I've found signature to detect SSH traffic on a non-standard port (not port 22), but is there a signature that detects non-ssh traffic on port 22? Alternatively, is there any suggestions on how to create a custom signature to do this? We are also l...

Is there a signature available for the new Bind 9 DNS Cache Poisoning vulnerability/exploit.See referencehttp://www.securityfocus.com/bid/25037/info

I am using RDEP to subscribe to IDS sensors and retrieve alerts. In a specific signature I am interested in the content of the traffic from the attacker and victim. In the XML format for RDEP, this content seems encrypted in some way, what format i...

What does it mean when an alert lists 0.0.0.0 as the source that triggered the signature?

Can anyone tell me how to test or trigger a signature to determine if shun requests from the master blocking sensor (MBS) are actually resulting in shuns in the PIX? Can this same procedure be applied to FWSMs?