Re: [Snort-sigs] Re: [Full-Disclosure] Mystery DNS Changes

From: Paul Tinsley <pdt(at)jackhammer.org>
Date: Thu Oct 02 2003 - 07:29:00 EDT

Someone brought to my attention that I neglected udp (thank you Adam), sorry about that I was in a hurry when I posted this, there is another just like the tcp one that says udp :) Both are being triggered by the clients affected as one would expect, so for full coverage, do both.

Paul Tinsley wrote:

> Don't know if this will help anybody else but I have added this to all

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Oct 2 07:51:39 2003