New nimda variant?

[Russell Fulton <r.fulton () auckland ac nz>]

Moderator:
        If you get this before posting my other message with the same subject
line then please consign both to the bit bucket otherwise please post
this retraction...

Further investigation reveals (what I should have realized immediately)
that this is an artifact of a new version of snort that I installed.

i.e. these are perfectly normal nimda being reported differently by the
new version of snort. Doh! and it isn't even Monday...

Apologies for the confusion.

Russell.

-- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com