At 11:20 9/08/2001, James McGlinn wrote:

Is it possible to filter on part of the shell code payload? At least one CR variant doesn't request default.ida - rendering it useless (I assume), but that should let you see those hits, and allow genuine default.ida requests through...

yep, the way the filter works is you can enter any string up to 32 characters in length, I used default.ida as it was easier to type, once i had it working and had tested it I was going to parse it on the shell code string :) -- Steve Systems Admin, Asia Online (NZ) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog