Snort mailing list archives

Re: Team0x42 Snort rules


From: "Justin Heath" <justin.heath () gmail com>
Date: Mon, 7 Apr 2008 22:08:57 -0400

We can't all be paid to write Snort rules full time. So, thanks for
contributing, keep it up an keep learning.

Cheers,
Justin

On Mon, Apr 7, 2008 at 9:53 PM, Paul Melson <pmelson () gmail com> wrote:

Some good snort rules by Team0x42
Shellcode detection, Web attack detection, DoS detection and web-misc
rules You can download the rule set from:
http://team0x42.homeunix.org/projects.html

I mean, good for you for learning to write Snort rules and then sharing
that
back with the community.  Keep it up.  But honestly, I wouldn't actually
run
this rule set.  If you're interested in hearing my reasons why, I'm happy
to
share them with the intent that you may learn to write better rules.

PaulM (Revere)

PS - BMC's got his own room at the back of the bus.



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Register now and save $200. Hurry, offer ends at 11:59 p.m.,
Monday, April 7! Use priority code J8TLD2.

http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-usersSnort-users>list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Register now and save $200. Hurry, offer ends at 11:59 p.m., 
Monday, April 7! Use priority code J8TLD2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: