Mailing List Archive For snort-sigs@snort.org Feb 2003 By Thread

• [Snort-sigs] port list JimF (Fri Feb 28 2003 - 14:59:53 EST)
• RE: [Snort-sigs] Sid 1042 - too many FPs Scheidell(at)secnap.com (Fri Feb 28 2003 - 13:37:32 EST)
• Re: [Snort-sigs] port list Brian (Fri Feb 28 2003 - 17:44:07 EST)
• [Snort-sigs] port list JimF (Fri Feb 28 2003 - 16:52:53 EST)
• [Snort-sigs] sid: 1113 - FPs Paul Schmehl (Fri Feb 28 2003 - 15:52:11 EST)
• [Snort-sigs] Cywin SSH and EXPLOIT ssh CRC32 overflow filler Grounds, Adam (Fri Feb 28 2003 - 12:37:23 EST)
• [Snort-sigs] Sid 1149 - too many FPs Schmehl, Paul L (Thu Feb 27 2003 - 23:10:49 EST)
• Re: [Snort-sigs] new Q signature Jon (Thu Feb 27 2003 - 23:08:01 EST)
• [Snort-sigs] Sid 1634 - more FPs Schmehl, Paul L (Thu Feb 27 2003 - 22:28:37 EST)
• [Snort-sigs] Sid 1042 - too many FPs Schmehl, Paul L (Thu Feb 27 2003 - 22:18:15 EST)
• Re: [Snort-sigs] Payload daniel.clemens (Wed Feb 26 2003 - 06:07:39 EST)
• Re: [Snort-sigs] Sid:1845 IMAP list overflow attempt Brian (Thu Feb 27 2003 - 07:49:12 EST)
• Re: [Snort-sigs] Sid:1845 IMAP list overflow attempt Michael Scheidell (Thu Feb 27 2003 - 07:45:20 EST)
• [Snort-sigs] snort-rules CURRENT update @ Thu Feb 27 06:25:07 2003 bmc(at)snort.org (Thu Feb 27 2003 - 06:09:52 EST)
• RE: [Snort-sigs] Payload Andrew Hintz \(Drew\) (Thu Feb 27 2003 - 01:00:28 EST)
• RE: [Snort-sigs] Sid:1845 IMAP list overflow attempt Schmehl, Paul L (Wed Feb 26 2003 - 21:55:42 EST)
• RE: [Snort-sigs] Sid:1845 IMAP list overflow attempt Kenneth G. Arnold (Wed Feb 26 2003 - 21:24:59 EST)
• RE: [Snort-sigs] Sid:1845 IMAP list overflow attempt Russell Fulton (Wed Feb 26 2003 - 20:34:19 EST)
• [Snort-sigs] Sid:1845 IMAP list overflow attempt Schmehl, Paul L (Wed Feb 26 2003 - 17:52:27 EST)
• [Snort-sigs] Hello, and updating rules FWAdmin (Wed Feb 26 2003 - 13:48:19 EST)
• [Snort-sigs] request a virus.rules file terry xian (Wed Feb 26 2003 - 01:59:20 EST)
• [Snort-sigs] Payload Michael.Advani(at)Asia.ING.com (Tue Feb 25 2003 - 21:41:19 EST)
• [Snort-sigs] Bug Bear Snort Sig...Not Confirmed Snortmail (Tue Feb 25 2003 - 20:29:09 EST)
• [Snort-sigs] bugbear sig Chris Rowe (Tue Feb 25 2003 - 08:21:55 EST)
• [Snort-sigs] Re: Snort Virus Rules Sam Evans (Mon Feb 24 2003 - 11:33:31 EST)
• [Snort-sigs] Re: Snort Virus Rules Sam Evans (Mon Feb 24 2003 - 11:34:20 EST)
• Re: [Snort-sigs] Snort Virus Rules Matt Kettler (Mon Feb 24 2003 - 10:52:42 EST)
• [Snort-sigs] Re: Snort Virus Rules Sam Evans (Mon Feb 24 2003 - 10:26:35 EST)
• [Snort-sigs] Snort Virus Rules Bill Westerhuis (Sat Feb 22 2003 - 12:19:49 EST)
• [Snort-sigs] Re: [Packet-ninjas-syn-k1ck] Re: [Infragard-discussion] Port 17300 traffic daniel.clemens (Fri Feb 21 2003 - 07:01:50 EST)
• RE: [Snort-sigs] RE: [Snort-users] More sid 1841 Erek Adams (Sat Feb 22 2003 - 17:01:49 EST)
• Re: [Snort-sigs] RE: [Snort-users] More sid 1841 Jon (Sat Feb 22 2003 - 16:08:38 EST)
• RE: [Snort-sigs] RE: [Snort-users] More sid 1841 Schmehl, Paul L (Sat Feb 22 2003 - 15:46:05 EST)
• Re: [Snort-sigs] RE: [Snort-users] More sid 1841 Matt Kettler (Sat Feb 22 2003 - 15:35:43 EST)
• [Snort-sigs] RE: [Snort-users] More sid 1841 Schmehl, Paul L (Sat Feb 22 2003 - 12:00:34 EST)
• Re: [Snort-sigs] Portscan reporting Detmar Liesen (Sat Feb 22 2003 - 07:10:17 EST)
• [Snort-sigs] Pass rule problem Ian Macdonald (Thu Feb 20 2003 - 14:06:51 EST)
• Re: [Snort-sigs] Snort 1.9 "within:" option broken? (fwd) Carl Gibbons (Thu Feb 20 2003 - 22:43:05 EST)
• [Snort-sigs] SID 1333 Anton Chuvakin (Tue Feb 18 2003 - 22:58:59 EST)
• [Snort-sigs] SID 1334 Anton Chuvakin (Tue Feb 18 2003 - 22:59:16 EST)
• [Snort-sigs] SID 1331 Anton Chuvakin (Tue Feb 18 2003 - 22:58:23 EST)
• [Snort-sigs] SID 1330 Anton Chuvakin (Tue Feb 18 2003 - 22:58:10 EST)
• [Snort-sigs] SID 1332 Anton Chuvakin (Tue Feb 18 2003 - 22:58:43 EST)
• [Snort-sigs] SID 1329 Anton Chuvakin (Tue Feb 18 2003 - 22:57:56 EST)
• [Snort-sigs] SID 1328 Anton Chuvakin (Tue Feb 18 2003 - 22:57:36 EST)
• Re: [Snort-sigs] Scan on tcp 13000 Michael Scheidell (Mon Feb 17 2003 - 21:53:59 EST)
• [Snort-sigs] Scan on tcp 13000 Bob Dehnhardt (Mon Feb 17 2003 - 18:31:52 EST)
• RE: [Snort-sigs] Portscan reporting Bamm Visscher (Mon Feb 17 2003 - 13:00:42 EST)
• RE: [Snort-sigs] Portscan reporting Antony J. Shepherd (Mon Feb 17 2003 - 11:03:23 EST)
• RE: [Snort-sigs] Portscan reporting Robert Wagner (Mon Feb 17 2003 - 10:44:36 EST)
• RE: [Snort-sigs] Portscan reporting Antony J. Shepherd (Mon Feb 17 2003 - 09:55:48 EST)
• RE: [Snort-sigs] Portscan reporting Robert Wagner (Mon Feb 17 2003 - 09:18:55 EST)
• [Snort-sigs] Portscan reporting Antony J. Shepherd (Mon Feb 17 2003 - 04:29:58 EST)
• [Snort-sigs] Re: include help Erek Adams (Sat Feb 15 2003 - 10:51:42 EST)
• RE: [Snort-sigs] snort-rules STABLE update @ Fri Feb 7 17:33:38 2003 Belthrop, Tony (Fri Feb 14 2003 - 09:20:50 EST)
• [Snort-sigs] RE: [Snort-users] Stopping outbound Kazaa Bob McDowell (Fri Feb 14 2003 - 10:46:03 EST)
• Re: [Snort-sigs] Snort 1.9 "within:" option broken? (fwd) Chris Green (Fri Feb 14 2003 - 15:01:59 EST)
• [Snort-sigs] Snort 1.9 "within:" option broken? (fwd) Carl Gibbons (Fri Feb 14 2003 - 10:52:29 EST)
• Re: [Snort-sigs] Problem with pop3.rules and ftp.rules Jens Krabbenhoeft (Fri Feb 14 2003 - 09:24:13 EST)
• [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa twig les (Thu Feb 13 2003 - 21:33:48 EST)
• [Snort-sigs] Simple TTL of 1 rules will not alert Herman Munster (Thu Feb 13 2003 - 23:41:43 EST)
• RE: [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa [snort-users-admin@lists.sourceforge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List] daniel.clemens (Thu Feb 13 2003 - 20:39:49 EST)
• [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa Gustavo Beltrami Rossi (Thu Feb 13 2003 - 22:07:33 EST)
• [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa Erek Adams (Thu Feb 13 2003 - 20:47:52 EST)
• RE: [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa [snort-users-admin@lists.sourceforge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List] Steve Wray (Thu Feb 13 2003 - 19:34:58 EST)
• [Snort-sigs] Re: [Snort-users] Stopping outbound Kazaa Travis S. (Thu Feb 13 2003 - 18:54:44 EST)
• Re: [Snort-sigs] Sig to catch rogue SSH servers James Hoagland (Wed Feb 12 2003 - 12:34:24 EST)
• Re: [Snort-sigs] Sig to locate rogue ftp servers Brian (Thu Feb 13 2003 - 07:53:45 EST)
• Re: [Snort-sigs] Sig to locate rogue ftp servers Jukka Juslin (Thu Feb 13 2003 - 02:26:52 EST)
• [Snort-sigs] SID 329 Anton Chuvakin (Wed Feb 12 2003 - 23:25:01 EST)
• [Snort-sigs] SID 332 Anton Chuvakin (Wed Feb 12 2003 - 23:25:22 EST)
• [Snort-sigs] SID 330 Anton Chuvakin (Wed Feb 12 2003 - 23:25:15 EST)
• Re: [Snort-sigs] SID 1882 Jon (Wed Feb 12 2003 - 23:27:34 EST)
• [Snort-sigs] SID 331 Anton Chuvakin (Wed Feb 12 2003 - 23:25:19 EST)
• [Snort-sigs] SID 1885 Anton Chuvakin (Wed Feb 12 2003 - 23:06:22 EST)
• [Snort-sigs] SID 1883 Anton Chuvakin (Wed Feb 12 2003 - 23:05:51 EST)
• [Snort-sigs] SID 1886 Anton Chuvakin (Wed Feb 12 2003 - 23:06:42 EST)
• [Snort-sigs] SID 1882 Anton Chuvakin (Wed Feb 12 2003 - 23:05:37 EST)
• [Snort-sigs] SID 1884 Anton Chuvakin (Wed Feb 12 2003 - 23:06:05 EST)
• Re: [Snort-sigs] Sig to locate rogue ftp servers Brian (Wed Feb 12 2003 - 16:59:01 EST)
• Re: [Snort-sigs] BUG! Rule 1677 triggers a bug when logging to mysql Brian (Wed Feb 12 2003 - 16:56:45 EST)