Snort_AIPreproc/corr_rules/1-368-6.xml
2011-02-10 20:23:23 +01:00

9 lines
280 B
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hyperalert PUBLIC "-//blacklight//DTD HYPERALERT SNORT MODEL//EN" "http://0x00.ath.cx/hyperalert.dtd">
<hyperalert>
<snort-id>1.368.6</snort-id>
<desc>ICMP PING BSDtype</desc>
<post>HostExists(+DST_ADDR+)</post>
</hyperalert>