[***] Results from Oinkmaster started Fri Jul 27 00:00:15 2007 [***]
[+++] Enabled and modified rules: [+++]
2001846 - BLEEDING-EDGE DOS -ISC- ICMP blind TCP reset DoS guessing attempt
(bleeding-dos.rules)
[///] Modified active rules: [///]
2001620 - BLEEDING-EDGE ATTACK RESPONSE Likely Botnet Activity
(bleeding-attack_response.rules)
2002033 - BLEEDING-EDGE TROJAN BOT - potential response (bleeding-virus.rules)
2002138 - BLEEDING-EDGE GAMES World of Warcraft connection
(bleeding-game.rules)
2002384 - BLEEDING-EDGE TROJAN BOT - potential misc bot commands
(bleeding-virus.rules)
[---] Disabled rules: [---]
2002742 - BLEEDING-EDGE EXPLOIT WMF Escape Record Exploit - Version 3
(bleeding-exploit.rules)
2002758 - BLEEDING-EDGE EXPLOIT WMF Escape Record Exploit - Version 1
(bleeding-exploit.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-exploit.rules (1):
#Temporarily disabling, causing segfaults in snort 2.7.
[---] Removed non-rule lines: [---]
-> Removed from bleeding-dos.rules (1):
#Disabling temporarily. It's a near obsolete rule, but the icode syntax
is changing to 2.7, so this isn't valid for both versions of snort.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
