OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [snort] Rapidnet sig error?
From: Stuart Staniford-Chen (stuartSiliconDefense.com)
Date: Tue Mar 07 2000 - 01:48:07 CST

The following sig is in the Rapidnet set:

alert tcp !$HOME_NET any -> $HOME_NET 80 (msg:"IIS-showcode";flags:PA;
content:"msads/Samples/selector/showcode.asp";)

Shouldn't that be "msadc" rather than "msads"?

Thanks,

Stuart. 

-- 
Stuart Staniford-Chen --- President --- Silicon Defense
                   stuartsilicondefense.com
(707) 822-4588                     (707) 826-7571 (FAX)