[Snort-users] Increase in ASN.1 alerts

Joe Gedeon joe.gedeon at ...11827...
Wed Feb 2 12:53:27 EST 2011


Has anyone else noticed an increase in the number of alerts for
SPECIFIC-THREATS ASN.1 constructed bit string?  The payload seems
different than the kill-bill script.

An example can be found here.
http://pastebin.com/y9jAigbb

Sincerely,
Joe

-- 
Registered Linux User # 379282




More information about the Snort-users mailing list