Snort mailing list archives
Re: What to do with CodeRed(II) logged hosts ?
From: Bob Bernstein <bob () ruptured-duck com>
Date: Mon, 6 Aug 2001 15:01:55 -0400
On Mon, Aug 06, 2001 at 11:59:19AM +0200, ks () schuricht de wrote:
our logfiles grow an grow more cause we get massive 'Code Red' Attacks to our network.
For those of us who arrived late to this party, are current snort rules for CRnn (esp. II and later) collected and posted anywhere? (What are folks using? I'd be grateful if anyone could take the time to post what they're using.) -- Bob Bernstein at Esmond, R.I., USA _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- What to do with CodeRed(II) logged hosts ? ks (Aug 06)
- Re: What to do with CodeRed(II) logged hosts ? Mark Rowlands (Aug 06)
- Re: What to do with CodeRed(II) logged hosts ? Thierry Coopman (Aug 06)
- Re: What to do with CodeRed(II) logged hosts ? Ryan Russell (Aug 06)
- Re: What to do with CodeRed(II) logged hosts ? Bob Bernstein (Aug 06)
- <Possible follow-ups>
- What to do with CodeRed(II) logged hosts ? Jyri Hovila (Aug 06)
