slammer

Jukka JUSLIN Jukka.Juslin at cern.ch
Tue Jan 28 00:52:51 PST 2003


On Mon, 27 Jan 2003, Ayyasamy, Senthilkumar  (UMKC-Student) wrote:

> Is slammer worm's signature added to Bro?
> If not, how to go about adding? or any 
> clue about its signature?
> 

The signature of slammer is quite straightforward, see the packet captures
from securityfocus. Snort had ready and tested signatures available since
Saturday.

Jukka




More information about the Bro mailing list