snort-sigs May 2011 archive
Main Archive Page > Month Archives  > snort-sigs archives
snort-sigs: [Snort-sigs] FP on 1:16442:3

[Snort-sigs] FP on 1:16442:3

From: Martin Holste <mcholste_at_nospam>
Date: Wed May 11 2011 - 19:04:27 GMT
To: "<snort-sigs@lists.sourceforge.net>" <snort-sigs@lists.sourceforge.net>

This is generating FP's to stats.kaspersky.com (verified IP 81.176.69.91):

POST /zrcvstat?t=2&e=1&md5=3tetZWOPPgXNgEdEZ3W6zg
Connection: keep-alive
Host: stats.kaspersky.com
User-Agent: Mozilla
Content-Length: 553
X-HTTP-Version: 1.0

DATA=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

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org