[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] UDP on port 6667
From:       "lists () packetmail ! net" <lists () packetmail ! net>
Date:       2013-03-07 15:00:32
Message-ID: 5138AB90.9010207 () packetmail ! net
[Download RAW message or body]

On 03/07/2013 08:57 AM, Aisling Brennan wrote:
> Is this known malware?

Since UDP is stateless, you should have the full contents of the datagram, mind
sharing them?

------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic