Rules for ssh exploit

[Russell Fulton <r.fulton () auckland ac nz>]

Hi All,
        Does any one have snort rules for detecting the recent spate of 
ssh attacks or are all the usable fingerprints hidden by the encryption?

Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand






_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users