Mailing List Archive For focus-ids@securityfocus.com Jan 2003 By Thread

• RE: Did IDSes detect the SQL worm? Chmielarski TOM-ATC090 (Fri Jan 31 2003 - 16:04:14 EST)
• Re: Gig TAPs Talisker (Fri Jan 31 2003 - 15:09:34 EST)
• Re: Gig TAPs Aaron Turner (Fri Jan 31 2003 - 14:21:15 EST)
• RE: Gig TAPs Peter Schawacker (Fri Jan 31 2003 - 14:07:43 EST)
• Re: Did IDSes detect the SQL worm? Scott C. Kennedy (Fri Jan 31 2003 - 14:01:51 EST)
• Re: Active response... some thoughts. Chris Travers (Fri Jan 31 2003 - 13:22:58 EST)
• RE: Active response... some thoughts. Brian Laing (Fri Jan 31 2003 - 14:56:17 EST)
• Re: Gig TAPs Talisker (Thu Jan 30 2003 - 15:27:38 EST)
• RE: Snort-Inline and worm containment Ken Smith (Fri Jan 31 2003 - 11:46:41 EST)
• RE: VDS FAQ - request for feedback David J. Meltzer (Fri Jan 31 2003 - 11:43:30 EST)
• RE: IDS security testing training Young, Keith (Fri Jan 31 2003 - 11:11:01 EST)
• Re: Active response... some thoughts. mb_lima (Fri Jan 31 2003 - 11:34:34 EST)
• RE: IDS security testing training Peter Schawacker (Fri Jan 31 2003 - 11:19:45 EST)
• Re: Did IDSes detect the SQL worm? Bandar Alzaaidi (Thu Jan 30 2003 - 15:27:13 EST)
• Re: Gig TAPs Jim McMurry (Thu Jan 30 2003 - 14:27:22 EST)
• RE: Did IDSes detect the SQL worm? Garritano,Robert (Fri Jan 31 2003 - 11:04:09 EST)
• Sapphire worm and Real Secure Server Sensor supersekuritydude(at)hushmail.com (Thu Jan 30 2003 - 14:52:18 EST)
• Re: Did IDSes detect the SQL worm? Kurt Seifried (Thu Jan 30 2003 - 16:06:51 EST)
• Re: Snort-Inline and worm containment Shaiful (Wed Jan 29 2003 - 19:29:46 EST)
• RE: Active response... some thoughts. Rob Shein (Thu Jan 30 2003 - 12:17:14 EST)
• RE: Snort-Inline and worm containment Rob Shein (Thu Jan 30 2003 - 12:13:04 EST)
• Re: Active response... some thoughts. Stone Cold (Thu Jan 30 2003 - 04:57:05 EST)
• RE: SQLSlammer Worm & IDSs Zach Forsyth (Wed Jan 29 2003 - 22:27:54 EST)
• Re: SQLSlammer Worm & IDSs Mike Barkett (Wed Jan 29 2003 - 18:31:54 EST)
• Re: Snort-Inline and worm containment Lance Spitzner (Wed Jan 29 2003 - 18:21:33 EST)
• Re: VDS FAQ - request for feedback David W. Goodrum (Wed Jan 29 2003 - 17:52:21 EST)
• Re: Active response... some thoughts. Paul Palmer (Wed Jan 29 2003 - 17:32:27 EST)
• Re: SQLSlammer Worm & IDSs Talisker (Wed Jan 29 2003 - 16:30:55 EST)
• Re: IDS security testing training Jason Falciola (Wed Jan 29 2003 - 14:55:21 EST)
• RE: Did IDSes detect the SQL worm? Gonzalez, Albert (Wed Jan 29 2003 - 14:15:14 EST)
• RE: SQLSlammer Worm & IDSs Thierry Evangelista (Wed Jan 29 2003 - 14:47:52 EST)
• Re: SQLSlammer Worm & IDSs kyle.r.maxwell(at)verizon.com (Wed Jan 29 2003 - 14:09:36 EST)
• Re: Active response... some thoughts. mb_lima (Wed Jan 29 2003 - 13:45:39 EST)
• RE: Active response... some thoughts. Brian Laing (Wed Jan 29 2003 - 13:12:15 EST)
• Re: Did IDSes detect the SQL worm? Scott C. Kennedy (Wed Jan 29 2003 - 12:52:22 EST)
• Re: Did IDSes detect the SQL worm? Matt Bing (Wed Jan 29 2003 - 12:34:02 EST)
• Gig TAPs Garritano,Robert (Wed Jan 29 2003 - 12:38:33 EST)
• Re: SQL effect on stateful IDS and firewalls Gianni Tedesco (Wed Jan 29 2003 - 12:33:03 EST)
• RE: Did IDSes detect the SQL worm? Stan Burditzman (Wed Jan 29 2003 - 12:38:38 EST)
• RE: Did IDSes detect the SQL worm? Cathleen_M_Brackin(at)bankone.com (Wed Jan 29 2003 - 13:04:52 EST)
• SQLSlammer Worm & IDSs Andrew Plato (Tue Jan 28 2003 - 17:49:21 EST)
• Re: Active response... some thoughts. Sangram (Tue Jan 28 2003 - 23:03:23 EST)
• RE: Active response... some thoughts. Steven Richards (Tue Jan 28 2003 - 23:35:48 EST)
• Snort-Inline and worm containment Tom McLaughlin (Tue Jan 28 2003 - 21:19:17 EST)
• Re: Active response... some thoughts. Todd Heberlein (Tue Jan 28 2003 - 18:24:32 EST)
• RE: WINDUMP SYNTAX ASSISTANCE..... Bill Martin (Wed Jan 29 2003 - 02:09:52 EST)
• IDS security testing training Pete Herzog (Wed Jan 29 2003 - 04:27:17 EST)
• RE: Active response... some thoughts. Frank Knobbe (Wed Jan 29 2003 - 12:08:35 EST)
• SQL effect on stateful IDS and firewalls Todd Heberlein (Tue Jan 28 2003 - 18:31:35 EST)
• Did IDSes detect the SQL worm? Todd Heberlein (Tue Jan 28 2003 - 18:41:40 EST)
• RE: tcp overlap Umesh Shankar (Tue Jan 28 2003 - 14:29:24 EST)
• RE: Active response... some thoughts. mb_lima (Tue Jan 28 2003 - 13:19:49 EST)
• RE: tcp overlap Rob Shein (Tue Jan 28 2003 - 13:31:13 EST)
• RE: Active response... some thoughts. Kohlenberg, Toby (Tue Jan 28 2003 - 12:55:37 EST)
• WINDUMP SYNTAX ASSISTANCE..... Jason Beauford (Tue Jan 28 2003 - 12:27:26 EST)
• RE: Active response... some thoughts. Garbrecht, Frederick (Tue Jan 28 2003 - 11:31:18 EST)
• Re: NetScreen IDS (X-post) Jordan K Wiens (Tue Jan 28 2003 - 11:23:57 EST)
• UTF-16 and premature request ending evasion Cox, Michael (Tue Jan 28 2003 - 10:25:23 EST)
• VDS FAQ - request for feedback David J. Meltzer (Mon Jan 27 2003 - 19:27:30 EST)
• RE: Active response... some thoughts. Kohlenberg, Toby (Mon Jan 27 2003 - 20:26:59 EST)
• Re: new on IDSs (Context-awareness in IDSes) Umesh Shankar (Mon Jan 27 2003 - 19:00:26 EST)
• Re: NetScreen IDS (X-post) Jordan K Wiens (Mon Jan 27 2003 - 14:21:44 EST)
• Re: Active response... some thoughts. Talisker (Mon Jan 27 2003 - 14:10:06 EST)
• Re: new on IDSs David W. Goodrum (Mon Jan 27 2003 - 13:33:42 EST)
• Know Your Enemy: Learning with VMware Lance Spitzner (Mon Jan 27 2003 - 12:40:51 EST)
• RE: new on IDSs Omar Herrera (Mon Jan 27 2003 - 00:31:02 EST)
• RE: new on IDSs Bawcom, Aaron (Mon Jan 27 2003 - 11:23:49 EST)
• RE: Active response... some thoughts. mb_lima (Mon Jan 27 2003 - 05:43:28 EST)
• RE: Active response... some thoughts. Christopher Lyon (Sun Jan 26 2003 - 03:58:10 EST)
• RE: Active response... some thoughts. Alan Shimel (Sun Jan 26 2003 - 23:45:14 EST)
• RE: Active response... some thoughts. Shashank Rai (Sun Jan 26 2003 - 23:17:49 EST)
• Re: Active response... some thoughts. Martin Roesch (Sat Jan 25 2003 - 23:27:36 EST)
• new on IDSs Vladimir (Sun Jan 26 2003 - 06:10:49 EST)
• IDS Terminology Talisker (Fri Jan 24 2003 - 13:29:41 EST)
• RE: Active response... some thoughts. Ralph Los (Fri Jan 24 2003 - 12:38:53 EST)
• NetScreen IDS (X-post) Ralph Los (Fri Jan 24 2003 - 12:48:49 EST)
• RE: Active response... some thoughts. Abe L. Getchell (Fri Jan 24 2003 - 01:17:04 EST)
• RE: Active response... some thoughts. Kohlenberg, Toby (Thu Jan 23 2003 - 20:45:07 EST)
• RE: Active response... some thoughts. sstover (Thu Jan 23 2003 - 13:45:17 EST)
• RE: interface-mirroring on a server sstover (Wed Jan 22 2003 - 09:16:24 EST)
• Re: Active response... some thoughts. Ron Gula (Mon Jan 20 2003 - 23:01:07 EST)
• AW: Active response... some thoughts. detmar.liesen(at)lds.nrw.de (Tue Jan 21 2003 - 02:17:06 EST)
• RE: [IDS] IDS Common Criteria Randy Taylor (Wed Jan 22 2003 - 14:32:59 EST)
• RE: [IDS] IDS Common Criteria Disco Godfather (Tue Jan 21 2003 - 07:14:53 EST)
• RE: Active response... some thoughts. Abe L. Getchell (Tue Jan 21 2003 - 14:02:50 EST)
• RE: Intrusion Risk Assessment Fengmin Gong (Sat Jan 18 2003 - 17:16:04 EST)
• interface-mirroring on a server detmar.liesen(at)lds.nrw.de (Fri Jan 10 2003 - 03:39:28 EST)
• Re: IDS Stealth Mode Matt Simmons (Thu Jan 09 2003 - 08:48:32 EST)
• RE: [IDS] IDS Common Criteria Graham, Robert (ISS Atlanta) (Wed Jan 15 2003 - 14:03:29 EST)
• Re: how to verify whether an attack attempt is successful? Scott Wimer (Fri Jan 17 2003 - 11:46:01 EST)
• RE: IDS Stealth Mode Brito, Nelson (ISS Brazil) (Thu Jan 09 2003 - 08:00:59 EST)
• Active response... some thoughts. Abe L. Getchell (Thu Jan 16 2003 - 13:37:11 EST)
• Re: tcp overlap Thomas H. Ptacek (Wed Jan 15 2003 - 16:36:14 EST)
• RE: how to verify whether an attack attempt is successful? Metcalfe, Greg (Wed Jan 15 2003 - 13:56:51 EST)
• RE: [IDS] IDS Common Criteria Parnelli Vondel (Sat Jan 18 2003 - 00:41:59 EST)
• RE: Intrusion Risk Assessment Fengmin Gong (Tue Jan 14 2003 - 14:02:36 EST)
• Re: IDS Stealth Mode Joshua Krage (Mon Jan 13 2003 - 22:15:42 EST)
• RE: how to verify whether an attack attempt is successful? Robert_Huber(at)bankone.com (Wed Jan 15 2003 - 15:02:28 EST)
• RE: [IDS] IDS Common Criteria Foster, Douglas (Fri Jan 17 2003 - 22:21:21 EST)
• RE: how to verify whether an attack attempt is successful? Maher Odeh (Wed Jan 15 2003 - 17:05:42 EST)
• RE: how to verify whether an attack attempt is successful? Ron Gula (Fri Jan 17 2003 - 12:08:19 EST)
• RE: how to verify whether an attack attempt is successful? David J. Meltzer (Fri Jan 17 2003 - 12:08:56 EST)
• RE: [IDS] IDS Common Criteria Rob Shein (Wed Jan 15 2003 - 10:42:34 EST)
• Re: IDS Stealth Mode Frank Knobbe (Tue Jan 14 2003 - 23:43:31 EST)
• Re: how to verify whether an attack attempt is successful? Yan Zhai (Wed Jan 15 2003 - 17:32:43 EST)
• RE: [IDS] IDS Common Criteria Graham, Robert (ISS Atlanta) (Fri Jan 17 2003 - 13:37:07 EST)
• RE: how to verify whether an attack attempt is successful? detmar.liesen(at)lds.nrw.de (Thu Jan 16 2003 - 02:28:25 EST)
• Re: how to verify whether an attack attempt is successful? Kurt Seifried (Wed Jan 15 2003 - 16:27:19 EST)
• RE: [IDS] IDS Common Criteria Randy Taylor (Wed Jan 15 2003 - 13:09:31 EST)
• Re: how to verify whether an attack attempt is successful? Jose Nazario (Wed Jan 15 2003 - 13:51:39 EST)
• Re: tcp overlap Jon Gary (Wed Jan 15 2003 - 15:46:49 EST)
• Re: how to verify whether an attack attempt is successful? Huagang XIE (Wed Jan 15 2003 - 19:45:32 EST)
• Call For Papers -- RAID 2003 Joshua Haines (Tue Jan 14 2003 - 17:13:39 EST)
• Re: tcp overlap fr0ck9 (Mon Jan 13 2003 - 14:16:31 EST)
• RE: Intrusion Prevention Brian Laing (Tue Jan 14 2003 - 14:48:44 EST)
• how to verify whether an attack attempt is successful? Yan Zhai (Mon Jan 13 2003 - 11:59:49 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Avi Chesla (Tue Jan 14 2003 - 08:00:55 EST)
• Snort-Inline drop rulebase mike(at)honeynet.org (Mon Jan 13 2003 - 18:14:13 EST)
• RE: [IDS] IDS Common Criteria Randy Taylor (Mon Jan 13 2003 - 10:27:11 EST)
• RE: [IDS] IDS Common Criteria Graham, Robert (ISS Atlanta) (Fri Jan 10 2003 - 19:14:53 EST)
• Re: IDS Stealth Mode Jonas Eriksson (Sun Jan 12 2003 - 13:40:38 EST)
• RE: IDS Stealth Mode Aditya (Fri Jan 10 2003 - 02:00:34 EST)
• Re: backdoor detection lucy lee (Sat Jan 11 2003 - 21:12:20 EST)
• Testing Manifestos [WAS: OSEC, ICSA, Cats and Dogs, etc.] Greg Shipley (Fri Jan 10 2003 - 01:39:55 EST)
• Re: IDS Stealth Mode Matt Harris (Thu Jan 09 2003 - 09:34:47 EST)
• Re: IDS Stealth Mode Dave Mitchell (Thu Jan 09 2003 - 10:30:58 EST)
• Re: IDS Stealth Mode Talisker (Thu Jan 09 2003 - 03:59:43 EST)
• RE: VA/IDS Integration (Was: RE: re[2]: Intrusion Risk Assessment) David J. Meltzer (Fri Jan 10 2003 - 10:53:55 EST)
• Re: IDS Stealth Mode M. Dodge Mumford (Wed Jan 08 2003 - 20:39:48 EST)
• re[2]: Intrusion Risk Assessment Ron Gula (Wed Jan 08 2003 - 23:33:49 EST)
• IDS Assessment (was: Intrusion Prevention... probably something else at one point) Golomb, Gary (Thu Jan 09 2003 - 00:01:14 EST)
• help anderson lee (Wed Jan 08 2003 - 21:45:07 EST)
• RE: Intrusion Prevention Graham Field (Wed Jan 08 2003 - 20:50:40 EST)
• Re: IDS Stealth Mode Kurt Seifried (Wed Jan 08 2003 - 20:09:17 EST)
• AW: [IDS] IDS Common Criteria detmar.liesen(at)lds.nrw.de (Wed Jan 08 2003 - 03:11:42 EST)
• Linux Snort-Inline Toolkit Lance Spitzner (Wed Jan 08 2003 - 12:02:32 EST)
• RE: Intrusion Risk Assessment Nicole Nicholson (Wed Jan 08 2003 - 12:11:16 EST)
• RE: [IDS] IDS Common Criteria Greg van der Gaast (Wed Jan 08 2003 - 09:14:40 EST)
• re[2]: Intrusion Risk Assessment Richard Bennison (Wed Jan 08 2003 - 11:52:05 EST)
• IDS Stealth Mode r)(o)(m (Wed Jan 08 2003 - 09:39:55 EST)
• Re: [IDS] IDS Common Criteria Randy Taylor (Tue Jan 07 2003 - 18:49:52 EST)
• Re: [IDS] IDS Common Criteria Talisker (Tue Jan 07 2003 - 18:00:24 EST)
• Re: [IDS] IDS Common Criteria Frederick M Avolio (Tue Jan 07 2003 - 16:04:21 EST)
• Re: [IDS] IDS Common Criteria Randy Taylor (Tue Jan 07 2003 - 16:49:53 EST)
• Re: [IDS] IDS Common Criteria Randy Taylor (Tue Jan 07 2003 - 15:22:38 EST)
• Re: Intrusion Risk Assessment Herve Debar (Tue Jan 07 2003 - 08:01:19 EST)
• FW: Intrusion Risk Assessment Peter Schwarz (Tue Jan 07 2003 - 12:39:28 EST)
• RE: IDS Common Criteria Joseph M Hoffman (Tue Jan 07 2003 - 15:12:27 EST)
• RE: Intrusion Risk Assessment Robert Buckley (Tue Jan 07 2003 - 12:32:20 EST)
• Re: [IDS] IDS Common Criteria Randy Taylor (Mon Jan 06 2003 - 22:32:28 EST)
• RE: IDS Common Criteria Alan Shimel (Mon Jan 06 2003 - 15:53:28 EST)
• RE: IDS Common Criteria Greg van der Gaast (Tue Jan 07 2003 - 03:19:40 EST)
• Re: Intrusion Risk Assessment Fernando Cardoso (Tue Jan 07 2003 - 04:58:19 EST)
• Linux Honeyd Toolkit Lance Spitzner (Tue Jan 07 2003 - 09:40:16 EST)
• RE: Intrusion Prevention Golomb, Gary (Mon Jan 06 2003 - 16:07:44 EST)
• Re: [IDS] IDS Common Criteria Frederick M Avolio (Tue Jan 07 2003 - 09:15:13 EST)
• RE: IDS Common Criteria Greenspan, Howard (Tue Jan 07 2003 - 11:25:16 EST)
• RE: Intrusion Risk Assessment Alan Shimel (Mon Jan 06 2003 - 15:58:20 EST)
• RE: Intrusion Risk Assessment Rob Shein (Mon Jan 06 2003 - 19:35:42 EST)
• IDS Common Criteria Talisker (Mon Jan 06 2003 - 13:13:58 EST)
• Intrusion Risk Assessment Robert_Huber(at)bankone.com (Mon Jan 06 2003 - 12:54:02 EST)
• Re: OSEC [WAS: Re: Intrusion Prevention] George Capehart (Sat Jan 04 2003 - 13:48:25 EST)
• Re: Voice over IP applications vulnerabilites/attacks ? Talisker (Mon Jan 06 2003 - 13:15:15 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Brennen Reynolds (Fri Jan 03 2003 - 18:37:42 EST)
• Re: OSEC [WAS: Re: Intrusion Prevention] Randy Taylor (Fri Jan 03 2003 - 10:09:08 EST)
• Re: Voice over IP applications vulnerabilities/attacks? Chris Tobkin (Thu Jan 02 2003 - 19:33:42 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Paul D. Scallan, Jr. (Thu Jan 02 2003 - 17:33:29 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Keith Stewart (Thu Jan 02 2003 - 17:03:58 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Paul D. Scallan, Jr. (Thu Jan 02 2003 - 13:13:48 EST)
• RE: Voice over IP applications vulnerabilites/attacks ? Paul D. Scallan, Jr. (Thu Jan 02 2003 - 13:02:35 EST)
• Voice over IP applications vulnerabilites/attacks ? Avi Chesla (Thu Jan 02 2003 - 12:14:16 EST)