[linux-admin] Symantec virus signature

2003-06-08 Thread Dapid Candra
Hi, Kalo masuk ke symantec, bagian yang menerangkan suatu virus, kadang aku lihat ada signature untuk symantect ManHunt seperti di bawah ini: ***start file alert tcp any any -> any 25 (msg:"BugBear B SMTP Worm Propagation"; content:"CwEGAAAgAQAAEOAGACABC

Re: [linux-admin] Symantec virus signature

2003-06-08 Thread Kumoro Wisnu Wibowo
On Mon, Jun 09, 2003 at 11:54:30AM +0700, Dapid Candra wrote: >alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack"; >content: "|3b|y"; offset: 20; depth: 2; dsize:>21; ) >alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack"; >content: "|3b|t"; offset: 20; depth: 2; dsize:>