RE: [logs] Event Log signature for SQL Server worm?

Previous message: Jim Prewett: "[logs] OFF-TOPIC logsurfer config file pretty printing in [La]TeX?"
Maybe in reply to: Tina Bird: "[logs] Event Log signature for SQL Server worm?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

toby.kohlenbergat_private

working on this. It might be tomorrow before I get it though.

toby

> -----Original Message-----
> From: Tina Bird [mailto:tbird@precision-guesswork.com]
> Sent: Saturday, January 25, 2003 8:21 PM
> To: loganalysisat_private
> Subject: [logs] Event Log signature for SQL Server worm?
> 
> 
> 
> On Sat, 25 Jan 2003, Johannes Ullrich wrote:
> 
> > oh well.. back to counting packets. BTW: Any idea what this 
> worm looks
> > like in any MSFT application logs?
> 
> So now that the feathers are settling -- anyone have Event Log data
> signatures of Sapphire/SQL Slammer, successful or otherwise?
> 
> thanks -- tbird
> 
> -- 
> I, on the other hand, do not work. I enjoy the slothful life 
> of an artist,
> and while away the hours in meaningless aesthetic pursuits 
> punctuated by
> bouts of hedonistic debauchery and an occasional nap.
>                                               -- David Rinehart
> 
> http://www.shmoo.com/~tbird
> Log Analysis http://www.loganalysis.org
> VPN http://vpn.shmoo.com
> 
> 
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysisat_private
> http://lists.shmoo.com/mailman/listinfo/loganalysis
> 
_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis