[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] Sid 6251 misspelling
From:       Alex Kirk <akirk () sourcefire ! com>
Date:       2010-05-19 13:08:42
Message-ID: AANLkTilPi7WZIMaWW0qYjEIkJxXORPtxuRr2KSdu77Wp () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Actually, no, that's just the name of the particular toolbar that rule
detects. Easy to confuse, for sure, but if you check especially the first
reference, you'll see it's correct.

Thanks anyway, though, and don't let this discourage you from continuing to
check the rules. We'll make corrections wherever they're warranted. :-)

On Mon, May 17, 2010 at 4:41 PM, Lee Clemens <snort@leeclemens.net> wrote:

> Hello,
>
> It looks like sid 6251 is missing an l in the message: hostie - should be
> hostile.
>
> -Lee
>
>
> ------------------------------------------------------------------------------
>
>
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>
>


-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk@sourcefire.com

[Attachment #5 (text/html)]

Actually, no, that&#39;s just the name of the particular toolbar that rule detects. \
Easy to confuse, for sure, but if you check especially the first reference, \
you&#39;ll see it&#39;s correct.<div><br></div><div>Thanks anyway, though, and \
don&#39;t let this discourage you from continuing to check the rules. We&#39;ll make \
corrections wherever they&#39;re warranted. :-)<br> <br><div class="gmail_quote">On \
Mon, May 17, 2010 at 4:41 PM, Lee Clemens <span dir="ltr">&lt;<a \
href="mailto:snort@leeclemens.net">snort@leeclemens.net</a>&gt;</span> \
wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex;"> <div><div \
style="font-family:sans-serif;font-size:14px">Hello,<br><br>It looks like sid \
<a>6251</a> is missing an l in the message: hostie - should be hostile.<br><font \
color="#888888"><br>-Lee</font></div></div> \
<br>------------------------------------------------------------------------------<br>
 <br>
<br>_______________________________________________<br>
Snort-sigs mailing list<br>
<a href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a><br>
 <a href="https://lists.sourceforge.net/lists/listinfo/snort-sigs" \
target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a><br> \
<br></blockquote></div><br><br clear="all"><br>-- <br>Alex Kirk<br>AEGIS Program \
Lead<br>Sourcefire Vulnerability Research Team<br>+1-410-423-1937<br><a \
href="mailto:alex.kirk@sourcefire.com">alex.kirk@sourcefire.com</a><br>

</div>



------------------------------------------------------------------------------



_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


[prev in list] [next in list] [prev in thread] [next in thread]