[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] FP: WEB-CLIENT Microsoft SYmbolic LinK file
From:       Ureleet <ureleet () gmail ! com>
Date:       2008-06-29 18:31:25
Message-ID: 6158bb410806291131o47f1434ev8efe2891bf0e0503 () mail ! gmail ! com
[Download RAW message or body]

this sig sucked.

On Fri, Jun 27, 2008 at 2:11 AM, Nerijus Krukauskas
<nkrukauskas@gmail.com> wrote:
> Rule: WEB-CLIENT Microsoft SYmbolic LinK file download request [sid 13583].
>
> FP: generates alerts when the search content string "slk" is matched
> with part of web server address. E.g. ww.slkferries.ee.
>
> --
> http://nk99.org/
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
[prev in list] [next in list] [prev in thread] [next in thread]