Re: EarlyBird for Other Attacks?

From: Hugo van der Kooij (hvdkooijat_private)
Date: Sat Jun 29 2002 - 00:08:14 PDT

  • Next message: Nick FitzGerald: "Re: Textbook CodeRed v2 Caught By Snort"

    On Fri, 28 Jun 2002, gs-list wrote:
    
    > Mr. Dyson's Early Bird tool has been a godsend to my web servers - Kudos to 
    > him for Early Bird!
    
    Unfortunatly it has a bug that will send of multiple alerts for a single 
    hosts which is in contrast with the claim in the documentation.
    
    The bug has been recognized but not yet fixed.
    
    So be aware that it might backfire.
    
    Hugo.
    
    -- 
    All email send to me is bound to the rules described on my homepage.
        hvdkooijat_private		http://hvdkooij.xs4all.nl/
    	    Don't meddle in the affairs of sysadmins,
    	    for they are subtle and quick to anger.
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sat Jun 29 2002 - 11:46:31 PDT