Why are they putting worm signature's in the 12000's range?????42. 12025 0 Kelvir Worm Activity STRING.TCP No High None 43. 12025 1 Kelvir Worm Activity STRING.TCP No High None 44. 12026 0 Fatso Worm Activity STRING.TCP No High None
I think I understand why they put the nonstandard ssh in the 11 thousand range. After looking through all the other ranges, it seems that the 11 thousand range is more of an inappropriate usage type category. From that perspective, I can see no oth...
And also, these, why are they in the 11000's range??? 11233 0 SSH Over Non-standard Ports STRING.TCP No Info None 79. 11233 1 SSH Over Non-standard Ports STRING.TCP No Info None 80. 11233 2 SSH Over Non-standard Ports STRING.TCP No Info None
I had the same problem with our IDSM2(which is a POS!). I used the updates function in IDS MC(which is also a POS!). During the update, I specified that our IDSM2 be updated with s153. After I came back, I couldn't log into the sensor. It would a...
