Snort_AIPreproc/corr_rules/1-469-4.xml

10 lines
277 B
XML
Raw Normal View History

2010-09-11 02:12:39 +02:00
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hyperalert PUBLIC "-//blacklight//DTD HYPERALERT SNORT MODEL//EN" "http://0x00.ath.cx/hyperalert.dtd">
2010-09-11 02:12:39 +02:00
<hyperalert>
<snort-id>1.469.4</snort-id>
<desc>ICMP PING NMAP</desc>
2010-09-11 02:12:39 +02:00
<post>HostExists(+DST_ADDR+)</post>
</hyperalert>