[***] Results from Oinkmaster started Thu Oct 28 20:00:02 2004 [***]
[+++] Added rules: [+++]
-> Added to bleeding-inappropriate.rules (4):
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (
msg:"BLEEDING-EDGE INAPPROPRIATE Kiddy Porn childlover"; content:" childlover
"; nocase; sid:2001389; rev:1;)
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (
msg:"BLEEDING-EDGE INAPPROPRIATE Kiddy Porn pthc"; content:" pthc "; nocase;
sid:2001386; rev:1;)
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (
msg:"BLEEDING-EDGE INAPPROPRIATE Kiddy Porn r@ygold"; content:" r@ygold ";
nocase; sid:2001388; rev:1;)
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (
msg:"BLEEDING-EDGE INAPPROPRIATE Kiddy Porn zeps"; content:" zeps "; nocase;
sid:2001387; rev:1;)
[---] Removed rules: [---]
-> Removed from bleeding-inappropriate.rules (2):
alert tcp $HOME_NET any -> any !443 (msg:"BLEEDING-EDGE Inappropriate
Content - Blowjob"; content:" blowjob "; nocase; flow:established;
classtype:policy-violation; sid:2001354; rev:2;)
alert tcp $HOME_NET any -> any !443 (msg:"BLEEDING-EDGE Inappropriate
Content - Pussy"; content:" pussy "; nocase; flow:established;
classtype:policy-violation; sid:2001357; rev:2;)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-inappropriate.rules (1):
#From Patrick Harper
-> Added to bleeding-sid-msg.map (4):
2001386 || BLEEDING-EDGE INAPPROPRIATE Kiddy Porn pthc
2001387 || BLEEDING-EDGE INAPPROPRIATE Kiddy Porn zeps
2001388 || BLEEDING-EDGE INAPPROPRIATE Kiddy Porn r@ygold
2001389 || BLEEDING-EDGE INAPPROPRIATE Kiddy Porn childlover
[---] Removed non-rule lines: [---]
-> Removed from bleeding-sid-msg.map (2):
2001354 || BLEEDING-EDGE Inappropriate Content - Blowjob
2001357 || BLEEDING-EDGE Inappropriate Content - Pussy
[*] Added files: [*]
None.
-------------------------------------------------------
This Newsletter Sponsored by: Macrovision
For reliable Linux application installations, use the industry's leading
setup authoring tool, InstallShield X. Learn more and evaluate
today. http://clk.atdmt.com/MSI/go/ins0030000001msi/direct/01/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
