Re: 21042 Blacklist

[Joel Esler <jesler () sourcefire com>]

Leroy,

As JJ points out, the rule below is one of the references in the rule itself.  That rule was written off of a live 
exploit for blackhole.  Are you seeing hits on that at your location?

J

On Feb 23, 2012, at 5:21 PM, JJC <cummingsj () gmail com> wrote:

> http://contagiodump.blogspot.com/2012/01/blackhole-ramnit-samples-and-analysis.html
>
> On Thu, Feb 23, 2012 at 3:05 PM, Ranel, LeRoy (Norcross) <LeRoy.Ranel () fiserv com> wrote:
> Can someone provide some insight or direct me to a location for more information regarding the behavior of this 
> expoloit?
>
>  

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!