[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] Empty scada.rules
From:       Nick Randolph <drandolph () sourcefire ! com>
Date:       2015-07-13 14:37:40
Message-ID: 55A3CD34.40205 () sourcefire ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Does protocol-scada have what you were looking for?

On 07/07/2015 06:48 PM, Joel Esler (jesler) wrote:
> Check protocol-scada
>
> --
> *Joel Esler*
> Manager, Threat Intelligence and Open Source
> Talos Group
> Sent from my iPhone
>
> On Jul 7, 2015, at 6:34 PM, Kaleem Khawaja <kaleem.khawaja@gmail.com 
> <mailto:kaleem.khawaja@gmail.com>> wrote:
>
>> Fresh install of snort - downloaded the rules as registered rules. 
>> Looking at the scada.rules - it is empty? Is it by design? Did I miss 
>> something?
>>
>>
>> ------------------------------------------------------------------------------
>> Don't Limit Your Business. Reach for the Cloud.
>> GigeNET's Cloud Solutions provide you with the tools and support that
>> you need to offload your IT needs and focus on growing your business.
>> Configured For All Businesses. Start Your Cloud Today.
>> https://www.gigenetcloud.com/
>> _______________________________________________
>> Snort-sigs mailing list
>> Snort-sigs@lists.sourceforge.net 
>> <mailto:Snort-sigs@lists.sourceforge.net>
>> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>> http://www.snort.org
>>
>>
>> Please visit http://blog.snort.org for the latest news about Snort!
>
>
> ------------------------------------------------------------------------------
> Don't Limit Your Business. Reach for the Cloud.
> GigeNET's Cloud Solutions provide you with the tools and support that
> you need to offload your IT needs and focus on growing your business.
> Configured For All Businesses. Start Your Cloud Today.
> https://www.gigenetcloud.com/
>
>
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!


[Attachment #5 (text/html)]

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Does protocol-scada have what you were looking for? <br>
    <br>
    <div class="moz-cite-prefix">On 07/07/2015 06:48 PM, Joel Esler
      (jesler) wrote:<br>
    </div>
    <blockquote
      cite="mid:AA12C831-8D4C-4B36-A1E2-F14B8B418EDA@cisco.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <div>Check protocol-scada <br>
        <br>
        <div>--</div>
        <div><b>Joel Esler</b> </div>
        <div>Manager, Threat Intelligence and Open Source</div>
        <div>Talos Group</div>
        Sent from my iPhone</div>
      <div><br>
        On Jul 7, 2015, at 6:34 PM, Kaleem Khawaja &lt;<a
          moz-do-not-send="true" \
href="mailto:kaleem.khawaja@gmail.com">kaleem.khawaja@gmail.com</a>&gt;  wrote:<br>
        <br>
      </div>
      <blockquote type="cite">
        <div>
          <div dir="ltr">
            <div class="gmail_default"
              style="font-family:verdana,sans-serif;font-size:small;color:#000000">
              Fresh install of snort - downloaded the rules as
              registered rules. Looking at the scada.rules - it is
              empty? Is it by design? Did I miss something? </div>
            <div class="gmail_default"
              style="font-family:verdana,sans-serif;font-size:small;color:#000000">
              <br>
            </div>
            <div>
              <div class="gmail_signature"><br>
                <div
style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%"></div>
  </div>
            </div>
          </div>
        </div>
      </blockquote>
      <blockquote type="cite">
        <div><span>------------------------------------------------------------------------------</span><br>
  <span>Don't Limit Your Business. Reach for the Cloud.</span><br>
          <span>GigeNET's Cloud Solutions provide you with the tools and
            support that</span><br>
          <span>you need to offload your IT needs and focus on growing
            your business.</span><br>
          <span>Configured For All Businesses. Start Your Cloud Today.</span><br>
          <span><a moz-do-not-send="true"
              href="https://www.gigenetcloud.com/">https://www.gigenetcloud.com/</a></span></div>
  </blockquote>
      <blockquote type="cite">
        <div><span>_______________________________________________</span><br>
          <span>Snort-sigs mailing list</span><br>
          <span><a moz-do-not-send="true"
              href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a></span><br>
  <span><a moz-do-not-send="true"
              href="https://lists.sourceforge.net/lists/listinfo/snort-sigs">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a></span><br>
                
          <span><a moz-do-not-send="true" \
href="http://www.snort.org">http://www.snort.org</a></span><br>  <span></span><br>
          <span></span><br>
          <span>Please visit <a moz-do-not-send="true"
              href="http://blog.snort.org">http://blog.snort.org</a> for
            the latest news about Snort!</span></div>
      </blockquote>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">------------------------------------------------------------------------------
 Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
<a class="moz-txt-link-freetext" \
href="https://www.gigenetcloud.com/">https://www.gigenetcloud.com/</a></pre>  <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Snort-sigs mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@lists.sourceforge.net</a> \
<a class="moz-txt-link-freetext" \
href="https://lists.sourceforge.net/lists/listinfo/snort-sigs">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a>
 <a class="moz-txt-link-freetext" \
href="http://www.snort.org">http://www.snort.org</a>


Please visit <a class="moz-txt-link-freetext" \
href="http://blog.snort.org">http://blog.snort.org</a> for the latest news about \
Snort!</pre>  </blockquote>
    <br>
  </body>
</html>



------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/

_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic