snort-sigs March 2011 archive
Main Archive Page > Month Archives  > snort-sigs archives
snort-sigs: Re: [Snort-sigs] GPL sig 1313

Re: [Snort-sigs] GPL sig 1313

From: Weir, Jason <jason.weir_at_nospam>
Date: Fri Mar 18 2011 - 17:54:06 GMT
To: "Nigel Houghton" <nhoughton@sourcefire.com>

Nigel,

Oops - my bad, It's part of the GPLs - looks like it came from the ET
side...

Didn't they use to be distributed with Snort??

-J

> -----Original Message-----
> From: Nigel Houghton [mailto:nhoughton@sourcefire.com]
> Sent: Friday, March 18, 2011 1:43 PM
> To: Weir, Jason
> Cc: snort-sigs@lists.sourceforge.net
> Subject: Re: [Snort-sigs] GPL sig 1313
>
>
> On Fri, 18 Mar 2011 12:01:47 -0400, Weir, Jason wrote:
> > Seeing what could be a FP on 1313
> >
> > Here's the data - no "up skirt" that I can see....
> >
> > -J
> >
>
> Is that SID correct? We don't have a rule with that particular SID.
>
> --
> Nigel Houghton
> Head Mentalist
> SF VRT Department of Intelligence Excellence
> http://vrt-blog.snort.org/ && http://labs.snort.org/

_____________________________________________________________________________________________

Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org