[Oisf-users] "ETPRO EXPLOIT NetSupport Manager Client Buffer Overflow Relative"; sid:2801281; rev:5; )

Russell Fulton r.fulton at auckland.ac.nz
Tue Oct 8 23:45:26 UTC 2013


Puzzled by this one.  Suri is triggering this sig on traffic *from* port 443 but the sig says "From server"?  
I am not seeing this on my snort sensor which is running the same ruleset — supposedly on the same traffic.


More information about the Oisf-users mailing list