New nimda variant?

From: Russell Fulton (r.fultonat_private)
Date: Tue Apr 30 2002 - 17:58:31 PDT

  • Next message: Sam Trenholme: "A friend's cable modem Linux machine just got compromised"

    Moderator:
    	If you get this before posting my other message with the same subject
    line then please consign both to the bit bucket otherwise please post
    this retraction...
    
    Further investigation reveals (what I should have realized immediately)
    that this is an artifact of a new version of snort that I installed.
    
    i.e. these are perfectly normal nimda being reported differently by the
    new version of snort. Doh! and it isn't even Monday...
    
    Apologies for the confusion.
    
    Russell.
    
    -- 
    Russell Fulton, Computer and Network Security Officer
    The University of Auckland,  New Zealand
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed May 01 2002 - 08:28:14 PDT