Re: [Snort-sigs] Question about sid: 1002

From: Brian <bmc(at)snort.org>
Date: Thu Apr 03 2003 - 10:05:32 EST

On Wed, Apr 02, 2003 at 05:13:26PM -0600, Paul Schmehl wrote:
> This rule reads:

Because you would not pick up the scanners that just look for cmd.exe

-brian

---

This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Apr 3 10:33:38 2003