Snort mailing list archives

Re: What to do with CodeRed(II) logged hosts ?


From: Bob Bernstein <bob () ruptured-duck com>
Date: Mon, 6 Aug 2001 15:01:55 -0400

On Mon, Aug 06, 2001 at 11:59:19AM +0200, ks () schuricht de wrote:

our logfiles grow an grow more cause we get massive 'Code Red' Attacks
to our network.

For those of us who arrived late to this party, are current snort rules for
CRnn (esp. II and later) collected and posted anywhere?

(What are folks using? I'd be grateful if anyone could take the time to post
what they're using.)

-- 
Bob Bernstein
at
Esmond, R.I., USA

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: