Slapper signature

Tue Jan 14 01:30:10 PST 2003

On Mon, Jan 13, 2003 at 15:28 -0500, Ashley Thomas wrote:

> Does Bro have 'slapper worm' related signatures ? ( for matching the 
> slapper scan, broadcasts etc)

There's some proof-of-concept code for slapper demonstrating Bro's
signature engine in the current development version. It's not very
sophisticated, though.

Robin

-- 
Robin Sommer * Room        01.08.055 * www.net.in.tum.de
TU Munich    * Phone (089) 289-18006 *  sommer at in.tum.de 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20030114/9465e98a/attachment.bin 