[Snort-sigs] Netsky.P Signature

From: Cam Beasley, ISO <cam(at)austin.utexas.edu>
Date: Mon Mar 22 2004 - 17:24:29 EST

Netsky.P:

---

alert tcp any any -> any 25 (msg:"Netsky.P"; content:"EtLD/LKApGoCW/8UJHP3M8n/FCRzGDPA/xQkcyGzAkGwEP8UJBLAc/l1P6rr3Oh DAAAAK8t1";
classtype:misc-attack; rev:1;)

I would be interested to know of any
false positives/negatives you encounter.

~cam.

Cam Beasley
Information Security Office
The University of Texas at Austin
cam@austin.utexas.edu

---

This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&opick

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Mon Mar 22 18:10:46 2004