The signature that picks up Slammer activity is SQL_SSRP_StackBo. You can find it under XPU 20.4 for Network Sensor 7.0 and XPU 5.3 for 6.* sensors.
Jimmy H. Nguyen CISSP CCNP CCDP MCSE CCSE SCP NSA IAM Information Assurance ADP Systems Engineer NCI Information Systems, Inc. DRMS Headquarters Battle Creek, MI. [EMAIL PROTECTED] 616-961-4543 -----Original Message----- From: Christopher Lyon [mailto:[EMAIL PROTECTED]] Sent: Sunday, January 26, 2003 4:37 AM To: [EMAIL PROTECTED] Subject: [ISSForum] SQL Slammer According to ISS' home page the sensors can detect this as of September 2002. I did a search for it on the signature base that I have but can't seem to find it. I tried both Slammer and SQLExp. Does it use a different name? _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
