Mailing List Archive For snort-sigs@snort.org Jun 2003 By Author

• adam.w.hogan
  • RE: [Snort-sigs] A question about Snort (Thu Jun 12 2003 - 13:55:42 EDT)
• Andreas Östling
  • Re: [Snort-sigs] WinXP remote desktop rules--newbie help (Fri Jun 27 2003 - 03:52:01 EDT)
  • RE: [Snort-sigs] Duplicate sids in deleted.rules (Tue Jun 17 2003 - 15:08:38 EDT)
• Andy Wood
  • [Snort-sigs] SMB Login Failure (Thu Jun 05 2003 - 13:24:02 EDT)
  • [Snort-sigs] SMB login Failure (Thu Jun 05 2003 - 20:21:28 EDT)
• Anthony Kim
  • Re: [Snort-sigs] A question about Snort (Thu Jun 12 2003 - 15:50:15 EDT)
  • Re: [Snort-users] Re: [Snort-sigs] Oinkmaster questions (Mon Jun 09 2003 - 18:24:44 EDT)
• Ashley Thomas
  • [Snort-sigs] question regarding web-iis rule NOT triggering.. (Tue Jun 10 2003 - 14:57:11 EDT)
• Bill McCarty
  • Re: [Snort-sigs] Window size (Thu Jun 12 2003 - 12:25:27 EDT)
  • [Snort-sigs] Window size (Wed Jun 11 2003 - 16:49:45 EDT)
• blacharz(at)femur.pl
  • [Snort-sigs] doc of rules (Sat Jun 07 2003 - 06:56:17 EDT)
• Blake
  • RE: [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 01:15:45 EDT)
• bmc(at)snort.org
  • [Snort-sigs] snort-rules CURRENT update @ Sun Jun 15 01:16:51 2003 (Sun Jun 15 2003 - 01:16:51 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Sun Jun 15 01:16:51 2003 (Sun Jun 15 2003 - 01:16:51 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Sat Jun 14 00:17:06 2003 (Sat Jun 14 2003 - 00:17:06 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Sat Jun 14 00:17:06 2003 (Sat Jun 14 2003 - 00:17:06 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Fri Jun 13 14:26:56 2003 (Fri Jun 13 2003 - 14:26:56 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Fri Jun 13 14:26:56 2003 (Fri Jun 13 2003 - 14:26:56 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Mon Jun 9 09:28:21 2003 (Mon Jun 09 2003 - 09:28:21 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Mon Jun 9 09:28:21 2003 (Mon Jun 09 2003 - 09:28:22 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Sun Jun 8 03:34:04 2003 (Sun Jun 08 2003 - 03:34:05 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Sun Jun 8 03:34:04 2003 (Sun Jun 08 2003 - 03:34:04 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Thu Jun 5 11:15:37 2003 (Thu Jun 05 2003 - 11:15:37 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Thu Jun 5 11:15:37 2003 (Thu Jun 05 2003 - 11:15:37 EDT)
  • [Snort-sigs] snort-rules CURRENT update @ Sun Jun 1 21:15:27 2003 (Sun Jun 01 2003 - 21:15:27 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Sun Jun 1 21:15:27 2003 (Sun Jun 01 2003 - 21:15:27 EDT)
• Brian
  • Re: [Snort-sigs] nocase (Fri Jun 27 2003 - 18:53:51 EDT)
  • Re: [Snort-sigs] Problems with SID 2161 (Mon Jun 23 2003 - 17:21:42 EDT)
  • Re: [Snort-sigs] logical operators and snort rules (Mon Jun 23 2003 - 15:24:14 EDT)
  • Re: [Snort-sigs] Question about rule semantic (Mon Jun 23 2003 - 11:04:57 EDT)
  • Re: [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 13:26:23 EDT)
  • Re: [Snort-sigs] Bit Torrent signature (Tue Jun 17 2003 - 09:55:07 EDT)
  • Re: [Snort-sigs] Window size (Thu Jun 12 2003 - 10:23:11 EDT)
  • Re: [Snort-sigs] Signature Definition #460, 5 of 20 and Signature Definition # 458 (Tue Jun 10 2003 - 13:55:42 EDT)
  • Re: [Snort-sigs] Correction to signature 1227 (Mon Jun 09 2003 - 19:47:16 EDT)
  • Re: [Snort-sigs] false +ves for IMAP login overflow (SID 1993) (Mon Jun 09 2003 - 09:37:40 EDT)
  • Re: [Snort-sigs] Sig 1313 documentation and questions (Sat Jun 07 2003 - 21:26:30 EDT)
  • Re: [Snort-sigs] SID 1042 false positives: WEB-IIS view source via translate header" (Sat Jun 07 2003 - 19:43:47 EDT)
  • Re: [Snort-sigs] SMB Login Failure (Fri Jun 06 2003 - 09:55:06 EDT)
  • Re: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES id check returned userid " (Wed Jun 04 2003 - 22:00:30 EDT)
  • Re: [Snort-sigs] Proposed change to icmp-info.rules (Sun Jun 01 2003 - 20:52:11 EDT)
  • Re: [Snort-sigs] write rule documentation, get a t-shirt (Sun Jun 01 2003 - 19:58:17 EDT)
  • [Snort-sigs] write rule documentation, get a t-shirt (Sun Jun 01 2003 - 19:07:20 EDT)
• C L Dokic
  • [Snort-sigs] new user group (Fri Jun 20 2003 - 11:07:13 EDT)
• Carmit Partoush
  • [Snort-sigs] remove me from your list (Tue Jun 24 2003 - 10:27:34 EDT)
• Chaos
  • [Snort-sigs] sigs documentation (Thu Jun 12 2003 - 15:05:08 EDT)
• Chris Green
  • Re: [Snort-sigs] Depth and multi content rule help. (Wed Jun 18 2003 - 10:17:08 EDT)
  • Re: [Snort-sigs] Bit Torrent signature (Tue Jun 17 2003 - 09:15:08 EDT)
• Ciprian Badescu
  • RE: [Snort-sigs] sigs for MSM via proxies (Fri Jun 20 2003 - 10:11:03 EDT)
• Coyle, Brian
  • [Snort-sigs] RE: anyone have more detail other than window size of 55808 to craft a snort rule for this (Thu Jun 12 2003 - 16:28:52 EDT)
  • [Snort-sigs] RE: anyone have more detail other than window size of 55808 to craft a snort rule for this (Thu Jun 12 2003 - 13:12:20 EDT)
• Craig Baltes
  • Re: [Snort-sigs] anyone have more detail other than window size of 55808 to craft a snort rule for this (Wed Jun 11 2003 - 17:08:07 EDT)
• Dale L. Handy
  • [Snort-sigs] Signaure Hiccup (Thu Jun 26 2003 - 15:58:34 EDT)
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Thu Jun 05 2003 - 17:10:37 EDT)
• daniel.clemens
  • Re: [Snort-sigs] Submit new detection engine? (Thu Jun 19 2003 - 07:26:51 EDT)
  • Re: [Snort-sigs] SID 716 (Mon Jun 09 2003 - 12:37:59 EDT)
  • Re: RES: [Snort-sigs] W32.Bugbear.B@mm Signature (Fri Jun 06 2003 - 23:27:09 EDT)
• dank(at)suburbanjihad.net
  • [Snort-sigs] Rule #501 (lssre) (Mon Jun 09 2003 - 14:34:18 EDT)
  • [Snort-sigs] Documentation (rule #500) (Mon Jun 09 2003 - 14:21:44 EDT)
  • [Snort-sigs] Documentation (#502) (Mon Jun 09 2003 - 14:22:56 EDT)
  • [Snort-sigs] snort rule documentation (#492) (Mon Jun 09 2003 - 09:14:47 EDT)
  • [Snort-sigs] documentation for rule 492 (Sun Jun 08 2003 - 19:56:40 EDT)
  • [Snort-sigs] snort rule documentation (#522) (Mon Jun 09 2003 - 09:15:15 EDT)
  • [Snort-sigs] documentation (sid 522) (Sun Jun 08 2003 - 20:14:02 EDT)
• darrell hyde
  • [Snort-sigs] Successful anonymous ftp login rules... (Wed Jun 18 2003 - 07:57:05 EDT)
• david(at)grayskies.net
  • re: [Snort-sigs] Using snort to stop SMTP dictionary attacks (Fri Jun 06 2003 - 08:32:49 EDT)
• Dirk Mueller
  • Re: [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 13:16:33 EDT)
• Doug Cress
  • Re: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 15:47:09 EDT)
• Erek Adams
  • RE: [Snort-sigs] A question about Snort (Fri Jun 13 2003 - 08:57:18 EDT)
  • Re: [Snort-sigs] A question about Snort (Fri Jun 13 2003 - 06:14:43 EDT)
  • RE: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES i d check returned userid " (Fri Jun 06 2003 - 00:29:06 EDT)
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Fri Jun 06 2003 - 00:36:38 EDT)
• Esler, Joel Contractor
  • RE: [Snort-sigs] Sobig.E variant (Thu Jun 26 2003 - 14:43:19 EDT)
  • [Snort-sigs] Sobig.E variant (Thu Jun 26 2003 - 13:51:02 EDT)
  • RE: [Snort-sigs] Rule Documentation - Rules of engagement (Tue Jun 24 2003 - 11:49:50 EDT)
  • RE: [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 13:43:11 EDT)
  • RE: [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 13:22:45 EDT)
  • [Snort-sigs] Traceroute test (Tue Jun 17 2003 - 12:28:40 EDT)
  • [Snort-sigs] W32/MoFei.worm (Mon Jun 16 2003 - 10:00:25 EDT)
  • RE: [Snort-sigs] A question about Snort (Fri Jun 13 2003 - 07:00:33 EDT)
  • RE: [Snort-sigs] Signature Definition #462, 6 of 20 (Tue Jun 10 2003 - 06:06:48 EDT)
  • RE: [Snort-sigs] Signature Definition #460, 5 of 20 and Signature Definition # 458 (Tue Jun 10 2003 - 06:05:55 EDT)
  • [Snort-sigs] Signature Definition #1945 , 20 of 20 (Mon Jun 09 2003 - 13:54:54 EDT)
  • [Snort-sigs] Signature Definition #1760 , 19 of 20 (Mon Jun 09 2003 - 13:35:36 EDT)
  • [Snort-sigs] RE: Signature Definition #1432 , 18 of 20 (Mon Jun 09 2003 - 13:30:27 EDT)
  • [Snort-sigs] Signature Definition #1227 , 16 of 20 (Mon Jun 09 2003 - 13:25:54 EDT)
  • [Snort-sigs] RE: Signature Definition #1227 , 17 of 20 (Mon Jun 09 2003 - 13:26:58 EDT)
  • [Snort-sigs] Signature Definition #1201, 16 of 20 (Mon Jun 09 2003 - 13:18:22 EDT)
  • [Snort-sigs] Signature Definition #1023, 15 of 20 (Mon Jun 09 2003 - 12:08:20 EDT)
  • [Snort-sigs] Signature Definition #718, 14 of 20 (Mon Jun 09 2003 - 10:45:19 EDT)
  • [Snort-sigs] Signature Definition #719, 13 of 20 (Mon Jun 09 2003 - 09:52:15 EDT)
  • [Snort-sigs] Signature Definition #717, 12 of 20 (Mon Jun 09 2003 - 09:45:12 EDT)
  • [Snort-sigs] Rule Proposal "Kazaa Supernode Event" (Mon Jun 09 2003 - 09:09:16 EDT)
  • [Snort-sigs] Signature Definition #553, 11 of 20 (Mon Jun 09 2003 - 09:00:30 EDT)
  • [Snort-sigs] Signature Definition #549, 10 of 20 (Mon Jun 09 2003 - 08:53:16 EDT)
  • [Snort-sigs] Signature Definition #556, 9 of 20 (Mon Jun 09 2003 - 08:41:28 EDT)
  • [Snort-sigs] Signature Definition #507, 8 of 20 (Mon Jun 09 2003 - 08:22:28 EDT)
  • [Snort-sigs] Signature Definition #489, 7 of 20 (Mon Jun 09 2003 - 08:14:55 EDT)
  • [Snort-sigs] Signature Definition #359, 3 of 20 (Mon Jun 09 2003 - 07:59:13 EDT)
  • [Snort-sigs] Signature Definition #458, 4 of 20 (Mon Jun 09 2003 - 08:04:56 EDT)
  • [Snort-sigs] Signature Definition #462, 6 of 20 (Mon Jun 09 2003 - 08:07:21 EDT)
  • [Snort-sigs] Signature Definition #460, 5 of 20 (Mon Jun 09 2003 - 08:06:25 EDT)
  • [Snort-sigs] Signature Definition #358, 2 of 20 (Mon Jun 09 2003 - 07:57:00 EDT)
  • [Snort-sigs] Signature Definition #354, 1 of 20 (Mon Jun 09 2003 - 07:52:21 EDT)
  • RE: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Thu Jun 05 2003 - 07:40:36 EDT)
  • RE: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES i d check returned userid " (Wed Jun 04 2003 - 11:40:28 EDT)
• Fang Neco
  • [Snort-sigs] help about snort_inline (Mon Jun 23 2003 - 14:57:37 EDT)
• Fenstermaker, William
  • [Snort-sigs] Wrm.exe, Backdoor.Wollf.16 (AVP) (Tue Jun 24 2003 - 11:54:55 EDT)
• Gauldin Sean
  • [Snort-sigs] Questions and Sig 1313 documentation (Sat Jun 07 2003 - 00:03:08 EDT)
  • [Snort-sigs] Sig 1313 documentation and questions (Sat Jun 07 2003 - 20:46:15 EDT)
• Giles Coochey
  • Re: [Snort-sigs] SID 1828 change needed (Sun Jun 08 2003 - 08:37:35 EDT)
  • Re: [Snort-sigs] write rule documentation, get a t-shirt (Sun Jun 01 2003 - 19:48:17 EDT)
• Gustavo Beltrami Rossi
  • Re: [Snort-sigs] Edonkey - port 4662 (Thu Jun 26 2003 - 12:19:50 EDT)
  • Re: [Snort-sigs] Edonkey - port 4662 (Thu Jun 26 2003 - 11:07:32 EDT)
• Harper, John T.
  • RE: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 13:20:19 EDT)
• Harris, Michael C.
  • [Snort-sigs] anyone have more detail other than window size of 55808 to craft a snort rule for this (Wed Jun 11 2003 - 16:01:59 EDT)
• Horta, Benny
  • [Snort-sigs] RE: [Snort-users] SMB login Failure (Mon Jun 09 2003 - 11:05:11 EDT)
• Hugo van der Kooij
  • RE: [Snort-sigs] Duplicate sids in deleted.rules (Tue Jun 17 2003 - 13:20:03 EDT)
  • RE: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 13:50:48 EDT)
• james
  • Re: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 13:49:12 EDT)
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Wed Jun 04 2003 - 19:54:41 EDT)
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks (Wed Jun 04 2003 - 19:11:25 EDT)
• James C. Slora Jr.
  • [Snort-sigs] Re: anyone have more detail other than window size of 55808 to craft a snort rule for this (Wed Jun 11 2003 - 16:54:22 EDT)
  • [Snort-sigs] Re: anyone have more detail other than window size of 55808 to craft a snort rule for this (Wed Jun 11 2003 - 17:10:07 EDT)
• Jason Falciola
  • Re: [Snort-sigs] anyone have more detail other than window size of 55808 to craft a snort rule for this (Wed Jun 11 2003 - 19:27:13 EDT)
• Jason Haar
  • [Snort-sigs] sigs for MSM via proxies (Thu Jun 19 2003 - 18:43:44 EDT)
• Jeff Nathan
  • [Snort-sigs] Nemesis 1.4 beta3 released (Mon Jun 30 2003 - 14:25:55 EDT)
  • Re: [Snort-sigs] IANA reserved IP address rules? (Wed Jun 11 2003 - 22:54:47 EDT)
  • RE: [Snort-sigs] Signature Definition #460, 5 of 20 and Signature Definition # 458 (Tue Jun 10 2003 - 14:45:56 EDT)
• Joe Matusiewicz
  • Re: [Snort-sigs] Edonkey - port 4662 (Thu Jun 26 2003 - 11:53:27 EDT)
• Joe Stewart
  • Re: [Snort-sigs] Sobig.E variant (Thu Jun 26 2003 - 16:45:57 EDT)
• Joel Maslak
  • Re: [Snort-sigs] Web service rules (Thu Jun 05 2003 - 12:49:59 EDT)
  • [Snort-sigs] Web service rules (Sun Jun 01 2003 - 22:38:59 EDT)
• John York
  • RE: [Snort-sigs] WinXP remote desktop rules--newbie help (Fri Jun 27 2003 - 10:40:03 EDT)
  • [Snort-sigs] WinXP remote desktop rules--newbie help (Thu Jun 26 2003 - 17:05:23 EDT)
• Josh.Sakofsky(at)donovandata.com
  • [Snort-sigs] false positives for MISC BGP invalid length (Thu Jun 19 2003 - 14:29:25 EDT)
  • [Snort-sigs] rule documentation for WEB-MISC Oracle XSQLConfig.xml access (Wed Jun 11 2003 - 17:20:32 EDT)
  • [Snort-sigs] rule documentation for FTP SITE NEWER attempt (Wed Jun 11 2003 - 16:44:16 EDT)
  • [Snort-sigs] rule documentation for WEB-CGI mrtg.cgi directory traversal attempt (Wed Jun 11 2003 - 15:38:05 EDT)
  • [Snort-sigs] rule documentation for WEB-CGI Oracle reports CGI access (Wed Jun 11 2003 - 14:48:07 EDT)
  • [Snort-sigs] rule documentation for ATTACK-RESPONSES successful gobbles ssh exploit (uname) (Wed Jun 11 2003 - 14:15:54 EDT)
  • [Snort-sigs] rule documentation for (Wed Jun 11 2003 - 13:58:17 EDT)
  • [Snort-sigs] rule documentation for WEB-MISC apache ?M=D directory list attempt (Wed Jun 11 2003 - 11:18:14 EDT)
  • [Snort-sigs] rule documentation for WEB-MISC carbo.dll access (Tue Jun 10 2003 - 16:51:18 EDT)
  • [Snort-sigs] rule documentation for TELNET SGI telnetd format bug (Tue Jun 10 2003 - 16:40:15 EDT)
  • [Snort-sigs] rule documentation for NETBIOS SMB C$ access (Mon Jun 09 2003 - 11:45:23 EDT)
  • [Snort-sigs] rule documentation for MISC Invalid PCAnywhere Login (Mon Jun 09 2003 - 11:25:18 EDT)
  • [Snort-sigs] rule documentation for WEB-CLIENT Javascript URL host spoofing attempt (Fri Jun 06 2003 - 16:35:34 EDT)
  • [Snort-sigs] rule documentation for WEB-MISC CISCO VoIP DOS ATTEMPT (Fri Jun 06 2003 - 15:07:18 EDT)
  • [Snort-sigs] rule documentation for FTP ADMw0rm ftp login attempt (Fri Jun 06 2003 - 15:04:58 EDT)
  • [Snort-sigs] rule documentation for FTP SATAN scan (Fri Jun 06 2003 - 15:05:49 EDT)
  • [Snort-sigs] rule documentation for DNS named iquery attempt (Fri Jun 06 2003 - 15:04:36 EDT)
  • [Snort-sigs] rule documentation for PORN free XXX (Fri Jun 06 2003 - 15:06:27 EDT)
  • [Snort-sigs] rule documentation for WEB-CGI php.cgi access (Fri Jun 06 2003 - 15:06:43 EDT)
  • [Snort-sigs] rule documentation for MISC xfs overflow attempt (Fri Jun 06 2003 - 15:07:00 EDT)
  • [Snort-sigs] rule documentation for FTP saint scan (Fri Jun 06 2003 - 15:05:31 EDT)
  • [Snort-sigs] rule documentation for MISC xdmcp query (Fri Jun 06 2003 - 15:06:04 EDT)
  • [Snort-sigs] rule documentation for FTP iss scan (Fri Jun 06 2003 - 15:05:15 EDT)
• Joshua Wright
  • RE: [Snort-sigs] IANA reserved IP address rules? (Thu Jun 12 2003 - 07:41:50 EDT)
• Jukka Juslin
  • [Snort-sigs] Bit Torrent signature (Tue Jun 17 2003 - 01:48:05 EDT)
  • [Snort-sigs] WinMX connections and packet capture (Thu Jun 05 2003 - 09:35:18 EDT)
• karim hassib
  • [Snort-sigs] categorizing snort signatures (Thu Jun 19 2003 - 18:10:51 EDT)
• Kevin Peuhkurinen
  • [Snort-sigs] SID 1103 documentation (Thu Jun 12 2003 - 11:02:09 EDT)
  • [Snort-sigs] SID 1050 documentation (Thu Jun 12 2003 - 09:59:24 EDT)
  • [Snort-sigs] SID 1544 documentation (Wed Jun 11 2003 - 15:30:31 EDT)
  • [Snort-sigs] SID 1546 documentation (Wed Jun 11 2003 - 14:58:22 EDT)
  • [Snort-sigs] SID 1071 documentation (Wed Jun 11 2003 - 12:25:53 EDT)
  • [Snort-sigs] SID 1043 documentation (Wed Jun 11 2003 - 12:04:06 EDT)
  • [Snort-sigs] SID 1156 change recommendation (Tue Jun 10 2003 - 10:11:22 EDT)
  • [Snort-sigs] SID 1129 documentation (Tue Jun 10 2003 - 09:21:12 EDT)
  • [Snort-sigs] SID 1808 documentation revised (Tue Jun 10 2003 - 08:21:56 EDT)
  • [Snort-sigs] SID 1828 documentation (Mon Jun 09 2003 - 15:28:02 EDT)
  • [Snort-sigs] SID 1852 documentation (Mon Jun 09 2003 - 14:23:30 EDT)
  • [Snort-sigs] SID 1857 documentation (Mon Jun 09 2003 - 14:21:15 EDT)
  • [Snort-sigs] SID 1809 documentation (Mon Jun 09 2003 - 11:47:51 EDT)
  • [Snort-sigs] SID 1808 documentation (Mon Jun 09 2003 - 11:03:38 EDT)
  • [Snort-sigs] SID 1497 documentation (Mon Jun 09 2003 - 09:37:34 EDT)
  • [Snort-sigs] SID 1667 documentation (Fri Jun 06 2003 - 11:16:50 EDT)
  • Re: [Snort-sigs] write rule documentation, get a t-shirt (Mon Jun 02 2003 - 11:55:39 EDT)
  • [Snort-sigs] SID 1828 change needed (Mon Jun 02 2003 - 13:46:08 EDT)
• Kreimendahl, Chad J
  • [Snort-sigs] some new signatures to consider (Mon Jun 09 2003 - 13:55:06 EDT)
• L. Christopher Luther
  • RE: [Snort-sigs] Duplicate sids in deleted.rules (Tue Jun 17 2003 - 11:46:21 EDT)
• larosa, vjay
  • [Snort-sigs] Depth and multi content rule help. (Tue Jun 17 2003 - 14:19:59 EDT)
• Liss, John
  • [Snort-sigs] SID 111 (Wed Jun 18 2003 - 18:54:29 EDT)
  • [Snort-sigs] SID 114 (Wed Jun 18 2003 - 19:03:54 EDT)
• m.stiefenhofer(at)ecofis.de
  • [Snort-sigs] New rule: SCAN 55808 Trojan scan (Wed Jun 25 2003 - 07:14:58 EDT)
• Magnus Larsson
  • [Snort-sigs] worm_sobig.c? (Mon Jun 02 2003 - 07:19:02 EDT)
• Maria Teresa Herrera Hueso
  • [Snort-sigs] A question about Snort (Tue Jun 10 2003 - 08:55:21 EDT)
• Martin Olsson
  • [Snort-sigs] nocase (Wed Jun 25 2003 - 07:36:58 EDT)
  • [Snort-sigs] Duplicate sids in deleted.rules (Tue Jun 17 2003 - 03:15:37 EDT)
• Matt Kettler
  • Re: [Snort-sigs] A question about Snort (Thu Jun 12 2003 - 16:45:39 EDT)
  • [Snort-sigs] IANA reserved IP address rules? (Wed Jun 11 2003 - 16:47:59 EDT)
  • Re: [Snort-sigs] question regarding web-iis rule NOT triggering.. (Tue Jun 10 2003 - 15:47:24 EDT)
• md esa kamsan
  • [Snort-sigs] PortScan (Wed Jun 11 2003 - 02:38:41 EDT)
• Michael Nygren
  • Re: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 17:29:19 EDT)
• Michelle.Moraes(at)stj.gov.br
  • [Snort-sigs] Sensor (Mon Jun 02 2003 - 17:21:11 EDT)
• Nawapong Nakjang
  • [Snort-sigs] Snort Rules Contributions (Thu Jun 05 2003 - 22:21:53 EDT)
• Neal
  • [Snort-sigs] Submit new detection engine? (Tue Jun 17 2003 - 12:49:38 EDT)
• nicholas black
  • [Snort-sigs] Documentation (#1325) (Mon Jun 09 2003 - 15:16:55 EDT)
• nick black
  • [Snort-sigs] Re: nocase (Thu Jun 26 2003 - 18:10:32 EDT)
  • [Snort-sigs] Re: Depth and multi content rule help. (Tue Jun 17 2003 - 18:07:21 EDT)
• Nigel Houghton
  • Re: [Snort-sigs] SID 2161 (Thu Jun 26 2003 - 11:25:58 EDT)
  • [Snort-sigs] More documents in waiting (Tue Jun 24 2003 - 13:37:44 EDT)
  • Re: [Snort-sigs] Rule Documentation - Rules of engagement (Tue Jun 24 2003 - 12:35:28 EDT)
  • [Snort-sigs] Rule Documentation - Rules of engagement (Tue Jun 24 2003 - 11:03:14 EDT)
  • [Snort-sigs] Deleted Rules (Sat Jun 21 2003 - 23:37:42 EDT)
  • Re: [Snort-sigs] snort rules. (Fri Jun 20 2003 - 10:02:43 EDT)
  • [Snort-sigs] Missing attachment (Thu Jun 05 2003 - 11:33:49 EDT)
  • Re: [Snort-sigs] worm_sobig.c? (Mon Jun 02 2003 - 09:22:40 EDT)
• nigel.houghton(at)sourcefire.com
  • [Snort-sigs] Re: Your application (Wed Jun 04 2003 - 20:58:33 EDT)
• Norbert.Kotras(at)at.flextronics.com
  • [Snort-sigs] T-shirt! (Thu Jun 05 2003 - 07:45:12 EDT)
• O'Flynn, Derek
  • RE: [Snort-sigs] Edonkey - port 4662 (Thu Jun 26 2003 - 12:46:50 EDT)
  • [Snort-sigs] Edonkey - port 4662 (Wed Jun 25 2003 - 17:33:12 EDT)
  • [Snort-sigs] P2P Signature for Edonkey/Emule (Fri Jun 13 2003 - 16:13:54 EDT)
• Paul_Drapeau(at)vrtx.com
  • [Snort-sigs] tcp window size 55808 SYN packets (Wed Jun 11 2003 - 17:05:08 EDT)
• Philip Davidson
  • [Snort-sigs] Oinkmaster questions (Mon Jun 09 2003 - 15:00:02 EDT)
• Randy C. Ramsdell
  • [Snort-sigs] snort rules. (Wed Jun 18 2003 - 18:48:00 EDT)
• Rich Adamson
  • RE: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Thu Jun 05 2003 - 10:18:12 EDT)
• Rodrigo Ramos
  • RES: [Snort-sigs] W32.Bugbear.B@mm Signature (Fri Jun 06 2003 - 16:36:13 EDT)
• Rowley, Thomas
  • [Snort-sigs] SNORT (Thu Jun 19 2003 - 11:13:00 EDT)
• Russell Fulton
  • [Snort-sigs] False +ves with sid 1882 with possible fix (Tue Jun 10 2003 - 04:44:59 EDT)
  • Re: [Snort-sigs] false +ves for IMAP login overflow (SID 1993) (Mon Jun 09 2003 - 17:37:16 EDT)
  • Re: [Snort-sigs] Oinkmaster questions (Mon Jun 09 2003 - 17:14:09 EDT)
  • [Snort-sigs] false +ves for IMAP login overflow (SID 1993) (Sun Jun 08 2003 - 23:40:59 EDT)
• Sam Evans
  • [Snort-sigs] SID 2161 (Thu Jun 26 2003 - 10:17:49 EDT)
  • Re: [Snort-sigs] Problems with SID 2161 (Mon Jun 23 2003 - 17:55:34 EDT)
  • RE: [Snort-sigs] Problems with SID 2161 (Mon Jun 23 2003 - 17:51:35 EDT)
  • [Snort-sigs] Problems with SID 2161 (Mon Jun 23 2003 - 13:37:17 EDT)
• Sam Gorton
  • [Snort-sigs] False Positive for SID 1322: bad frag bits (Thu Jun 26 2003 - 14:53:32 EDT)
• sb ch
  • [Snort-sigs] "MS-SQL ping attempt" is illegal or not? (Mon Jun 02 2003 - 06:37:11 EDT)
• Schmehl, Paul L
  • RE: [Snort-sigs] Duplicate sids in deleted.rules (Tue Jun 17 2003 - 14:12:53 EDT)
  • RE: [Snort-sigs] IANA reserved IP address rules? (Mon Jun 16 2003 - 17:44:06 EDT)
  • [Snort-sigs] RE: [Snort-users] Oinkmaster questions (Mon Jun 09 2003 - 16:57:51 EDT)
• Shane Williams
  • RE: [Snort-sigs] Sobig.E variant (Thu Jun 26 2003 - 16:43:56 EDT)
  • Re: RES: [Snort-sigs] W32.Bugbear.B@mm Signature (Sun Jun 08 2003 - 20:10:41 EDT)
• Smith, Donald
  • [Snort-sigs] RE: anyone have more detail other than window size of 55808 to c raft a snort rule for this (Thu Jun 12 2003 - 16:00:58 EDT)
• SoloNet Newsfeed
  • [Snort-sigs] SID 184 False Posiitives : "WEB-CLIENT Javascript URL host spoofing attemp " (Fri Jun 06 2003 - 16:28:49 EDT)
  • Re: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES id check returned userid " (Fri Jun 06 2003 - 15:36:29 EDT)
  • [Snort-sigs] SID 1042 false positives: WEB-IIS view source via translate header" (Fri Jun 06 2003 - 14:59:03 EDT)
  • Re: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES i d check returned userid " (Wed Jun 04 2003 - 13:43:59 EDT)
  • Re: [Snort-sigs] SID 1882 False Posiitives : "ATTACK-RESPONSES id check returned userid " (Wed Jun 04 2003 - 10:53:53 EDT)
• stephane
  • Re: [Snort-sigs] Signaure Hiccup (Fri Jun 27 2003 - 15:30:55 EDT)
  • [Snort-sigs] Question about rule semantic (Tue Jun 17 2003 - 17:11:30 EDT)
• Steve Cody
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Wed Jun 04 2003 - 20:20:41 EDT)
  • Re: [Snort-sigs] Using snort to stop SMTP dictionary attacks] (Wed Jun 04 2003 - 19:16:31 EDT)
  • [Snort-sigs] Using snort to stop SMTP dictionary attacks (Wed Jun 04 2003 - 18:25:10 EDT)
• Steven Alexander
  • RE: [Snort-sigs] Sobig.E variant (Thu Jun 26 2003 - 14:26:31 EDT)
  • [Snort-sigs] Documentation: SID 274 (Mon Jun 23 2003 - 18:40:56 EDT)
  • [Snort-sigs] SID 295-299 (Mon Jun 23 2003 - 18:39:45 EDT)
  • [Snort-sigs] SID 295 (Mon Jun 23 2003 - 18:01:30 EDT)
  • RE: [Snort-sigs] Problems with SID 2161 (Mon Jun 23 2003 - 14:26:21 EDT)
  • [Snort-sigs] Documentation: SID 629 (Fri Jun 20 2003 - 12:50:53 EDT)
  • [Snort-sigs] Documentation: SID 355 (Fri Jun 20 2003 - 12:25:33 EDT)
  • [Snort-sigs] Documentation: SID 293 (Fri Jun 20 2003 - 12:06:32 EDT)
  • [Snort-sigs] Documentation: SID 286 (Fri Jun 20 2003 - 12:03:02 EDT)
  • [Snort-sigs] Documentation: SID 290 (Fri Jun 20 2003 - 12:05:11 EDT)
  • [Snort-sigs] Documentation: SID 289 (Fri Jun 20 2003 - 12:04:47 EDT)
  • [Snort-sigs] Documentation: SID 287 (Fri Jun 20 2003 - 12:03:33 EDT)
  • [Snort-sigs] Documentation SID 291 (Fri Jun 20 2003 - 12:06:13 EDT)
  • [Snort-sigs] Documentation: SID 288 (Fri Jun 20 2003 - 12:04:03 EDT)
  • [Snort-sigs] SID 291 (Fri Jun 20 2003 - 11:56:34 EDT)
  • RE: [Snort-sigs] More: Question on SID 285 (Thu Jun 12 2003 - 11:57:23 EDT)
  • [Snort-sigs] More: Question on SID 285 (Tue Jun 10 2003 - 20:53:50 EDT)
  • [Snort-sigs] SID 284 (Tue Jun 10 2003 - 20:35:16 EDT)
  • [Snort-sigs] SID 285 (Tue Jun 10 2003 - 20:38:13 EDT)
  • RE: [Snort-sigs] Question on SID 285 (Tue Jun 10 2003 - 15:12:12 EDT)
  • [Snort-sigs] Question on SID 285 (Tue Jun 10 2003 - 14:50:58 EDT)
  • RE: [Snort-sigs] Signature Definition #460, 5 of 20 and Signature Definition # 458 (Tue Jun 10 2003 - 11:27:03 EDT)
  • RE: [Snort-sigs] Correction to signature 1227 (Mon Jun 09 2003 - 19:53:44 EDT)
  • RE: [Snort-sigs] SID 716 (Mon Jun 09 2003 - 19:37:06 EDT)
  • [Snort-sigs] Correction to signature 1227 (Mon Jun 09 2003 - 18:21:45 EDT)
  • [Snort-sigs] SID 1227 (Mon Jun 09 2003 - 18:05:14 EDT)
  • [Snort-sigs] SID 793 (Mon Jun 09 2003 - 17:52:25 EDT)
  • [Snort-sigs] SID 720 (Mon Jun 09 2003 - 17:51:51 EDT)
  • [Snort-sigs] SID 718 (Mon Jun 09 2003 - 17:27:19 EDT)
  • [Snort-sigs] SID 715 (Mon Jun 09 2003 - 17:26:03 EDT)
  • [Snort-sigs] SID 716 (Mon Jun 09 2003 - 17:26:20 EDT)
  • [Snort-sigs] SID 717 (Mon Jun 09 2003 - 17:26:42 EDT)
  • [Snort-sigs] SID 719 (Mon Jun 09 2003 - 16:56:07 EDT)
  • [Snort-sigs] Sid 456 and 385 documentation change (Mon Jun 09 2003 - 15:10:18 EDT)
  • RE: [Snort-sigs] Signature Definition #460, 5 of 20 and Signature Definition # 458 (Mon Jun 09 2003 - 14:58:06 EDT)
  • RE: [Snort-sigs] Signature Definition #462, 6 of 20 (Mon Jun 09 2003 - 14:59:55 EDT)
  • [Snort-sigs] SID 482 (Mon Jun 09 2003 - 13:10:55 EDT)
  • [Snort-sigs] SID 467 (Mon Jun 09 2003 - 13:09:54 EDT)
  • [Snort-sigs] SID 484 (Mon Jun 09 2003 - 13:11:30 EDT)
  • [Snort-sigs] SID 481 (Mon Jun 09 2003 - 13:10:35 EDT)
  • [Snort-sigs] SID 483 (Mon Jun 09 2003 - 13:11:10 EDT)
  • [Snort-sigs] SID 466 (Mon Jun 09 2003 - 13:09:23 EDT)
  • [Snort-sigs] SID 465 (Mon Jun 09 2003 - 13:09:01 EDT)
  • [Snort-sigs] SID 476 (Mon Jun 09 2003 - 13:10:20 EDT)
  • [Snort-sigs] SID 382, 17 of 20 (Mon Jun 09 2003 - 12:48:02 EDT)
  • [Snort-sigs] SID 378, 13 of 20 (Mon Jun 09 2003 - 12:45:49 EDT)
  • [Snort-sigs] SID 381, 16 of 20 (Mon Jun 09 2003 - 12:47:24 EDT)
  • [Snort-sigs] SID 379, 14 of 20 (Mon Jun 09 2003 - 12:46:34 EDT)
  • [Snort-sigs] SID 376, 11 of 20 (Mon Jun 09 2003 - 12:45:00 EDT)
  • [Snort-sigs] SID 371 (my contribution #6) (Mon Jun 09 2003 - 12:39:23 EDT)
  • [Snort-sigs] SID 384, 18 of 20 (Mon Jun 09 2003 - 12:48:36 EDT)
  • [Snort-sigs] SID 385, 19 of 20 (Mon Jun 09 2003 - 12:48:56 EDT)
  • [Snort-sigs] SID 380, 15 of 20 (Mon Jun 09 2003 - 12:47:00 EDT)
  • [Snort-sigs] SID 456, 20 of 20 (Mon Jun 09 2003 - 12:49:24 EDT)
  • [Snort-sigs] SID 377, 12 of 20 (Mon Jun 09 2003 - 12:45:31 EDT)
  • [Snort-sigs] Mistake in SID 379 (Mon Jun 09 2003 - 12:40:52 EDT)
  • [Snort-sigs] SID 374, 9 of 20 (Mon Jun 09 2003 - 12:43:44 EDT)
  • [Snort-sigs] SID 373 (my contribution #8) (Mon Jun 09 2003 - 12:41:34 EDT)
  • [Snort-sigs] SID 370 (my contribution #5) (Mon Jun 09 2003 - 12:38:44 EDT)
  • [Snort-sigs] SID 368 (my contribution #3) (Mon Jun 09 2003 - 12:37:38 EDT)
  • [Snort-sigs] SID 375, 10 of 20 (Mon Jun 09 2003 - 12:44:17 EDT)
  • [Snort-sigs] SID 372 (my contribution #7) (Mon Jun 09 2003 - 12:39:52 EDT)
  • [Snort-sigs] SID: 366 (my contribution #2) (Mon Jun 09 2003 - 12:37:01 EDT)
  • [Snort-sigs] SID 369 (my contribution #4) (Mon Jun 09 2003 - 12:38:04 EDT)
  • [Snort-sigs] Rule documentation (Thu Jun 05 2003 - 14:42:58 EDT)
  • [Snort-sigs] Rule Documentation - teardrop correction (Thu Jun 05 2003 - 16:28:14 EDT)
• Terence Garland (Nashua Connect)
  • [Snort-sigs] PID (Fri Jun 20 2003 - 07:48:42 EDT)
• Terence Runge
  • [Snort-sigs] logical operators and snort rules (Thu Jun 19 2003 - 18:40:16 EDT)
• Tinsley Paul
  • [Snort-sigs] W32.Mumu.B.Worm Patterns (BETA) (Fri Jun 27 2003 - 11:04:14 EDT)
  • RE: [Snort-sigs] sigs for MSM via proxies (Fri Jun 20 2003 - 09:15:22 EDT)
  • [Snort-sigs] W32.Bugbear.B@mm Signature (Fri Jun 06 2003 - 08:58:58 EDT)
• Tony Lill
  • Re: [Snort-sigs] SMTP rcpt to sed command attempt (Sun Jun 01 2003 - 15:43:40 EDT)
• U.Siva Kumar
  • [Snort-sigs] Document for Rule 268 DOS Jolt attack (Fri Jun 20 2003 - 23:46:26 EDT)
  • [Snort-sigs] Documentation: SID 268 (Fri Jun 20 2003 - 23:52:37 EDT)
  • [Snort-sigs] Document for Rule 268 DOS Jolt attack (Wed Jun 11 2003 - 03:58:07 EDT)
• Wes Young
  • Re: [Snort-sigs] Sobig.E variant (Fri Jun 27 2003 - 09:34:41 EDT)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT