Re: ROFL (me too)

[Ryan Russell <ryan () securityfocus com>]

This is something that drives us nuts on the ARIS project.  Some of the
signatures will go off when discussing the signature.  So, someone
discusses . s c r on this list, and all of the subscribers (who all run
Snort, naturally) suddenly have the rule go off.

                                        Ryan

On Tue, 27 Nov 2001, Chr. v. Stuckrad wrote:

> On Tue, Nov 27, 2001 at 11:43:30AM -0700, Jim Forster wrote:
> > Ok, the rule works...  Just got a nice fresh copy of the worm from someone
> > on the list.  I'm contacting them directly.  :P
>
> Interesting, I so far only got all the *Virus-Warnings*
> containg the strings, including the newest Mails of the list :-)
> So if you read 'bugtraq' and similars, do not wonder ....


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users