TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hello,
We have a network sensor with the RSKILL response set to
HTTP_Windows_Executable and HTTP_IIS_Unicode_Translation, to aid in
protecting from the new nimda worm. However, our web site admin notifies me
that his logs show those connections actually getting through. The RS
console logs these SPECIFIC events as being killed. Any help/ideas?
Thanks.
