Home page logo

snort logo Snort mailing list archives

Re: snort ok now
From: Y M <snort () outlook com>
Date: Sat, 20 Apr 2013 13:40:40 +0300

As I said before, it is better to send help requests and/or solutions to the list and not in private. Other people may 
benefit and there are highly skilled people that can provide good information.

Having that said, did you review the VRT ruleset? You may find what you are looking for; indicator-shellcode.rules 
might be a good start.

From: MCLEOD, DONNIE<mailto:DMCLEO11 () caledonian ac uk>
Sent: ‎4/‎20/‎2013 12:55 PM
To: Y M<mailto:snort () outlook com>
Subject: RE: snort ok now

Hi YM , could you help with a rule for shell code?  that I can use in the rules, thanks

From: Y M [snort () outlook com]
Sent: 19 April 2013 16:55
Cc: snort-users () lists sourceforge net
Subject: RE: snort ok now

Glad it is working now. Please post to the entire list as it may help someone else.


Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
  • Re: snort ok now Y M (Apr 19)
    • <Possible follow-ups>
    • Re: snort ok now Y M (Apr 20)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]