Mailing List Archive For focus-ids@securityfocus.com Feb 2003 By Author

• Abe L. Getchell
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 10:55:42 EST)
• Adam Powers
  • RE: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 18:28:43 EST)
  • RE: Protocol Anomaly Detection IDS (Thu Feb 06 2003 - 11:14:23 EST)
• Alfred Huger
  • Summary of the responses (4 line ad) (Thu Feb 13 2003 - 16:48:43 EST)
  • 4 line ads on posts (Wed Feb 12 2003 - 19:46:08 EST)
• Ali Saifullah Khan
  • Re: Active response... some thoughts. (Mon Feb 03 2003 - 14:18:15 EST)
• andre
  • Re: Active response... some thoughts. (Sat Feb 08 2003 - 16:50:21 EST)
• Andrew Plato
  • RE: Protocol Anomaly Detection IDS (Fri Feb 07 2003 - 21:07:54 EST)
• Angel Rivera
  • RE: sniffer detection on switched based networks (Thu Feb 06 2003 - 09:26:58 EST)
• Anton Chuvakin
  • Re: slow scans? (Wed Feb 12 2003 - 16:38:01 EST)
  • Re: slow scans? (Wed Feb 12 2003 - 15:29:51 EST)
  • slow scans? (Wed Feb 12 2003 - 13:46:41 EST)
• Augusto Paes de Barros
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:56:26 EST)
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:53:33 EST)
  • RE: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 10:27:09 EST)
  • RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 06:17:46 EST)
• Bawcom, Aaron
  • RE: Gig TAPs (Mon Feb 03 2003 - 13:07:36 EST)
• Bennett Todd
  • Re: Gig TAPs (Mon Feb 03 2003 - 14:46:52 EST)
• Bob Radvanovsky
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 14:49:00 EST)
• bobr(at)guru.virtual.sk
  • how to detect http tunnel? (Mon Feb 03 2003 - 08:43:00 EST)
• Brennen Reynolds
  • Traffic logs to help with IDS testing and development (Mon Feb 10 2003 - 20:17:32 EST)
• Brett Harris
  • Re: sniffer detection on switched based networks (Wed Feb 05 2003 - 20:00:23 EST)
• Chris Travers
  • Re: Active response... some thoughts. (Wed Feb 05 2003 - 02:16:08 EST)
• Christian Kreibich
  • Re: ids detect malicious encrypted data? (Fri Feb 21 2003 - 12:29:56 EST)
• Citadel Consulting
  • RE: WLAN IDS (Thu Feb 20 2003 - 15:46:11 EST)
  • RE: WLAN IDS (Thu Feb 20 2003 - 14:58:23 EST)
• Cox, Michael
  • IDS Deployment Metrics (Fri Feb 14 2003 - 12:59:32 EST)
• Dener Martins
  • Re: Triangulating packets (Wed Feb 12 2003 - 12:38:06 EST)
• dreamwvr(at)dreamwvr.com
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 12:42:23 EST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 01:56:56 EST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 14:38:29 EST)
• fr0ck9
  • Re: Active response... some thoughts. (Wed Feb 05 2003 - 17:42:14 EST)
• Frank Knobbe
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 19:33:17 EST)
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Sat Feb 22 2003 - 15:55:39 EST)
  • Re: Web server response to attacks (Fri Feb 21 2003 - 19:17:56 EST)
  • Re: Protocol Anomaly Detection IDS (Tue Feb 11 2003 - 15:17:17 EST)
  • Re: Active response... some thoughts. (Sat Feb 08 2003 - 19:32:13 EST)
• Gene Yoo
  • Re: Protocol Anomaly Detection IDS - Honeypots (Sat Feb 22 2003 - 00:05:37 EST)
• Golomb, Gary
  • 30-ish page whitepaper (Wed Feb 26 2003 - 15:19:55 EST)
• Gonzalez, Albert
  • RE: Active response... some thoughts. (Mon Feb 03 2003 - 13:50:41 EST)
  • RE: snort-inline inbound ruleset? (Mon Feb 03 2003 - 13:38:17 EST)
• Graham, Robert (ISS Atlanta)
  • RE: Protocol Anomaly Detection IDS (Wed Feb 05 2003 - 19:14:25 EST)
• Hall, Andrew (DPRS)
  • RE: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 16:17:14 EST)
• Ivan Hernandez
  • Re: ids detect malicious encrypted data? (Fri Feb 28 2003 - 12:54:45 EST)
• Jacco Tunnissen
  • Share your Honeypot and IDS experiences with the masses (Fri Feb 28 2003 - 23:14:46 EST)
• Jack Whitsitt (jofny)
  • Using an IDS to redirect hostile traffic to a Honeypot (Sat Feb 22 2003 - 21:18:26 EST)
• James Hoagland
  • Re: slow scans? (Fri Feb 14 2003 - 12:42:35 EST)
  • Re: slow scans? (Fri Feb 14 2003 - 12:42:19 EST)
• Jason
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 17:50:01 EST)
• Jason V. Miller
  • Focus-IDS Mailing List Administration & Article Announcement (Thu Feb 20 2003 - 15:57:30 EST)
• Jeff Dell
  • IDS Policy Manager 1.3 Final Released! (Fri Feb 14 2003 - 10:19:12 EST)
• Johannes Ullrich
  • Re: slow scans? (Wed Feb 12 2003 - 14:15:21 EST)
• John Flynn
  • snort-inline inbound ruleset? (Sun Feb 02 2003 - 13:09:20 EST)
• Jon
  • Re: [Snort-sigs] new Q signature (Thu Feb 27 2003 - 23:08:01 EST)
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 20:02:05 EST)
  • Re: [Snort-sigs] new Q signature (Mon Feb 10 2003 - 16:43:08 EST)
  • new Q signature (Mon Feb 10 2003 - 14:53:11 EST)
• Jordan K Wiens
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:36:26 EST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:12:36 EST)
  • Re: Protocol Anomaly Detection IDS (Thu Feb 06 2003 - 13:23:06 EST)
• Kistler Ueli
  • Eagle X 1.0 release (Tue Feb 04 2003 - 18:45:41 EST)
  • IDScenter 1.1 rc1 released (Tue Feb 04 2003 - 18:44:17 EST)
• Konrad Rieck
  • Re: 30-ish page whitepaper (Thu Feb 27 2003 - 13:37:37 EST)
  • Costs of a compromise related to the detection time (Mon Feb 03 2003 - 09:35:17 EST)
• Kurt Seifried
  • Re: how to detect http tunnel? (Mon Feb 03 2003 - 20:44:31 EST)
• Lance Spitzner
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Sun Feb 23 2003 - 14:24:20 EST)
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 11:36:56 EST)
  • Re: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 13:58:58 EST)
  • Re: snort-inline inbound ruleset? (Mon Feb 03 2003 - 12:41:37 EST)
• Lau Ker Chea
  • ids detect malicious encrypted data? (Fri Feb 21 2003 - 04:21:04 EST)
• Levinson, Karl
  • RE: Web server response to attacks (Fri Feb 21 2003 - 13:17:57 EST)
• Marc Benoit
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 18:30:59 EST)
• Martin Roesch
  • Re: Protocol Anomaly Detection IDS (Mon Feb 17 2003 - 22:29:48 EST)
  • Re: Protocol Anomaly Detection IDS (Mon Feb 10 2003 - 21:04:52 EST)
• mb_lima
  • Re: Active response... some thoughts. (Tue Feb 11 2003 - 05:06:53 EST)
• Michael Katz
  • Re: Web server response to attacks (Thu Feb 20 2003 - 16:44:54 EST)
• Michael L. Artz
  • Protocol Anomaly Detection IDS (Tue Feb 04 2003 - 23:07:02 EST)
• Mike Shaw
  • Re: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 11:54:23 EST)
• Niels Provos
  • The First Honeyd Challenge (Mon Feb 17 2003 - 00:26:55 EST)
  • Honeyd 0.5 release (Sat Feb 15 2003 - 18:06:20 EST)
• pbsarnac(at)thoughtworks.com
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 17:55:54 EST)
• Pete Herzog
  • RE: RES: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 12:00:14 EST)
  • RE: Active response... some thoughts. (Thu Feb 06 2003 - 09:54:06 EST)
• Pete Lindstrom
  • Method to the Madness: Anomaly & Signature Redux (Thu Feb 06 2003 - 14:05:29 EST)
• Peter Schawacker
  • RE: Gig TAPs (Mon Feb 03 2003 - 13:13:59 EST)
• planz
  • Re: WLAN IDS (Mon Feb 17 2003 - 01:14:17 EST)
  • Re: WLAN IDS (Mon Feb 10 2003 - 23:56:39 EST)
• Ralph Los
  • RE: Active response... some thoughts. (Fri Feb 07 2003 - 00:51:35 EST)
  • RE: Active response... some thoughts. (Fri Feb 07 2003 - 00:41:22 EST)
• Rob McMillen
  • Re: sniffer detection on switched based networks (Wed Feb 05 2003 - 18:13:13 EST)
  • RE: Active response... some thoughts. (Wed Feb 05 2003 - 18:10:23 EST)
• Rob Shein
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 17:07:03 EST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 16:54:20 EST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 15:45:57 EST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Fri Feb 21 2003 - 14:32:40 EST)
  • RE: Protocol Anomaly Detection IDS - Honeypots (Thu Feb 20 2003 - 19:48:36 EST)
  • RE: slow scans? (Tue Feb 18 2003 - 12:02:16 EST)
  • RE: WLAN IDS (Wed Feb 12 2003 - 11:10:39 EST)
  • RE: Active response... some thoughts. (Tue Feb 11 2003 - 12:06:23 EST)
  • RE: Active response... some thoughts. (Fri Feb 07 2003 - 15:48:44 EST)
• Robert Graham
  • Re: Protocol Anomaly Detection IDS (Wed Feb 19 2003 - 18:25:41 EST)
• robert.d.turner(at)bt.com
  • Network Tap Technology (was: RE: Gig TAPs) (Wed Feb 05 2003 - 17:17:40 EST)
• Rodrigo Buarque Ramos
  • Triangulating packets (Wed Feb 12 2003 - 08:51:41 EST)
• Ron Gula
  • Re: slow scans? (Wed Feb 12 2003 - 14:30:15 EST)
• Sangram
  • sniffer detection on switched based networks (Wed Feb 05 2003 - 00:01:35 EST)
• SCC
  • Re: Traffic logs to help with IDS testing and development (Tue Feb 11 2003 - 18:51:44 EST)
• Scott Wimer
  • Re: Active response... some thoughts. (Mon Feb 03 2003 - 12:16:45 EST)
  • Re: Costs of a compromise related to the detection time (Mon Feb 03 2003 - 12:08:35 EST)
• SecurityFocus
  • Re: Active response... some thoughts. (Fri Feb 07 2003 - 16:30:53 EST)
• Sharath Malladi
  • models of internet attacks. (Thu Feb 20 2003 - 13:30:17 EST)
• Sonit Jain
  • RE: Protocol Anomaly Detection IDS (Wed Feb 12 2003 - 05:10:36 EST)
• Steven Richards
  • RE: Active response... some thoughts. (Tue Feb 11 2003 - 23:30:33 EST)
• Talisker
  • Re: Gig TAPs (Mon Feb 03 2003 - 14:41:26 EST)
• Terence Runge
  • RE: Did IDSes detect the SQL worm? (Mon Feb 03 2003 - 11:25:04 EST)
• Terry Ziemniak
  • Web server response to attacks (Thu Feb 20 2003 - 13:48:53 EST)
• Thomas H. Ptacek
  • Re: Active response... some thoughts. (Tue Feb 04 2003 - 12:57:42 EST)
• Tod Beardsley
  • Re: slow scans? (Sun Feb 16 2003 - 13:33:23 EST)
• Will Schmied
  • WLAN IDS (Sat Feb 08 2003 - 21:29:03 EST)
• Yaakov Yehudi
  • Re: Protocol Anomaly Detection IDS (Tue Feb 11 2003 - 03:12:59 EST)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:18 EDT