14765...
Thu Feb 18 13:10:39 EST 2010


Just wondering why or how it is determined when sig's are commented out
from the Certified VRT rule set? I was looking for the SID: 15481 Zbot
sig this morning and saw that it was commented out in our Oinkmaster
downloads. Just wondering why the #1 malware in the world would be
commented out? Did it get replaced? I didn't see anything on snort.org
or the forums or the mailing lists when I searched about it being
removed or replaced. 

 

Thanks,

Andy Berryman

 


###############################################################################
This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the recipient(s) named above.  If you are not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this message in error and that any review, disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return e-mail.                    
###############################################################################
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100218/429612da/attachment.html>


More information about the Snort-users mailing list