strings associated with code red and variants (fwd)

From: Tina Bird (tbird@precision-guesswork.com)
Date: Fri Aug 10 2001 - 13:02:47 PDT

Next message: John Campbell: "re:greetingz"

Previous message: dgillettat_private: "syslog, was Re: greetingz"
Next in thread: Anderson Johnston: "Re: strings associated with code red and variants (fwd)"
Reply: Anderson Johnston: "Re: strings associated with code red and variants (fwd)"
Reply: Ryan Russell: "Re: strings associated with code red and variants (fwd)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Things to look for in your Web server logs:

'default' may return too much.  I usually use it with 'default.ida' and
'default.idq'.

default
ida
idq
root\.exe
cmd\.exe
code red
codered
eeye
worm
overflow
whitehouse\.gov


---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

Next message: John Campbell: "re:greetingz"
Previous message: dgillettat_private: "syslog, was Re: greetingz"
Next in thread: Anderson Johnston: "Re: strings associated with code red and variants (fwd)"
Reply: Anderson Johnston: "Re: strings associated with code red and variants (fwd)"
Reply: Ryan Russell: "Re: strings associated with code red and variants (fwd)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Aug 10 2001 - 15:07:36 PDT