Network Security: Detailed info on [Snort-sigs] false positive on sid:542

Subject:	[Snort-sigs] false positive on sid:542
Date:	Wed, 05 Apr 2006 08:19:32 -0500

# This is a template for submitting snort signature descriptions to
# the snort.org website
#
# Ensure that your descriptions are your own
# and not the work of others.  References in the rules themselves
# should be used for linking to other's work.
#
# If you are unsure of some part of a rule, use that as a commentary
# and someone else perhaps will be able to fix it.
#
# $Id$
#
#

Rule: alert tcp $HOME_NET any -> $EXTERNAL_NET 6666:7000 (msg:"CHAT IRC nick change"; flow:to_server,established; content:"NICK "; offset:0; nocase; classtype:policy-violation; sid:542; rev:11;)

--
Sid: 542

-- False Positives: This rule fires on "NICK" anywhere in the payload; the following packets triggered the rule.


------------------------------------------------------------------------
Count:1 Event#3.1100162 2006-04-03 01:00:48
CHAT IRC nick change
192.168.0.131 -> 70.36.218.114
IPVer=4 hlen=5 tos=0 dlen=1444 ID=35520 flags=2 offset=0 ttl=128 chksum=2336
Protocol: 6 sport=10789 -> dport=6693

Seq=3821556295 Ack=1593693919 Off=5 Res=0 Flags=***AP*** Win=65511 urp=32493 chksum=0 Payload: 31 00 00 00 03 31 00 00 00 0E 00 00 00 47 69 6C 1....1.......Gil 6C 65 73 5F 64 65 5F 52 61 69 73 59 03 00 00 12 les_de_RaisY.... 00 00 00 6D 69 63 68 61 65 6C 20 63 20 6D 79 20 ...michael c my 77 6F 72 6C 64 2D 00 00 00 03 31 00 00 00 11 00 world-....1..... 00 00 79 79 31 32 33 36 36 35 39 39 35 36 34 35 ..yy123665995645 34 35 34 52 08 00 00 0B 00 00 00 57 6F 6C 66 6D 454R.......Wolfm 6F 74 68 65 72 20 25 00 00 00 03 31 00 00 00 07 other %....1.... 00 00 00 7A 65 65 6B 69 6E 64 AA 00 00 00 0D 00 ...zeekind...... 00 00 6C 27 61 72 63 20 65 6E 20 63 69 65 6C 26 ..l'arc en ciel& 00 00 00 03 31 00 00 00 09 00 00 00 47 72 69 7A ....1.......Griz 7A 6F 34 32 30 DE 04 00 00 0C 00 00 00 62 69 67 zo420........big 20 61 6E 64 20 72 69 63 68 24 00 00 00 03 31 00 and rich$....1. 00 00 0A 00 00 00 54 48 45 20 47 45 4E 49 55 53 ......THE GENIUS 3B 01 00 00 09 00 00 00 6A 69 6D 20 62 72 6F 77 ;.......jim brow 6E 2F 00 00 00 03 31 00 00 00 09 00 00 00 63 68 n/....1.......ch 6A 61 63 6B 65 74 74 1E 00 00 00 15 00 00 00 73 jackett........s 75 62 20 64 75 62 20 6D 69 63 72 6F 20 6D 61 63 ub dub micro mac 68 69 6E 65 26 00 00 00 03 31 00 00 00 0A 00 00 hine&....1...... 00 4D 61 4D 75 36 36 37 37 38 38 3C 00 00 00 0B .MaMu667788<.... 00 00 00 65 6C E4 6B 65 6C E4 69 73 65 74 23 00 ...el.kel.iset#. 00 00 03 31 00 00 00 06 00 00 00 4E 6F 2E 31 32 ...1.......No.12 38 D4 01 00 00 0C 00 00 00 4D 75 73 74 61 72 64 8........Mustard 20 50 6C 75 67 24 00 00 00 03 31 00 00 00 09 00 Plug$....1..... 00 00 79 75 6B 6F 6E 77 68 69 74 02 00 00 00 0A ..yukonwhit..... 00 00 00 6B 61 74 68 79 20 73 6F 6E 67 2F 00 00 ...kathy song/.. 00 03 31 00 00 00 0B 00 00 00 53 6F 66 61 20 53 ..1.......Sofa S 75 72 66 65 72 4A 0F 00 00 13 00 00 00 67 72 65 urferJ.......gre 65 6E 20 62 6C 75 65 20 6C 6F 63 6F 64 69 63 65 en blue locodice 22 00 00 00 03 31 00 00 00 05 00 00 00 62 61 62 "....1.......bab 61 6B 10 00 00 00 0C 00 00 00 67 6F 72 64 69 61 ak........gordia 6E 20 6B 6E 6F 74 32 00 00 00 03 31 00 00 00 0A n knot2....1.... 00 00 00 73 73 6B 73 6B 73 6B 73 6B 73 1B 02 00 ...ssksksksks... 00 17 00 00 00 6E 6F 20 73 6F 6D 6F 73 20 6C 6F .....no somos lo 20 71 75 65 20 71 75 69 65 72 65 73 20 00 00 00 que quieres ... 03 31 00 00 00 05 00 00 00 61 6E 61 6D 66 DB 00 .1.......anamf.. 00 00 0A 00 00 00 6C 6F 73 20 6A 61 69 76 61 73 ......los jaivas 23 00 00 00 03 31 00 00 00 07 00 00 00 72 6F 62 #....1.......rob 6F 63 6F 70 FD 09 00 00 0B 00 00 00 70 75 72 65 ocop........pure 20 6C 6F 76 65 72 73 3D 00 00 00 03 31 00 00 00 lovers=....1... 07 00 00 00 6D 69 63 20 68 65 6C 25 00 00 00 25 ....mic hel%...% 00 00 00 54 4F 55 4D 41 4E 49 20 44 49 41 42 41 ...TOUMANI DIABA 54 C9 92 53 20 53 59 4D 4D 45 54 52 49 43 20 4F T..S SYMMETRIC O 52 43 48 45 53 54 52 41 2B 00 00 00 03 31 00 00 RCHESTRA+....1.. 00 03 00 00 00 4F 50 59 9C 00 00 00 17 00 00 00 .....OPY........ 6C 61 20 70 72 69 6D 61 76 65 72 61 20 74 72 6F la primavera tro 6D 70 65 74 65 72 61 2D 00 00 00 03 31 00 00 00 mpetera-....1... 08 00 00 00 64 6A 2D 62 6F 75 72 67 8E 61 00 00 ....dj-bourg.a.. 14 00 00 00 6A 65 20 74 20 61 69 6D 65 20 6D E9 ....je t aime m. 6C 61 6E 63 6F 6C 69 65 21 00 00 00 03 31 00 00 lancolie!....1.. 00 04 00 00 00 79 6F 79 6F 5B 00 00 00 0C 00 00 .....yoyo[...... 00 6A 65 6E 6E 61 20 6A 61 6D 73 6F 6E 28 00 00 .jenna jamson(.. 00 03 31 00 00 00 07 00 00 00 61 69 72 77 65 62 ..1.......airweb 7A 1B 07 00 00 10 00 00 00 61 6E 69 6D 61 6E 69 z........animani 61 63 73 20 74 68 65 6D 65 32 00 00 00 03 31 00 acs theme2....1. 00 00 0B 00 00 00 44 72 69 76 65 72 56 52 36 32 ......DriverVR62 38 A9 00 00 00 16 00 00 00 76 65 6E 75 73 69 61 8........venusia 6E 20 61 72 74 73 20 68 61 6E 64 62 6F 6F 6B 23 n arts handbook# 00 00 00 03 31 00 00 00 08 00 00 00 6A 6F 68 6E ....1.......john 31 35 36 36 82 00 00 00 0A 00 00 00 6C 61 73 74 1566........last 20 65 78 69 6C 65 20 00 00 00 03 31 00 00 00 07 exile ....1.... 00 00 00 72 61 6E 75 6B 69 63 97 00 00 00 08 00 ...ranukic...... 00 00 74 65 65 6E 20 73 65 78 23 00 00 00 03 31 ..teen sex#....1 00 00 00 09 00 00 00 64 6F 6E 6E 65 72 76 32 31 .......donnerv21 27 02 00 00 09 00 00 00 6A 61 6E 61 20 63 6F 76 '.......jana cov 61 20 00 00 00 03 31 00 00 00 04 00 00 00 6A 65 a ....1.......je 61 6B 70 05 00 00 0B 00 00 00 73 61 76 76 6F 70 akp.......savvop 6F 75 6C 6F 73 30 00 00 00 03 31 00 00 00 0C 00 oulos0....1..... 00 00 63 72 61 74 65 20 64 69 67 67 65 72 CB 52 ..crate digger.R 00 00 13 00 00 00 6E 69 63 6B 20 63 61 76 65 20 ......nick cave 61 76 61 6C 61 6E 63 68 65 54 00 00 00 03 31 00 avalancheT....1. 00 00 08 00 00 00 62 65 61 74 6D 6F 6E 6B F3 11 ......beatmonk.. 00 00 3B 00 00 00 41 76 61 6C 6F 6E 20 53 75 70 ..;...Avalon Sup 65 72 73 74 61 72 20 52 69 74 61 20 43 61 6D 70 erstar Rita Camp 62 65 6C 6C 20 41 6C 6C 20 6D 79 20 4C 6F 76 65 bell All my Love 20 53 6F 75 6C 20 53 65 65 6B 65 72 7A 20 6D 70 Soul Seekerz mp 33 35 00 00 00 03 31 00 00 00 09 00 00 00 61 70 35....1.......ap 6F 6C 6F 67 69 73 74 88 00 00 00 1B 00 00 00 74 ologist........t 65 6E 20 74 68 69 6E 67 73 20 69 20 68 61 74 65 en things i hate 20 61 62 6F 75 74 20 79 6F 75 2F 00 00 00 03 31 about you/....1 00 00 00 0F 00 00 00 47 61 78 64 6F 73 63 75 61 .......Gaxdoscua 74 72 6F 64 6F 73 41 36 00 00 0F 00 00 00 6D 6F trodosA6......mo 6E 65 67 72 6F 73 20 69 6E 64 6F 6F 72 2C 00 00 negros indoor,.. 00 03 31 00 00 00 0C 00 00 00 5E 5E 43 6F 4F 6C ..1.......^^CoOl 53 69 54 61 5E 5E EA 00 00 00 0F 00 00 00 6D 61 SiTa^^........ma 6C 64 69 74 61 20 68 65 72 6D 6F 73 61 2B 00 00 ldita hermosa+.. 00 03 31 00 00 00 0A 00 00 00 6E 61 73 74 79 5F ..1.......nasty_ 64 6F 67 67 77 0C 00 00 10 00 00 00 73 6F 6E 72 doggw.......sonr 69 61 20 70 6F 72 20 66 61 76 6F 72 ia por favor ------------------------------------------------------------------------ Count:1 Event#3.1101403 2006-04-03 01:13:48 CHAT IRC nick change 192.168.0.131 -> 70.36.218.114 IPVer=4 hlen=5 tos=0 dlen=617 ID=9357 flags=2 offset=0 ttl=128 chksum=29326 Protocol: 6 sport=10789 -> dport=6693

Seq=3821657051 Ack=1593693919 Off=5 Res=0 Flags=***AP*** Win=65511 urp=12918 chksum=0 Payload: 2C 00 00 00 03 31 00 00 00 12 00 00 00 76 6F 75 ,....1.......vou 20 74 65 20 64 61 72 20 61 6C 65 67 72 69 61 85 te dar alegria. 00 00 00 09 00 00 00 65 64 75 6B 61 74 6F 72 7A .......edukatorz 2B 00 00 00 03 31 00 00 00 0A 00 00 00 66 61 74 +....1.......fat 65 73 70 65 61 6B 73 36 18 00 00 10 00 00 00 7A espeaks6.......z 75 63 63 68 65 72 6F 20 6B 72 65 6D 6C 69 6E 33 ucchero kremlin3 00 00 00 03 31 00 00 00 0A 00 00 00 63 61 64 72 ....1.......cadr 65 61 6D 38 30 39 27 00 00 00 18 00 00 00 64 6F eam809'.......do 6E 27 74 20 77 61 6E 6E 61 20 6D 69 73 73 20 61 n't wanna miss a 20 74 68 69 6E 67 2D 00 00 00 03 31 00 00 00 08 thing-....1.... 00 00 00 6B 61 6E 6F 6E 61 38 32 0B 04 00 00 14 ...kanona82..... 00 00 00 6A 6F 68 6E 20 74 75 72 6E 65 72 20 79 ...john turner y 6F 75 72 20 6D 61 6E 2B 00 00 00 03 31 00 00 00 our man+....1... 09 00 00 00 6C 69 61 6D 6D 6F 75 73 65 93 4E 00 ....liammouse.N. 00 11 00 00 00 61 6E 6E 69 65 20 6E 61 74 68 61 .....annie natha 6E 20 66 61 6B 65 31 00 00 00 03 31 00 00 00 09 n fake1....1.... 00 00 00 48 6F 72 72 6F 72 42 61 74 48 03 00 00 ...HorrorBatH... 17 00 00 00 65 6A 61 63 75 6C 61 74 69 6F 6E 20 ....ejaculation 70 6F 73 74 20 6D 6F 72 74 65 6D 26 00 00 00 03 post mortem&.... 31 00 00 00 07 00 00 00 66 21 24 5E 40 24 23 C2 1.......f!$^@$#. 03 00 00 0E 00 00 00 72 6F 63 6B 65 72 60 73 20 .......rocker`s 68 69 2D 66 69 35 00 00 00 03 31 00 00 00 09 00 hi-fi5....1..... 00 00 73 61 6E 64 72 6F 68 6D 61 6E 1B 00 00 1B ..sandrohman.... 00 00 00 42 6C 6F 64 77 79 6E 20 50 69 67 20 47 ...Blodwyn Pig G 65 74 74 69 6E 67 20 74 6F 20 54 68 69 73 33 00 etting to This3. 00 00 03 31 00 00 00 0D 00 00 00 6D 61 72 63 69 ...1.......marci 61 6F 62 61 74 65 72 61 7B 01 00 00 15 00 00 00 aobatera{....... 73 6C 61 79 65 72 20 63 6F 72 70 75 73 20 63 68 slayer corpus ch 72 69 73 74 69 23 00 00 00 03 31 00 00 00 08 00 risti#....1..... 00 00 53 6E 6F 77 42 61 6C 6C 81 09 00 00 0A 00 ..SnowBall...... 00 00 73 6F 75 74 68 20 70 61 72 6B 26 00 00 00 ..south park&... 03 31 00 00 00 06 00 00 00 68 6F 62 6F 32 33 B7 .1.......hobo23. 01 00 00 0F 00 00 00 65 76 65 20 64 65 73 74 72 .......eve destr 75 63 74 69 6F 6E 27 00 00 00 03 31 00 00 00 0D uction'....1.... 00 00 00 4E 69 63 6B 20 53 61 6E 64 6F 76 61 6C ...Nick Sandoval F2 00 00 00 09 00 00 00 54 48 4F 4E 45 49 43 4B ........THONEICK 20 ------------------------------------------------------------------------ Count:1 Event#3.1101418 2006-04-03 01:13:51 CHAT IRC nick change 192.168.0.131 -> 70.36.218.114 IPVer=4 hlen=5 tos=0 dlen=1468 ID=9538 flags=2 offset=0 ttl=128 chksum=28294 Protocol: 6 sport=10789 -> dport=6693

Seq=3821670201 Ack=1593693919 Off=5 Res=0 Flags=***AP*** Win=65511 urp=39108 chksum=0 Payload: 28 00 00 00 03 31 00 00 00 0F 00 00 00 6E 75 63 (....1.......nuc 6C 65 6F 5F 64 65 5F 63 61 62 72 61 98 0C 00 00 leo_de_cabra.... 08 00 00 00 42 65 72 67 73 6F 6E 20 2C 00 00 00 ....Bergson ,... 03 31 00 00 00 0E 00 00 00 73 75 72 67 65 6F 6E .1.......surgeon 67 65 6E 65 72 61 6C 46 01 00 00 0D 00 00 00 66 generalF.......f 72 61 6E 6B 20 73 69 6E 61 74 72 61 2F 00 00 00 rank sinatra/... 03 31 00 00 00 06 00 00 00 70 70 65 74 72 6F B6 .1.......ppetro. 07 00 00 18 00 00 00 22 72 65 6E 64 65 7A 2D 76 ......."rendez-v 6F 75 73 20 64 65 20 6A 75 69 6C 6C 65 74 22 35 ous de juillet"5 00 00 00 03 31 00 00 00 1B 00 00 00 64 61 73 64 ....1.......dasd 61 73 64 73 64 61 73 64 61 73 64 61 73 64 61 73 asdsdasdasdasdas 64 61 73 64 61 73 64 10 00 00 00 09 00 00 00 6E dasdasd........n 65 76 65 72 6D 6F 72 65 26 00 00 00 03 31 00 00 evermore&....1.. 00 0D 00 00 00 72 75 62 65 6E 73 5F 73 75 7A 75 .....rubens_suzu 6B 69 32 01 00 00 08 00 00 00 6E 6F 20 64 6F 75 ki2.......no dou 62 74 24 00 00 00 03 31 00 00 00 07 00 00 00 6A bt$....1.......j 70 61 62 6F 6E 72 B4 02 00 00 0C 00 00 00 72 6F pabonr........ro 63 6B 20 74 68 65 20 63 61 73 2D 00 00 00 03 31 ck the cas-....1 00 00 00 13 00 00 00 6A 75 73 74 61 62 6F 76 65 .......justabove 74 68 65 61 76 65 72 61 67 65 A6 01 00 00 09 00 theaverage...... 00 00 67 6F 61 74 70 65 6E 69 73 31 00 00 00 03 ..goatpenis1.... 31 00 00 00 09 00 00 00 44 61 72 6B 6C 61 64 79 1.......Darklady 67 77 00 00 00 17 00 00 00 4A 61 63 6B 20 4A 6F gw.......Jack Jo 68 6E 73 6F 6E 20 62 65 74 74 65 72 20 6D 70 67 hnson better mpg 23 00 00 00 03 31 00 00 00 08 00 00 00 6C 65 6E #....1.......len 6E 65 76 65 72 D6 5E 00 00 0A 00 00 00 67 72 65 never.^......gre 65 6E 68 6F 72 6E 69 31 00 00 00 03 31 00 00 00 enhorni1....1... 12 00 00 00 73 68 6F 72 74 68 61 6E 64 6F 70 65 ....shorthandope 72 61 74 69 6F 6E 92 08 00 00 0E 00 00 00 74 68 ration........th 65 20 6F 66 66 69 63 65 20 61 76 69 2C 00 00 00 e office avi,... 03 31 00 00 00 0C 00 00 00 73 74 65 76 65 2C 68 .1.......steve,h 75 72 73 74 31 FE 18 00 00 0F 00 00 00 74 68 65 urst1........the 20 62 65 61 74 6D 61 73 74 65 72 73 27 00 00 00 beatmasters'... 03 31 00 00 00 08 00 00 00 74 69 61 67 6F 62 73 .1.......tiagobs 62 E6 02 00 00 0E 00 00 00 73 65 72 67 69 6F 20 b........sergio 73 61 6D 70 61 69 6F 37 00 00 00 03 31 00 00 00 sampaio7....1... 19 00 00 00 73 74 61 6D 70 65 64 65 6F 66 74 68 ....stampedeofth 65 67 68 6F 73 74 62 75 66 66 61 6C 6F 17 01 00 eghostbuffalo... 00 0D 00 00 00 44 6F 6E 61 6C 64 20 46 61 67 65 .....Donald Fage 6E 20 35 00 00 00 03 31 00 00 00 0D 00 00 00 4E n 5....1.......N 49 47 48 54 57 49 4E 47 2D 31 33 2D AC 04 00 00 IGHTWING-13-.... 17 00 00 00 53 4D 41 4C 4C 56 49 4C 4C 45 20 6D ....SMALLVILLE m 75 73 69 63 20 76 69 64 65 6F 73 32 00 00 00 03 usic videos2.... 31 00 00 00 0B 00 00 00 47 72 61 6D 6D 61 72 4E 1.......GrammarN 61 7A 69 07 13 00 00 16 00 00 00 70 72 6F 6A 65 azi........proje 63 74 65 64 20 66 69 6E 61 6E 63 69 61 6C 73 20 cted financials 34 23 00 00 00 03 31 00 00 00 05 00 00 00 53 69 4#....1.......Si 6D 6D 73 85 4F 00 00 0D 00 00 00 61 6C 65 78 69 mms.O......alexi 73 20 73 69 6C 76 65 72 20 00 00 00 03 31 00 00 s silver ....1.. 00 04 00 00 00 45 64 2D 30 62 13 00 00 0B 00 00 .....Ed-0b...... 00 73 74 75 61 72 74 20 68 61 6D 6D 32 00 00 00 .stuart hamm2... 03 31 00 00 00 11 00 00 00 4D 65 4B 61 67 6F 45 .1.......MeKagoE 6E 4B 72 69 73 74 6F 52 65 79 2F 04 00 00 10 00 nKristoRey/..... 00 00 67 68 6F 73 74 20 6E 69 6E 6A 61 20 63 6C ..ghost ninja cl 61 6E 2E 00 00 00 03 31 00 00 00 09 00 00 00 4D an.....1.......M 72 43 68 69 63 6B 65 6E 2B 00 00 00 14 00 00 00 rChicken+....... 54 68 65 20 42 75 74 74 65 72 66 6C 79 20 45 66 The Butterfly Ef 66 65 63 74 24 00 00 00 03 31 00 00 00 09 00 00 fect$....1...... 00 63 73 61 62 61 32 33 31 34 A8 04 00 00 0A 00 .csaba2314...... 00 00 68 F3 6B 69 72 E1 6C 79 6E F5 2F 00 00 00 ..h.kir.lyn./... 03 31 00 00 00 08 00 00 00 4C 6F 64 69 64 6F 64 .1.......Lodidod 69 FC 0A 00 00 16 00 00 00 47 69 72 6C 73 20 41 i........Girls A 6C 6F 75 64 20 20 63 68 65 6D 69 73 74 72 79 32 loud chemistry2 00 00 00 03 31 00 00 00 0A 00 00 00 63 61 70 72 ....1.......capr 69 63 68 6F 73 6F DB 2D 00 00 17 00 00 00 73 65 ichoso.-......se 73 73 69 6F 6E 20 6D 61 6E 20 6A 61 6B 65 20 68 ssion man jake h 6F 6C 6D 65 73 25 00 00 00 03 31 00 00 00 08 00 olmes%....1..... 00 00 66 75 72 72 79 62 75 6D 3F 47 30 44 0C 00 ..furrybum?G0D.. 00 00 6E 65 70 74 75 6E 65 20 63 69 74 79 32 00 ..neptune city2. 00 00 03 31 00 00 00 09 00 00 00 73 65 78 79 31 ...1.......sexy1 30 30 31 38 AB 57 00 00 18 00 00 00 42 65 6E 74 0018.W......Bent 20 46 61 62 72 69 63 20 4A 75 6B 65 62 6F 78 20 Fabric Jukebox 20 6D 69 78 21 00 00 00 03 31 00 00 00 06 00 00 mix!....1...... 00 45 6D 31 39 37 35 18 07 00 00 0A 00 00 00 4D .Em1975........M 61 72 69 6F 20 20 52 26 42 2A 00 00 00 03 31 00 ario R&B*....1. 00 00 0A 00 00 00 41 67 61 74 68 6F 63 6C 65 73 ......Agathocles 63 09 00 00 0F 00 00 00 6E 69 63 6B 20 64 72 61 c.......nick dra 6B 65 20 70 69 6E 6B 1E 00 00 00 03 31 00 00 00 ke pink.....1... 0A 00 00 00 63 65 61 73 65 72 62 61 62 79 41 01 ....ceaserbabyA. 00 00 03 00 00 00 63 61 62 23 00 00 00 03 31 00 ......cab#....1. 00 00 07 00 00 00 6D 79 63 72 6F 66 74 56 18 00 ......mycroftV.. 00 0B 00 00 00 6F 2E 76 2E 20 77 72 69 67 68 74 .....o.v. wright 23 00 00 00 03 31 00 00 00 06 00 00 00 46 45 52 #....1.......FER 4F 44 4F 19 09 00 00 0C 00 00 00 7A 79 6F 6E 20 ODO........zyon 6E 6F 20 66 61 74 65 28 00 00 00 03 31 00 00 00 no fate(....1... 10 00 00 00 61 77 65 73 6F 6D 65 79 6F 75 6B 6E ....awesomeyoukn 6F 77 69 74 21 87 00 00 07 00 00 00 61 6B 72 61 owit!.......akra 73 69 61 28 00 00 00 03 31 00 00 00 0E 00 00 00 sia(....1....... 6A 75 6E 69 6E 68 6F 6D 61 63 68 61 64 6F 15 06 juninhomachado.. 00 00 09 00 ....

--
Corrective Action:

Limit depth of content match.

Thanks!
Monica Cloutier


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

<Prev in Thread]	Current Thread	[Next in Thread>
[Snort-sigs] false positive on sid:542, Monica Cloutier <=

Previous by Date:	[Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Next by Date:	[Snort-sigs] Bleedingsnort.com Daily Update, bleeding
Previous by Thread:	[Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Next by Thread:	[Snort-sigs] Bleedingsnort.com Daily Update, bleeding
Indexes:	[Date] [Thread] [Top] [All Lists]