On Thu, 2003-09-25 at 14:48, rmkml wrote: > test# cd /var/lib/firestorm/snort-rules/ > test# grep 'BAD TRAFFIC syn ' * > bad-traffic.rules:alert tcp any any -> [232.0.0.0/8,233.0.0.0/8,239.0.0.0/8] > any (msg:"BAD TRAFFIC syn to multicast address"; flags:S+; > classtype:bad-unknown; sid:1431; rev:4;) thought so, thank you. I'll check it out after work this afternoon. -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part