On Mon, Jun 09, 2003 at 11:54:30AM +0700, Dapid Candra wrote: >alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack"; >content: "|3b|y"; offset: 20; depth: 2; dsize:>21; ) >alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack"; >content: "|3b|t"; offset: 20; depth: 2; dsize:>21; ) >*************EOF********************* > >Apakah ada utility linux-based yang bisa menggunakan signature di atas?
Yang bisa menggunakan persis signature di atas saya tidak tahu, tapi snort menggunakan pola signature yang sama (yang _mungkin_ ditiru oleh Symantec) :) http://www.snort.org/snort-db/ HTH, -kum -- cat: $HOME/.signature: No such file or directory --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
