[Dshield] New BugBear variant

Benjamin M.A. Robson ben at robson.ph
Thu Jun 5 15:30:39 GMT 2003


Mark,

Yes please.  If you could forward me the email (assuming there isn't 
anything sensetive in it), along with the attachment I would like to get 
under its hood.

Thanks,
BenR.

MPoole wrote:

>I think i just got the email attachment in email, I'll run an online
>virus scan to see -- do you want a copy of it to run it for pattern
>harvesting?
>
>Mark
>
>
>----- Original Message ----- 
>From: "Benjamin M.A. Robson" <ben at robson.ph>
>To: "'General DShield Discussion List'" <list at dshield.org>
>Sent: Thursday, June 05, 2003 5:01 AM
>Subject: [Dshield] New BugBear variant
>
>
>  
>
>>All,
>>
>>Has anyone seen any packets they have identified as the new BugBear
>>    
>>
>variant?
>  
>
>>If so can you please post some sample packet dumpt data for the
>>formation of SNORT or other IDS rules?
>>
>>Ta.
>>BenR.
>>
>>
>>
>>_______________________________________________
>>list mailing list
>>list at dshield.org
>>To change your subscription options (or unsubscribe), see:
>>    
>>
>http://www.dshield.org/mailman/listinfo/list
>
>_______________________________________________
>list mailing list
>list at dshield.org
>To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>
>  
>




More information about the list mailing list