To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
On Sat, 2006-03-04 at 19:03 -0500, Tom wrote: > >The BleedingSnort IRC sigs have worked well for us. Are they not > >effective in your environment?
> Guess I must be blind ;-) What ruleset grouping are they in? Sorry. The IRC sigs are in bleeding-virus.rules (http://www.bleedingsnort.com/bleeding-virus.rules) since this activity is considered Worm/Trojan-like behavior. Cheers, Frank -- It is said that the Internet is a public utility. As such, it is best compared to a sewer. A big, fat pipe with a bunch of crap sloshing against your ports.
signature.asc
Description: This is a digitally signed message part
_______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
