Changeset 1765

Timestamp:

12/05/06 21:26:59 (2 years ago)

Author:

mbr

Message:

added Slammer sig

Files:

• psad/trunk/signatures (modified) (1 diff)

psad/trunk/signatures

@@ -129 +129 @@
-### PSAD-CUSTOM rules
-alert tcp $EXTERNAL_NET any -> $HOME_NET 17300 (msg:"PSAD-CUSTOM Kuang2 virus communication attempt"; flags:S; reference:url,isc.sans.org/port_details.php?port=17300; classtype:trojan-activity; psad_id:100206; psad_dl:2;)
+alert udp $EXTERNAL_NET any -> $HOME_NET 1434 (msg:"PSAD-CUSTOM Slammer communication attempt"; reference:url,www.linklogger.com/UDP1434.htm; classtype:trojan-activity; psad_id:100208; psad_dl:2;)
-
-### misc.rules