New nimda variant?

From: Russell Fulton (r.fultonat_private)
Date: Tue Apr 30 2002 - 17:58:31 PDT

  • Next message: Sam Trenholme: "A friend's cable modem Linux machine just got compromised"

    	If you get this before posting my other message with the same subject
    line then please consign both to the bit bucket otherwise please post
    this retraction...
    Further investigation reveals (what I should have realized immediately)
    that this is an artifact of a new version of snort that I installed.
    i.e. these are perfectly normal nimda being reported differently by the
    new version of snort. Doh! and it isn't even Monday...
    Apologies for the confusion.
    Russell Fulton, Computer and Network Security Officer
    The University of Auckland,  New Zealand
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:

    This archive was generated by hypermail 2b30 : Wed May 01 2002 - 08:28:14 PDT