RE: SQL Slapper Worm rule for 1.8.7

["L. Christopher Luther" <CLuther () Xybernaut com>]

Here ya go:  

    http://www.snort.org/snort-db/sid.html?sid=2003

To use this rule on Snort 1.8.6 and 1.8.7, drop the "sid:2003; rev:2;" text
from the rule, as there is no SID value of 2003 for Snort 1.8.x (at least I
could not find one in my sid-msg.map file).  Everything else in the rule
seems to work fine.  


Cheer! 
  Christopher  


-----Original Message-----
From: "Dhruv Chandra" <dhruvc () hotmail com>
To: snort-users () lists sourceforge net
Date: Tue, 28 Jan 2003 09:27:13 -0500
Subject: [Snort-users] SQL Slapper Worm rule for 1.8.7

Hi

Where can I get the rule for SQL Slapper worm for Snort 1.8.7.

If someone can  provide me any information ... it'll be gretly appreciated.

Cheers and have a wonderful day.

Dhruv