Re: [sniffer] Bad Rule Alert: 963461 follow up.

2006-04-19 Thread Jeff Alexander 

Peter,

I have taken over the network administration for Neptune Chemical Pump Co. 
Could I get a manual for the sniffer software.  That is how to use set up 
and confirm it is still configured correctly.



Thank you,

Jeff Alexander
Neptune Chemical Pump
Network Administrator

- Original Message - 
From: Pete McNeil [EMAIL PROTECTED]

To: sniffer@sortmonster.com
Sent: Tuesday, April 18, 2006 12:07 PM
Subject: [sniffer] Bad Rule Alert: 963461 follow up.



Hello Sniffer Folks,

 Regarding rule 963461 - the rule was coded for a short sequence of
 nbsp;nbsp;nbsp; (3x). It was misinterpreted and/or miscopied as part 
of

 obfuscation.

 The rule was coded at 20060417.1929 E and removed at approximately
 20060418.1000 E.

 There was one additional rule pulled (963533) which was coded for a
 binary segment of an image file. No hits have been reported on the
 second rule at this time.

Best,
_M

Pete McNeil (Madscientist)
President, MicroNeil Research Corporation
Chief SortMonster (www.sortmonster.com)
Chief Scientist (www.armresearch.com)


This E-Mail came from the Message Sniffer mailing list. For information 
and (un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html

[sniffer] Bad Rule Alert: 963461 follow up.

2006-04-18 Thread Pete McNeil 
Hello Sniffer Folks,

  Regarding rule 963461 - the rule was coded for a short sequence of
  nbsp;nbsp;nbsp; (3x). It was misinterpreted and/or miscopied as part of
  obfuscation.

  The rule was coded at 20060417.1929 E and removed at approximately
  20060418.1000 E.

  There was one additional rule pulled (963533) which was coded for a
  binary segment of an image file. No hits have been reported on the
  second rule at this time.

Best,
_M

Pete McNeil (Madscientist)
President, MicroNeil Research Corporation
Chief SortMonster (www.sortmonster.com)
Chief Scientist (www.armresearch.com)


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html