Message -
From: Pete McNeil [EMAIL PROTECTED]
To: sniffer@sortmonster.com
Sent: Tuesday, April 18, 2006 12:07 PM
Subject: [sniffer] Bad Rule Alert: 963461 follow up.
Hello Sniffer Folks,
Regarding rule 963461 - the rule was coded for a short sequence of
nbsp;nbsp;nbsp; (3x
Hello Sniffer Folks,
We have a bad rule circulating in some rulebases. The rule has
already been discovered and removed.
Please create a rule-panic entry for rule id: 963461 just in case
you might have a copy of the rule. After your next update (or
tomorrow about the same time if it is
Hello Sniffer Folks,
Regarding rule 963461 - the rule was coded for a short sequence of
nbsp;nbsp;nbsp; (3x). It was misinterpreted and/or miscopied as part of
obfuscation.
The rule was coded at 20060417.1929 E and removed at approximately
20060418.1000 E.
There was one additional