[Snort-sigs] Bleedingsnort.com Daily Update

[***] Results from Oinkmaster started Fri Dec 10 21:00:03 2004 [***]

[+++]          Added rules:          [+++]

     -> Added to bleeding-virus.rules (2):
        alert tcp $EXTERNAL_NET any -> any 25 (msg:"Zafi.B Worm - incoming "; 
content:"Uk5FTDMyLmRsbAAAAExvYWRMaWJyYXJ5QQAAR2V0UHJvY0FkZHJlc3MAAAAAAA"; 
nocase; classtype:misc-activity; sid:2001572;)
        alert tcp $HOME_NET any -> any 25 (msg:"Zafi.B Worm outgoing detected 
"; content:"Uk5FTDMyLmRsbAAAAExvYWRMaWJyYXJ5QQAAR2V0UHJvY0FkZHJlc3MAAAAAAA"; 
threshold: type limit, track by_src, count 10 , seconds 60 ; nocase; 
classtype:misc-activity; sid:2001573;)

[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (2):
        2001572 || Zafi.B Worm - incoming
        2001573 || Zafi.B Worm outgoing detected

     -> Added to bleeding-virus.rules (2):
        #added by Mark Scott, Mark.Scott@mtgroup.com, 6/13/2004 for incoming 
Zafi.B
        #added by Mark Scott, Mark.Scott@mtgroup.com, 6/13/2004 for outgoing 
Zafi.B

[*] Added files: [*]
    None.



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs