Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Support » Help with Kelvir worm detection

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Help with Kelvir worm detection


Posted by BrassMonkey on March 17, 2005 06:03:52

hey,

i've been trying to create a rule where snort could alert me if it detects the kelvir worm. I'm really not that good yet with snort, i've only just started using it, and have been able to setup very simple rules, so any help would be great!

Thanks.

Posted by roesch on March 19, 2005 18:08:14

You should either bring this up in the Rules topic or on the snort-sigs mailing list...

-Marty