Mailing List Archive For snort-users@sourceforge.net Nov 2007 By Thread

• [Snort-users] Promiscuous mode, how-to? Rachmat Hidayat Al-Anshar (Fri Nov 30 2007 - 22:08:06 EST)
• [Snort-users] Snort 2.8.0.1 Now Available Snort Releases (Fri Nov 30 2007 - 13:25:28 EST)
• [Snort-users] snort decode warning tcp data offset is less than 5 The New York NOC Inc. (Mon Nov 26 2007 - 20:05:50 EST)
  • Re: [Snort-users] snort decode warning tcp data offset is less than 5 Joel Esler (Mon Nov 26 2007 - 21:13:40 EST)
  • Re: [Snort-users] snort decode warning tcp data offset is less than 5 Todd Wease (Tue Nov 27 2007 - 10:15:55 EST)
• Re: [Snort-users] Snort-users Digest, Vol 18, Issue 15 rclifton(at)citysavingsbank.com (Mon Nov 26 2007 - 12:10:53 EST)
  • Re: [Snort-users] Snort-users Digest, Vol 18, Issue 15 M. Shirk (Mon Nov 26 2007 - 12:44:55 EST)
• [Snort-users] Alert on contents of proxy traffic Gould, Scott (Mon Nov 26 2007 - 11:29:31 EST)
  • Re: [Snort-users] Alert on contents of proxy traffic Gould, Scott (Mon Nov 26 2007 - 11:47:18 EST)
    • Re: [Snort-users] Alert on contents of proxy traffic Will Metcalf (Mon Nov 26 2007 - 12:10:26 EST)
      • Re: [Snort-users] Alert on contents of proxy traffic Gould, Scott (Mon Nov 26 2007 - 14:12:17 EST)
• [Snort-users] New Project News! Matt Jonkman (Mon Nov 26 2007 - 00:38:49 EST)
• Re: [Snort-users] Snort-users Digest, Vol 18, Issue 14 rclifton(at)citysavingsbank.com (Thu Nov 22 2007 - 20:02:22 EST)
• [Snort-users] snort-2.8.0 losing port numbers on some alerts? Jason Haar (Thu Nov 22 2007 - 20:01:52 EST)
• [Snort-users] BASE 1.3.9 (anne) Released Kevin Johnson (Tue Nov 20 2007 - 22:02:04 EST)
• [Snort-users] Problem updating Snort Rules on IPCop 1.14.16 Mike Guiterman (Tue Nov 20 2007 - 11:22:29 EST)
• [Snort-users] Two problems Tica (Mon Nov 19 2007 - 10:46:40 EST)
• [Snort-users] HELP: Configuring IPTABLES on SnortSam blocking agent Rachmat Hidayat Al-Anshar (Sun Nov 18 2007 - 03:19:15 EST)
• [Snort-users] I'm Leaving Bleeding Threats Matt Jonkman (Sat Nov 17 2007 - 06:05:21 EST)
  • Re: [Snort-users] I'm Leaving Bleeding Threats Paul Melson (Sat Nov 17 2007 - 11:46:37 EST)
    • Re: [Snort-users] I'm Leaving Bleeding Threats Matt Jonkman (Sat Nov 17 2007 - 18:08:42 EST)
• [Snort-users] HELP: Error at exploit.so: undefined symbol: __guard Rachmat Hidayat Al-Anshar (Sat Nov 17 2007 - 00:05:40 EST)
  • Re: [Snort-users] HELP: Error at exploit.so: undefined symbol: __guard Matthew Watchinski (Sat Nov 17 2007 - 12:41:26 EST)
  • Re: [Snort-users] HELP: Error at exploit.so: undefined symbol: __guard Rachmat Hidayat Al-Anshar (Sat Nov 17 2007 - 13:34:36 EST)
  • Re: [Snort-users] HELP: Error at exploit.so: undefined symbol: __guard Rachmat Hidayat Al-Anshar (Sun Nov 18 2007 - 03:06:10 EST)
• [Snort-users] Regarding pattern Matching Govind (Fri Nov 16 2007 - 16:06:24 EST)
• [Snort-users] typo on snort280 manual pdf "rereference" page 129 rmkml (Thu Nov 15 2007 - 14:26:51 EST)
• [Snort-users] Double Decoding Attack bad? The New York NOC Inc. (Thu Nov 15 2007 - 07:09:09 EST)
  • Re: [Snort-users] Double Decoding Attack bad? Chris Libby (Thu Nov 15 2007 - 09:41:20 EST)
    • Re: [Snort-users] Double Decoding Attack bad? Joel Esler (Thu Nov 15 2007 - 09:54:16 EST)
• [Snort-users] Excluding a single host from a rule Roman Daszczyszak (Thu Nov 15 2007 - 06:09:09 EST)
  • Re: [Snort-users] Excluding a single host from a rule Jeremy (Thu Nov 15 2007 - 06:46:58 EST)
• [Snort-users] HELP: Dealing with 2 output plugin, is it ok? Rachmat Hidayat Al-Anshar (Wed Nov 14 2007 - 21:37:21 EST)
  • Re: [Snort-users] HELP: Dealing with 2 output plugin, is it ok? Joel Esler (Wed Nov 14 2007 - 22:56:26 EST)
• [Snort-users] HELP: "Segmentation Fault" as result of wwwboard passwd.txt attack Rachmat Hidayat Al-Anshar (Sun Nov 11 2007 - 09:24:27 EST)
  • Re: [Snort-users] HELP: "Segmentation Fault" as result of wwwboard passwd.txt attack Todd Wease (Sun Nov 11 2007 - 09:53:00 EST)
• Re: [Snort-users] [Snortsam-discussion] HELP: setting upSnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Fri Nov 09 2007 - 22:43:18 EST)
• [Snort-users] (no subject) Rachmat Hidayat Al-Anshar (Fri Nov 09 2007 - 22:30:14 EST)
• [Snort-users] Barnyard randy(at)procyonlabs.com (Fri Nov 09 2007 - 15:45:09 EST)
  • Re: [Snort-users] Barnyard Joel Esler (Fri Nov 09 2007 - 15:50:49 EST)
  • Re: [Snort-users] Barnyard randy(at)procyonlabs.com (Fri Nov 09 2007 - 16:40:58 EST)
    • Re: [Snort-users] Barnyard Jeff Dell (Fri Nov 09 2007 - 16:50:23 EST)
      • Re: [Snort-users] Barnyard Jason Brvenik (Fri Nov 09 2007 - 19:21:46 EST)
• [Snort-users] Snort Summary Web Pages Michael Merrell (Fri Nov 09 2007 - 13:41:37 EST)
  • Re: [Snort-users] Snort Summary Web Pages Bryan Swann (Fri Nov 09 2007 - 17:11:38 EST)
• [Snort-users] porn.rules dhottinger(at)harrisonburg.k12.va.us (Fri Nov 09 2007 - 09:09:41 EST)
  • Re: [Snort-users] porn.rules rmkml (Fri Nov 09 2007 - 07:47:37 EST)
  • Re: [Snort-users] porn.rules Joel Esler (Fri Nov 09 2007 - 09:20:05 EST)
    • Re: [Snort-users] porn.rules dhottinger(at)harrisonburg.k12.va.us (Fri Nov 09 2007 - 09:29:58 EST)
      • Re: [Snort-users] porn.rules Joel Esler (Fri Nov 09 2007 - 09:43:03 EST)
      • Re: [Snort-users] porn.rules Paul Melson (Fri Nov 09 2007 - 10:36:26 EST)
      • Re: [Snort-users] porn.rules Paul Schmehl (Fri Nov 09 2007 - 12:43:54 EST)
      • [Snort-users] How much will a huge list of subnets to the frag3 preprocessor slow snort? Bachelor, Stephen A CTR USSOCOM HQ (Fri Nov 09 2007 - 13:10:55 EST)
      • Re: [Snort-users] How much will a huge list of subnets to the frag3preprocessor slow snort? Paul Melson (Fri Nov 09 2007 - 13:57:38 EST)
  • Re: [Snort-users] porn.rules Paul Melson (Fri Nov 09 2007 - 14:11:10 EST)
    • Re: [Snort-users] porn.rules dhottinger(at)harrisonburg.k12.va.us (Fri Nov 09 2007 - 14:43:52 EST)
      • Re: [Snort-users] porn.rules Joel Esler (Fri Nov 09 2007 - 14:50:06 EST)
      • Re: [Snort-users] porn.rules David J. Bianco (Fri Nov 09 2007 - 15:02:28 EST)
• [Snort-users] HELP: Installing SnortSam with Snort-2.8.0+BASE+Barnyard installed Rachmat Hidayat Al-Anshar (Fri Nov 09 2007 - 02:41:33 EST)
• Re: [Snort-users] [Snortsam-discussion] HELP:setting upSnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Fri Nov 09 2007 - 02:36:34 EST)
• [Snort-users] CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's Dragos Ruiu (Thu Nov 08 2007 - 23:22:21 EST)
• [Snort-users] Sensor 'sanity' Paul Halliday (Thu Nov 08 2007 - 20:33:24 EST)
  • Re: [Snort-users] Sensor 'sanity' Paul Halliday (Fri Nov 09 2007 - 06:19:25 EST)
  • Re: [Snort-users] Sensor 'sanity' Jason Haar (Sun Nov 11 2007 - 15:45:58 EST)
    • [Snort-users] snort virtualization Youngquist, Jason R. (Wed Nov 14 2007 - 14:25:06 EST)
      • Re: [Snort-users] snort virtualization Justin Heath (Wed Nov 14 2007 - 16:27:29 EST)
• [Snort-users] MMAP and odd looking stats John Hally (Thu Nov 08 2007 - 13:19:36 EST)
  • Re: [Snort-users] MMAP and odd looking stats Todd Wease (Thu Nov 08 2007 - 13:55:28 EST)
    • Re: [Snort-users] MMAP and odd looking stats Todd Wease (Thu Nov 15 2007 - 15:24:20 EST)
      • [Snort-users] Any way to do something like "Flowbits, " but for other than a TCP stream? Bachelor, Stephen A CTR USSOCOM HQ (Thu Nov 15 2007 - 16:02:03 EST)
      • Re: [Snort-users] Any way to do something like "Flowbits, " but for other than a TCP stream? M. Shirk (Fri Nov 16 2007 - 11:15:48 EST)
• [Snort-users] Fw: [Snortsam-discussion] HELP: setting upSnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Thu Nov 08 2007 - 02:23:44 EST)
• [Snort-users] Pruning MySql Database and Snort Logs Atkins, Dwane P (Tue Nov 06 2007 - 11:41:31 EST)
• [Snort-users] Regarding pattern matching Govind (Mon Nov 05 2007 - 12:30:23 EST)
  • Re: [Snort-users] Regarding pattern matching Paul Schmehl (Mon Nov 05 2007 - 12:40:17 EST)
    • Re: [Snort-users] Regarding pattern matching Marc Norton (Mon Nov 05 2007 - 15:34:02 EST)
• [Snort-users] HELP: Error instaling so_rules Rachmat Hidayat Al-Anshar (Mon Nov 05 2007 - 09:19:10 EST)
  • Re: [Snort-users] HELP: Error instaling so_rules Matthew Watchinski (Mon Nov 05 2007 - 11:41:14 EST)
• Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Sat Nov 03 2007 - 01:49:20 EDT)
  • Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard Joel Esler (Sat Nov 03 2007 - 09:22:35 EDT)
    • Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard Will Metcalf (Sat Nov 03 2007 - 09:46:05 EDT)
  • Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Sat Nov 03 2007 - 09:39:34 EDT)
  • Re: [Snort-users] [Snortsam-discussion] HELP: setting up SnortSamrunsSnort-2.8.0+BASE+Barnyard Rachmat Hidayat Al-Anshar (Sat Nov 03 2007 - 09:52:29 EDT)
• [Snort-users] Vote for Snort as the best Intusion Prevtion Solution Mike Guiterman (Fri Nov 02 2007 - 11:40:01 EDT)
• [Snort-users] Latest Snort Report by Richard Bejtlich Mike Guiterman (Fri Nov 02 2007 - 11:08:03 EDT)
  • Re: [Snort-users] Latest Snort Report by Richard Bejtlich Richard Bejtlich (Sat Nov 03 2007 - 09:55:53 EDT)
• [Snort-users] IDS Policy Manager v2.2 Released Jeff Dell (Thu Nov 01 2007 - 12:51:38 EDT)
  • Re: [Snort-users] Barnyard 0.2.0 (build 32) dumps core and wont compile with --enable-debug Rob Sharp (Thu Nov 01 2007 - 09:15:56 EDT)
    • Re: [Snort-users] Barnyard 0.2.0 (build 32) dumps core and wont compile with --enable-debug Jason (Thu Nov 01 2007 - 12:32:07 EDT)
  • Re: [Snort-users] Tarari, etc - Offloading RegEx Emre Saglam (Wed Nov 07 2007 - 11:22:52 EST)
    • [Snort-users] Buffer Overflows Arif Basha (Wed Nov 07 2007 - 19:45:40 EST)
      • Re: [Snort-users] Buffer Overflows Jason (Wed Nov 07 2007 - 20:02:08 EST)