Mailing List Archive For snort-sigs@snort.org May 2003 By Author

• Andrew Hintz \(Drew\)
  • RE: [Snort-sigs] Look for attached files? (Sun May 25 2003 - 21:28:43 EDT)
• Bill Leinauer
  • [Snort-sigs] VIRUS_RULES (Thu May 15 2003 - 10:26:16 EDT)
• Bill McCarty
  • Re: [Snort-sigs] Snort attack -- was disable /var/log/snort logging (Fri May 09 2003 - 03:23:23 EDT)
  • Re: [Snort-sigs] disable /var/log/snort logging (Fri May 09 2003 - 00:58:41 EDT)
• bmc(at)snort.org
  • [Snort-sigs] snort-rules CURRENT update @ Fri May 30 16:15:18 2003 (Fri May 30 2003 - 16:15:18 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Fri May 30 16:15:18 2003 (Fri May 30 2003 - 16:15:18 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Wed May 28 14:16:41 2003 (Wed May 28 2003 - 14:16:41 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Wed May 28 14:16:41 2003 (Wed May 28 2003 - 14:16:41 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Thu May 15 23:15:23 2003 (Thu May 15 2003 - 23:15:23 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Thu May 15 23:15:23 2003 (Thu May 15 2003 - 23:15:23 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Wed May 14 17:15:36 2003 (Wed May 14 2003 - 17:15:36 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Wed May 14 17:15:36 2003 (Wed May 14 2003 - 17:15:36 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Wed May 14 14:14:32 2003 (Wed May 14 2003 - 14:14:32 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Wed May 14 14:14:32 2003 (Wed May 14 2003 - 14:14:33 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Tue May 13 11:03:45 2003 (Tue May 13 2003 - 11:03:45 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Tue May 6 20:15:27 2003 (Tue May 06 2003 - 20:15:27 EDT)
• Brian
  • [Snort-sigs] Re: [Snort-users] byte_test:5,<,65537,0,relative,string; (Fri May 30 2003 - 15:43:02 EDT)
  • Re: [Snort-sigs] Nimda (Wed May 28 2003 - 11:56:11 EDT)
  • Re: [Snort-sigs] general sig question (Thu May 22 2003 - 08:00:28 EDT)
  • Re: [Snort-sigs] install.php?phpbb_root_dir=http:// sig? (Tue May 20 2003 - 11:45:25 EDT)
  • Re: [Snort-sigs] Re: Snort-sigs digest, Vol 1 #573 - 12 msgs (Tue May 13 2003 - 23:03:03 EDT)
  • [Snort-sigs] RE-Announcing sp_perl (Tue May 13 2003 - 09:48:56 EDT)
  • Re: [Snort-sigs] MESSNGR SPAM Sig (Wed May 07 2003 - 19:05:34 EDT)
  • Re: [Snort-sigs] MESSNGR SPAM Sig (Wed May 07 2003 - 16:56:26 EDT)
  • Re: [Snort-sigs] Not sure I understand "RPC AMD TCP pid request".. (Sun May 04 2003 - 13:00:51 EDT)
  • Re: [Snort-sigs] Netbios rules are case sensitive? (Sun May 04 2003 - 13:03:18 EDT)
  • Re: [Snort-sigs] Bad reference on SID: 598? (Sun May 04 2003 - 12:45:18 EDT)
• Burak DAYIOGLU
  • RE: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Wed May 21 2003 - 01:18:46 EDT)
• Chris Baker
  • Re: [Snort-sigs] hi (Wed May 21 2003 - 09:53:45 EDT)
• Chris Green
  • Re: [Snort-sigs] Announcing sp_perl (Mon May 12 2003 - 09:05:50 EDT)
• Colin.Slevin(at)transwareplc.com
  • [Snort-sigs] Snort & Acid (Tue May 20 2003 - 06:59:56 EDT)
  • [Snort-sigs] Issue (Fri May 16 2003 - 07:19:16 EDT)
• d_greenjr
  • [Snort-sigs] general sig question (Thu May 22 2003 - 02:03:17 EDT)
• Dale L. Handy
  • Re: [Snort-sigs] Not looking in Email (Wed May 21 2003 - 23:45:16 EDT)
  • Re: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? .....can you give me some pointers. (fwd) (Tue May 20 2003 - 17:44:52 EDT)
• Daniel Reich
  • [Snort-sigs] SID 1620, Non-Standard IP Protocol question (Thu May 15 2003 - 11:39:09 EDT)
• daniel.clemens
  • Re: [Snort-sigs] spp_stream4 Steath activity (Fri May 30 2003 - 09:40:59 EDT)
  • Re: [Snort-sigs] How detect relaying with qmail and snort ? (Thu May 29 2003 - 08:53:52 EDT)
  • RE: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? .....can you give me some pointers. (fwd) (Tue May 20 2003 - 06:25:05 EDT)
• David Wilburn
  • Re: [Snort-sigs] Ultimate Rule List (Mon May 19 2003 - 12:55:05 EDT)
• Dirk Mueller
  • Re: [Snort-sigs] snort_decoder T/TCP detected (Wed May 28 2003 - 14:44:14 EDT)
• Erek Adams
  • Re: [Snort-sigs] dropping traffic (Wed May 28 2003 - 11:57:59 EDT)
  • Re: [Snort-sigs] general sig question (Tue May 27 2003 - 19:12:21 EDT)
• Eric Appelboom
  • [Snort-sigs] install.php?phpbb_root_dir=http:// sig? (Tue May 20 2003 - 07:21:13 EDT)
  • [Snort-sigs] SQL Intection sig (Tue May 06 2003 - 07:38:49 EDT)
• Erik Alexander Løkken
  • [Snort-sigs] Signatures related to POP3 overflow attempt (Thu May 15 2003 - 18:45:17 EDT)
  • [Snort-sigs] SID 663 - Revision 6 - False Positives question (Thu May 15 2003 - 18:35:16 EDT)
• Esler, Joel Contractor
  • [Snort-sigs] dropping traffic (Wed May 28 2003 - 09:52:17 EDT)
  • RE: [Snort-sigs] Not looking in Email (Wed May 21 2003 - 23:23:09 EDT)
  • [Snort-sigs] Not looking in Email (Wed May 21 2003 - 22:16:36 EDT)
• Faiz Ahmad Shuja
  • [Snort-sigs] Detecting Connections (Thu May 29 2003 - 04:29:25 EDT)
• Gary Flynn
  • Re: [Snort-sigs] MESSNGR SPAM Sig (Wed May 07 2003 - 17:51:31 EDT)
• Greg Powell
  • [Snort-sigs] Ultimate Rule List (Mon May 19 2003 - 10:47:25 EDT)
• Horacio Falcon
  • Re: [Snort-sigs] Snort rule sorter or managment system (Wed May 07 2003 - 12:16:47 EDT)
• Hugo van der Kooij
  • Re: [Snort-sigs] Re: Snort-sigs digest, Vol 1 #573 - 12 msgs (Wed May 14 2003 - 02:32:27 EDT)
• Jason Haar
  • Re: [Snort-sigs] Netbios rules are case sensitive? (Thu May 08 2003 - 16:34:51 EDT)
• Jeff Nathan
  • [Snort-sigs] Announcing sp_perl (Sat May 10 2003 - 06:48:47 EDT)
• Jim Breton
  • [Snort-sigs] Re: Proposed change to icmp-info.rules (Sat May 31 2003 - 15:53:37 EDT)
  • [Snort-sigs] Proposed change to icmp-info.rules (Wed May 28 2003 - 14:01:39 EDT)
• Jingmin (Jimmy) Zhou
  • [Snort-sigs] filter session in both direction (Tue May 06 2003 - 19:25:33 EDT)
• Joe Hdez
  • [Snort-sigs] Question (Tue May 13 2003 - 17:34:45 EDT)
• Joe Kinsella
  • RE: [Snort-sigs] Nimda (Wed May 28 2003 - 08:52:58 EDT)
  • [Snort-sigs] Nimda (Tue May 27 2003 - 16:42:00 EDT)
• Joe Stewart
  • Re: [Snort-sigs] WebDav exploits - individual signatures (Tue May 13 2003 - 15:36:02 EDT)
  • [Snort-sigs] WebDav exploits - individual signatures (Tue May 13 2003 - 09:42:43 EDT)
• Joesph Bowling
  • Re: [Snort-sigs] Issue.fixing wincap (Fri May 16 2003 - 16:25:43 EDT)
  • RE: [Snort-sigs] snort 2.0 problems (Wed May 14 2003 - 20:30:19 EDT)
• John Hally
  • RE: [Snort-sigs] spp_stream4 Steath activity (Fri May 30 2003 - 17:19:09 EDT)
  • [Snort-sigs] spp_stream4 Steath activity (Fri May 30 2003 - 14:36:49 EDT)
• Jon Stearn
  • RE: [Snort-sigs] Netbios rules are case sensitive? (Thu May 01 2003 - 05:43:04 EDT)
• Jose Ramon Hernandez Macias
  • [Snort-sigs] Re: Snort-sigs digest, Vol 1 #573 - 12 msgs (Tue May 13 2003 - 17:08:53 EDT)
• JP Vossen
  • [Snort-sigs] Bad reference on SID: 598? (Sun May 04 2003 - 02:32:13 EDT)
• Kevin Binsfield
  • [Snort-sigs] Maintain virus.rules (Fri May 30 2003 - 10:42:42 EDT)
• Liuhy
  • [Snort-sigs] naming of rules file (Wed May 14 2003 - 01:40:29 EDT)
  • [Snort-sigs] test mail (Wed May 07 2003 - 03:58:52 EDT)
• Lorraine Cannavale
  • [Snort-sigs] ELKERN Signature? (Tue May 27 2003 - 13:55:54 EDT)
• m(at)xx
  • [Snort-sigs] ICMP rules: sid 499,473, 477, 487 (Thu May 08 2003 - 11:16:07 EDT)
• Magnus Larsson
  • [Snort-sigs] Look for attached files? (Sun May 25 2003 - 06:23:51 EDT)
  • RE: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Tue May 20 2003 - 13:56:58 EDT)
  • [Snort-sigs] Followup on my last virus question. (Tue May 20 2003 - 04:00:55 EDT)
  • [Snort-sigs] Sig for a old virus? (Tue May 20 2003 - 03:54:24 EDT)
  • [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Mon May 19 2003 - 13:03:16 EDT)
• Marco Agostani
  • [Snort-sigs] problem with double logging (Fri May 23 2003 - 06:46:07 EDT)
• Martin Olsson
  • [Snort-sigs] byte_test:5,<,65537,0,relative,string; (Fri May 30 2003 - 03:06:47 EDT)
• Marty.Bostick(at)protective.com
  • [Snort-sigs] Does anyone have a working set of rules for the Fizzer Worm (Wed May 14 2003 - 16:26:36 EDT)
• Matt Kettler
  • Re: [Snort-sigs] Nimda (Tue May 27 2003 - 18:00:25 EDT)
  • Re: [Snort-sigs] SMTP rcpt to sed command attempt (Tue May 27 2003 - 15:05:26 EDT)
  • Re: [Snort-sigs] DNS poisoning (Tue May 27 2003 - 14:40:44 EDT)
  • Re: [Snort-sigs] VIRUS_RULES (Mon May 19 2003 - 10:43:08 EDT)
  • Re: [Snort-sigs] Issue (Fri May 16 2003 - 14:40:36 EDT)
  • Re: [Snort-sigs] disable /var/log/snort logging (Wed May 07 2003 - 17:20:11 EDT)
• Mattia
  • [Snort-sigs] UNIXSOCK (Mon May 05 2003 - 11:16:18 EDT)
• McKinlay, Ken
  • [Snort-sigs] Possible false positive on SID 663 (Tue May 27 2003 - 09:35:44 EDT)
• Moyer, Shawn
  • RE: [Snort-sigs] Ultimate Rule List (Wed May 21 2003 - 00:03:13 EDT)
• Nate Haggard
  • [Snort-sigs] Re: Signatures related to POP3 overflow attempt (Wed May 28 2003 - 12:33:30 EDT)
• Nick White
  • RE: [Snort-sigs] disable /var/log/snort logging (Wed May 07 2003 - 19:54:39 EDT)
  • [Snort-sigs] disable /var/log/snort logging (Wed May 07 2003 - 14:25:45 EDT)
• Nigel Houghton
  • Re: [Snort-sigs] Nimda (Tue May 27 2003 - 20:10:21 EDT)
• NO JUNK MAIL
  • [Snort-sigs] SMTP ETRN overflow attempt (Tue May 06 2003 - 12:37:20 EDT)
• O'Flynn, Derek
  • RE: [Snort-sigs] MESSNGR SPAM Sig (Tue May 06 2003 - 17:09:59 EDT)
  • RE: [Snort-sigs] MESSNGR SPAM Sig (Tue May 06 2003 - 16:58:39 EDT)
• operator
  • Fw: [Snort-sigs] Signatures related to POP3 overflow attempt (Fri May 16 2003 - 09:22:28 EDT)
  • Re: [Snort-sigs] Signatures related to POP3 overflow attempt (Fri May 16 2003 - 09:15:17 EDT)
  • [Snort-sigs] RE: [Snort-users] Fizzer Virus Signature (Wed May 14 2003 - 13:01:01 EDT)
• Phil Lyons
  • Re: [Snort-sigs] MESSNGR SPAM Sig (Thu May 08 2003 - 11:03:54 EDT)
  • RE: [Snort-sigs] MESSNGR SPAM Sig (Tue May 06 2003 - 18:12:00 EDT)
  • [Snort-sigs] MESSNGR SPAM Sig (Tue May 06 2003 - 16:32:11 EDT)
• pix
  • [Snort-sigs] hi (Wed May 21 2003 - 05:44:40 EDT)
• r2d2r4(at)crusoecids.dyndns.org
  • [Snort-sigs] How detect relaying with qmail and snort ? (Wed May 28 2003 - 12:49:03 EDT)
• Randall S Jew
  • [Snort-sigs] snort 2.0 problems (Mon May 12 2003 - 11:16:45 EDT)
• Robert Reid
  • RE: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Tue May 20 2003 - 11:04:45 EDT)
• security people
  • Re: [Snort-sigs] Not looking in Email (Thu May 22 2003 - 07:54:43 EDT)
  • Re: [Snort-sigs] Not looking in Email (Wed May 21 2003 - 23:30:59 EDT)
• Shane Williams
  • RE: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Wed May 21 2003 - 09:36:07 EDT)
  • Re: [Snort-sigs] Virus sig for worm_palyh.a and pe_ganda.a? (Mon May 19 2003 - 17:26:50 EDT)
• Smith, Jim
  • RE: [Snort-sigs] snort 2.0 problems (Tue May 13 2003 - 09:44:34 EDT)
• SoloNet Newsfeed Processor
  • [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES id check returned userid " (Wed May 28 2003 - 10:56:01 EDT)
• Terence Runge
  • [Snort-sigs] 1631 CHAT AIM login false positive (Fri May 02 2003 - 17:57:05 EDT)
• Tim Bates
  • [Snort-sigs] Snort rule sorter or managment system (Wed May 07 2003 - 10:33:18 EDT)
• Tinsley Paul
  • RE: [Snort-sigs] Does anyone have a working set of rules for the Fizzer Worm (Wed May 14 2003 - 18:37:25 EDT)
• Tom Arseneault
  • Re: [Snort-sigs] general sig question (Tue May 27 2003 - 18:45:35 EDT)
  • [Snort-sigs] Not sure I understand "RPC AMD TCP pid request".. (Fri May 02 2003 - 18:55:54 EDT)
• Tony Lill
  • [Snort-sigs] SMTP rcpt to sed command attempt (Sat May 24 2003 - 23:24:15 EDT)
• Vincent Vono
  • [Snort-sigs] snort_decoder T/TCP detected (Wed May 28 2003 - 14:15:46 EDT)
  • [Snort-sigs] DNS poisoning (Tue May 27 2003 - 12:00:52 EDT)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT