Mailing List Archive For snort-sigs@snort.org Jul 2003 By Date

• Wed Jul 30 2003 - 22:09:11 EDT
  • [Snort-sigs] Snort rules am attaching the files Neal Timm 
• Wed Jul 30 2003 - 12:12:22 EDT
  • RE: [Snort-sigs] DCom RPC attack response sig Esler, Joel Contractor 
• Thu Jul 31 2003 - 15:08:35 EDT
  • RE: [Snort-sigs] i've recieved your help Matt Kettler 
• Thu Jul 31 2003 - 06:23:51 EDT
  • [Snort-sigs] Re: Snort-sigs digest, Vol 1 #658 - 11 msgs Zultan  
• Thu Jul 31 2003 - 00:27:32 EDT
  • Re: [Snort-sigs] snort-rules with resp Erek Adams 
• Wed Jul 30 2003 - 22:51:08 EDT
  • RE: [Snort-sigs] i've recieved your help Moyer, Shawn 
• Wed Jul 30 2003 - 21:56:30 EDT
  • [Snort-sigs] snort-rules with resp Alexandru Balan 
• Wed Jul 30 2003 - 20:05:04 EDT
  • Re: [Snort-sigs] Resp Keyword in Windows XP!! Jeff Nathan 
• Wed Jul 30 2003 - 16:44:45 EDT
  • Re: [Snort-sigs] i've recieved your help Matt Kettler 
• Wed Jul 30 2003 - 13:57:23 EDT
  • Re: [Snort-sigs] i've recieved your help Wes Young 
• Wed Jul 30 2003 - 13:37:31 EDT
  • Re: [Snort-sigs] i've recieved your help Matt Kettler 
• Wed Jul 30 2003 - 06:07:24 EDT
  • [Snort-sigs] i've recieved your help qkhou 
• Tue Jul 29 2003 - 10:07:59 EDT
  • FW: [Snort-sigs] DCom RPC attack response sig Esler, Joel Contractor 
• Tue Jul 29 2003 - 10:07:51 EDT
  • FW: [Snort-sigs] Resp Keyword in Windows XP!! Esler, Joel Contractor 
• Wed Jul 30 2003 - 02:33:07 EDT
  • [Snort-sigs] Signature to detect shells bound to a port Jukka Juslin 
• Wed Jul 30 2003 - 02:20:05 EDT
  • [Snort-sigs] snort-rules STABLE update @ Wed Jul 30 02:20:05 2003 bmc(at)snort.org 
  • [Snort-sigs] snort-rules CURRENT update @ Wed Jul 30 02:20:05 2003 bmc(at)snort.org 
• Tue Jul 29 2003 - 13:03:38 EDT
  • [Snort-sigs] HXDL.EXE Wes Young 
• Tue Jul 29 2003 - 12:10:12 EDT
  • Re: [Snort-sigs] DCOM MS03-026 Alpha Rules Brian 
• Tue Jul 29 2003 - 11:56:25 EDT
  • Re: [Snort-sigs] Resp Keyword in Windows XP!! Matt Kettler 
• Tue Jul 29 2003 - 04:18:23 EDT
  • [Snort-sigs] Resp Keyword in Windows XP!! jthomas(at)capitol-college.edu 
• Mon Jul 28 2003 - 10:00:20 EDT
  • [Snort-sigs] DCom RPC attack response sig Michael Anuzis 
• Tue Jul 29 2003 - 00:57:26 EDT
  • RE: [Snort-sigs] DCOM MS03-026 Alpha Rules Paul Tinsley 
• Tue Jul 29 2003 - 00:47:14 EDT
  • RE: [Snort-sigs] DCOM MS03-026 Alpha Rules Paul Tinsley 
• Mon Jul 28 2003 - 17:17:07 EDT
  • Re: [Snort-sigs] DCOM MS03-026 Alpha Rules daniel uriah clemens 
• Mon Jul 28 2003 - 22:54:01 EDT
  • [Snort-sigs] DCOM MS03-026 Alpha Rules pdt(at)jackhammer.org 
• Mon Jul 28 2003 - 19:51:38 EDT
  • RE: [Snort-sigs] Rule: Bugbear.B Network Share Scan Tom.Mclaughlin(at)kp.org 
• Mon Jul 28 2003 - 19:43:01 EDT
  • RE: [Snort-sigs] Rule: Bugbear.B Network Share Scan Tinsley Paul 
• Mon Jul 28 2003 - 18:13:36 EDT
  • [Snort-sigs] Rule: Bugbear.B Network Share Scan Tom.Mclaughlin(at)kp.org 
• Mon Jul 28 2003 - 17:25:54 EDT
  • RE: [Snort-sigs] Ignoring just one host Moyer, Shawn 
• Mon Jul 28 2003 - 17:32:06 EDT
  • Re: [Snort-sigs] Ignoring just one host Erick Mechler 
• Mon Jul 28 2003 - 16:58:04 EDT
  • [Snort-sigs] Ignoring just one host Gary Danko 
• Mon Jul 28 2003 - 10:11:41 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler 
• Mon Jul 28 2003 - 09:55:13 EDT
  • Re: [Snort-sigs] question Matt Kettler 
• Mon Jul 28 2003 - 04:15:20 EDT
  • [Snort-sigs] question qkhou 
• Thu Jul 24 2003 - 20:57:42 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler 
• Fri Jul 25 2003 - 11:17:13 EDT
  • Re: [Fwd: [Snort-sigs] dce rpc rules] Kevin Pietersma 
• Fri Jul 25 2003 - 10:42:37 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Jon Hart 
• Fri Jul 25 2003 - 09:00:37 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Christopher Lubrecht 
• Fri Jul 25 2003 - 06:29:27 EDT
  • [Snort-sigs] sid 882 false positives Jonathan Norman 
• Fri Jul 25 2003 - 03:44:03 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Jukka Juslin 
• Thu Jul 24 2003 - 20:37:28 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Wes Young 
• Thu Jul 24 2003 - 18:31:14 EDT
  • Re: [Snort-sigs] dce rpc rules Dale L. Handy 
• Thu Jul 24 2003 - 16:27:27 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Matt Kettler 
• Thu Jul 24 2003 - 13:38:27 EDT
  • Re: [Snort-sigs] Signature for scanning SSH versions Hugo van der Kooij 
• Thu Jul 24 2003 - 11:13:10 EDT
  • [Snort-sigs] Microsoft Security Bulletin MS03-026 signature Kevin Pietersma 
• Thu Jul 24 2003 - 05:19:55 EDT
  • [Snort-sigs] Signature for scanning SSH versions Jukka Juslin 
• Thu Jul 24 2003 - 01:33:21 EDT
  • Re: [Snort-sigs] MS Exchange rule Hugo van der Kooij 
• Wed Jul 23 2003 - 18:25:52 EDT
  • RE: [Snort-sigs] MS Exchange rule Schmehl, Paul L 
• Wed Jul 23 2003 - 16:56:52 EDT
  • Re: [Snort-sigs] (spp_stream4) STEALTH ACTIVITY (unknown) detection Matt Kettler 
• Wed Jul 23 2003 - 16:36:14 EDT
  • Re: [Snort-sigs] MS Exchange rule Wes Young 
• Wed Jul 23 2003 - 16:33:36 EDT
  • RE: [Snort-sigs] MS Exchange rule Robert Reid 
• Wed Jul 23 2003 - 16:20:41 EDT
  • Re: [Snort-sigs] MS Exchange rule Brian 
• Wed Jul 23 2003 - 16:19:08 EDT
  • [Snort-sigs] (spp_stream4) STEALTH ACTIVITY (unknown) detection Josh.Sakofsky(at)donovandata.com 
• Wed Jul 23 2003 - 02:07:44 EDT
  • [Snort-sigs] MS Exchange rule Kraus, Thorsten 
• Tue Jul 22 2003 - 19:11:24 EDT
  • [Snort-sigs] Documentation: SID 908 Darryl Davidson 
• Tue Jul 22 2003 - 18:32:54 EDT
  • [Snort-sigs] Documentation: SID 906 Darryl Davidson 
• Tue Jul 22 2003 - 18:35:54 EDT
  • [Snort-sigs] Documentation: SID 907 Darryl Davidson 
• Tue Jul 22 2003 - 18:24:56 EDT
  • [Snort-sigs] Documentation: SID 905 Darryl Davidson 
• Tue Jul 22 2003 - 14:01:03 EDT
  • Re: [Snort-sigs] how many rules are there for snort at the moment? Brian 
• Tue Jul 22 2003 - 03:47:31 EDT
  • [Snort-sigs] Missing signature description Cliff Lai 
• Mon Jul 21 2003 - 09:43:36 EDT
  • RE: [Snort-users] RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Donahue, Pat 
• Mon Jul 21 2003 - 09:31:01 EDT
  • RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Smith, Donald 
• Tue Jul 22 2003 - 13:06:40 EDT
  • Re: [Snort-sigs] how many rules are there for snort at the moment? Matt Kettler 
• Tue Jul 22 2003 - 12:55:20 EDT
  • RE: [Snort-sigs] how many rules are there for snort at the moment? Steven Alexander 
• Tue Jul 22 2003 - 11:55:24 EDT
  • [Snort-sigs] how many rules are there for snort at the moment? Chatprechakul Mr N 
• Tue Jul 22 2003 - 09:46:09 EDT
  • [Snort-sigs] Rule for port 3531 Robert Wagner 
• Tue Jul 22 2003 - 02:24:19 EDT
  • [Snort-sigs] snort-rules STABLE update @ Tue Jul 22 02:24:19 2003 bmc(at)snort.org 
  • [Snort-sigs] snort-rules CURRENT update @ Tue Jul 22 02:24:19 2003 bmc(at)snort.org 
• Mon Jul 21 2003 - 18:19:31 EDT
  • [Snort-sigs] dce rpc rules Brian 
• Mon Jul 21 2003 - 12:24:00 EDT
  • Re: [Snort-sigs] SID: 2190 Nigel Houghton 
• Mon Jul 21 2003 - 12:12:36 EDT
  • Re: [Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Matt Kettler 
• Mon Jul 21 2003 - 11:31:00 EDT
  • Re: [Snort-sigs] SID: 2190 Jon Hart 
• Mon Jul 21 2003 - 10:05:31 EDT
  • Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Brian 
• Mon Jul 21 2003 - 09:58:14 EDT
  • RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results scheidell(at)secnap.net 
• Mon Jul 21 2003 - 09:05:36 EDT
  • Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Chris Green 
• Fri Jul 18 2003 - 12:44:21 EDT
  • [Snort-sigs] SID: 2192 Iván Mota Alberca 
• Mon Jul 21 2003 - 08:38:34 EDT
  • RE: [Snort-sigs] SID: 2190 Keith Pachulski 
• Fri Jul 18 2003 - 12:45:43 EDT
  • [Snort-sigs] SID: 2193 Iván Mota Alberca 
• Fri Jul 18 2003 - 15:17:31 EDT
  • RE: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Smith, Donald 
• Fri Jul 18 2003 - 10:42:52 EDT
  • RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Klun, Jim 
• Fri Jul 18 2003 - 10:43:43 EDT
  • RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Klun, Jim 
• Fri Jul 18 2003 - 12:40:15 EDT
  • [Snort-sigs] SID: 2190 Iván Mota Alberca 
• Fri Jul 18 2003 - 13:10:55 EDT
  • [Snort-sigs] Fw: SC Signature and HPING Signature james 
• Fri Jul 18 2003 - 17:41:44 EDT
  • [Snort-sigs] help Thomas Dodds 
• Fri Jul 18 2003 - 12:42:41 EDT
  • [Snort-sigs] SID: 2191 Iván Mota Alberca 
• Fri Jul 18 2003 - 12:50:17 EDT
  • [Snort-sigs] Fw: SC Signature and HPING Signature james 
• Mon Jul 21 2003 - 02:11:19 EDT
  • [Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Ôø СÁ¢ 
• Mon Jul 21 2003 - 02:14:19 EDT
  • [Snort-sigs] Why does snort use binarytree structure when reassembling a TCP stream Ôø СÁ¢ 
• Sun Jul 20 2003 - 13:09:56 EDT
  • Re: [Snort-sigs] Question Alert 1948 Rich Adamson  
• Sun Jul 20 2003 - 13:41:27 EDT
  • Re: [Snort-users] Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Rich Adamson  
• Sun Jul 20 2003 - 12:07:06 EDT
  • Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Michael Scheidell 
• Sun Jul 20 2003 - 01:10:40 EDT
  • RE: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Kreimendahl, Chad J 
• Sat Jul 19 2003 - 17:40:27 EDT
  • [Snort-sigs] yet more porn docs Steven Alexander 
• Sat Jul 19 2003 - 15:43:42 EDT
  • Re: [Snort-sigs] Question Alert 1948 Erick Mechler 
• Sat Jul 19 2003 - 14:53:46 EDT
  • Re: [Snort-sigs] Question Alert 1948 Rich Adamson  
• Sat Jul 19 2003 - 12:53:02 EDT
  • Re: [Snort-sigs] Question Alert 1948 Wes Young 
• Sat Jul 19 2003 - 01:21:42 EDT
  • [Snort-sigs] snort-rules STABLE update @ Sat Jul 19 01:21:42 2003 bmc(at)snort.org 
  • [Snort-sigs] snort-rules CURRENT update @ Sat Jul 19 01:21:42 2003 bmc(at)snort.org 
• Fri Jul 18 2003 - 21:47:34 EDT
  • Re: [Snort-sigs] More porn docs Nigel Houghton 
• Fri Jul 18 2003 - 20:42:19 EDT
  • Re: [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Brian 
• Fri Jul 18 2003 - 20:01:34 EDT
  • RE: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Eric Hines 
• Fri Jul 18 2003 - 15:00:30 EDT
  • [Snort-sigs] More porn docs Steven Alexander 
• Fri Jul 18 2003 - 14:49:47 EDT
  • [Snort-sigs] Documentation: porn rules Steven Alexander 
• Fri Jul 18 2003 - 14:37:15 EDT
  • Re: [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns 
• Fri Jul 18 2003 - 14:02:50 EDT
  • [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results Jon Hart 
• Fri Jul 18 2003 - 13:32:09 EDT
  • [Snort-sigs] Fw: SC Signature and HPING Signature james 
• Fri Jul 18 2003 - 14:14:44 EDT
  • [Snort-sigs] Documentation: sid 627 Steven Alexander 
• Fri Jul 18 2003 - 13:50:20 EDT
  • [Snort-sigs] Correction: sid 619 Steven Alexander 
• Fri Jul 18 2003 - 14:14:22 EDT
  • [Snort-sigs] Documentation: sid 626 Steven Alexander 
• Fri Jul 18 2003 - 13:34:35 EDT
  • [Snort-sigs] Documentation: sid 1133 Steven Alexander 
• Fri Jul 18 2003 - 13:50:23 EDT
  • [Snort-sigs] Re: [Snort-users] Suggested Sig for Cisco DOS Vulnerability Brian 
• Fri Jul 18 2003 - 13:40:07 EDT
  • [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns 
• Fri Jul 18 2003 - 13:51:02 EDT
  • [Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns 
• Fri Jul 18 2003 - 13:42:32 EDT
  • [Snort-sigs] SIDS 1133 and 619 Steven Alexander 
• Fri Jul 18 2003 - 13:44:18 EDT
  • [Snort-sigs] Documentation: sid 619 Steven Alexander 
• Fri Jul 18 2003 - 12:34:07 EDT
  • [Snort-sigs] RE: [snort-cvs] CVS: snort - cazz Kreimendahl, Chad J 
• Fri Jul 18 2003 - 12:17:35 EDT
  • [Snort-sigs] Documentation: SID 522 Steven Alexander 
• Fri Jul 18 2003 - 10:00:37 EDT
  • Re: [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Michael Scheidell 
• Fri Jul 18 2003 - 10:14:15 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson 
• Fri Jul 18 2003 - 08:30:18 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson 
• Wed Jul 16 2003 - 18:51:44 EDT
  • [Snort-sigs] Documentation: SID 324 Darryl Davidson 
• Thu Jul 17 2003 - 11:25:30 EDT
  • [Snort-sigs] Re: "bad guy" tagging Grudge Mason 
• Thu Jul 17 2003 - 11:20:57 EDT
  • [Snort-sigs] need a packet trace for serv-u/malware ftp session w/o login... Donovan Tyler {tylerd} 
• Fri Jul 18 2003 - 01:57:39 EDT
  • [Snort-sigs] Suggested Sig for Cisco DOS Vulnerability Compton, Rich 
• Thu Jul 17 2003 - 13:53:59 EDT
  • [Snort-sigs] Question Alert 1948 Cathy Stallings 
• Thu Jul 17 2003 - 21:32:40 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Brian 
• Thu Jul 17 2003 - 20:45:30 EDT
  • [Snort-sigs] Documentation: Sid 504 Steven Alexander 
• Thu Jul 17 2003 - 20:45:06 EDT
  • [Snort-sigs] Documentation: Sid 503 Steven Alexander 
• Thu Jul 17 2003 - 18:33:57 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Michael Boman 
• Thu Jul 17 2003 - 11:54:12 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Grudge Mason 
• Thu Jul 17 2003 - 07:16:08 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Chris Green 
• Thu Jul 17 2003 - 06:15:37 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Martin Olsson 
• Wed Jul 16 2003 - 19:29:38 EDT
  • [Snort-sigs] Documentation: SID 904 Darryl Davidson 
• Wed Jul 16 2003 - 19:11:02 EDT
  • [Snort-sigs] Documentation: SID 904 Darryl Davidson 
• Wed Jul 16 2003 - 07:50:53 EDT
  • Re: [Snort-sigs] Re: "bad guy" tagging Chris Green 
• Wed Jul 16 2003 - 05:16:20 EDT
  • [Snort-sigs] Re: "bad guy" tagging (Was: Re: Regarding rule 491 INFO FTP Bad login) Martin Olsson 
• Wed Jul 16 2003 - 02:23:03 EDT
  • [Snort-sigs] why does snort use binarytree structure when reassembling a TCP stream Ôø СÁ¢ 
• Tue Jul 15 2003 - 22:46:27 EDT
  • [Snort-sigs] I think there's something wrong when snort tries to reassemble TCP stream Ôø СÁ¢ 
• Tue Jul 15 2003 - 15:43:01 EDT
  • [Snort-sigs] "bad guy" tagging (Was: Re: Regarding rule 491 INFO FTP Bad login) Erek Adams 
• Tue Jul 15 2003 - 13:17:50 EDT
  • Re: [Snort-sigs] Remote Shell Trojan signature Matt Kettler 
• Tue Jul 15 2003 - 12:36:16 EDT
  • Re: AW: [Snort-sigs] locate the offender/target (was: Regarding rule 491 INFO FTP Bad login) Martin Olsson 
• Tue Jul 15 2003 - 09:29:49 EDT
  • [Snort-sigs] Remote Shell Trojan signature Jukka Juslin 
• Tue Jul 15 2003 - 03:39:32 EDT
  • Re: [Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Jeff Nathan 
• Mon Jul 14 2003 - 16:37:50 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Matt Kettler 
• Mon Jul 14 2003 - 16:21:56 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Brian 
• Mon Jul 14 2003 - 12:45:06 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Matt Kettler 
• Mon Jul 14 2003 - 12:10:57 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt stephane 
• Mon Jul 14 2003 - 11:05:00 EDT
  • AW: [Snort-sigs] Regarding rule 491 INFO FTP Bad login Sean Wheeler 
• Mon Jul 14 2003 - 11:17:29 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Nigel Houghton 
• Mon Jul 14 2003 - 08:52:38 EDT
  • Re: [Snort-sigs] Regarding rule 491 INFO FTP Bad login Martin Olsson 
• Mon Jul 14 2003 - 07:46:35 EDT
  • [Snort-sigs] Regarding rule 491 INFO FTP Bad login J-H. Johansen 
• Mon Jul 14 2003 - 04:18:28 EDT
  • [Snort-sigs] Edonkey signatures Jukka Juslin 
• Sun Jul 13 2003 - 17:15:15 EDT
  • Re: [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Hugo van der Kooij 
• Sun Jul 13 2003 - 17:00:19 EDT
  • [Snort-sigs] SID 663, SMTP rcpt to sed command attempt Nathan Bain 
• Sat Jul 12 2003 - 01:19:45 EDT
  • [Snort-sigs] snort-rules STABLE update @ Sat Jul 12 01:19:44 2003 bmc(at)snort.org 
• Sat Jul 12 2003 - 01:19:44 EDT
  • [Snort-sigs] snort-rules CURRENT update @ Sat Jul 12 01:19:44 2003 bmc(at)snort.org 
• Sat Jul 12 2003 - 16:46:03 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Brian 
• Fri Jul 11 2003 - 19:44:42 EDT
  • Re: [Snort-sigs] SID 333 Matt Kettler 
• Fri Jul 11 2003 - 14:32:28 EDT
  • [Snort-sigs] SID 333 Steven Alexander 
• Fri Jul 11 2003 - 14:16:02 EDT
  • [Snort-sigs] Documentation: SID 279 Steven Alexander 
• Fri Jul 11 2003 - 13:59:06 EDT
  • [Snort-sigs] Documentation: SID 281 Steven Alexander 
• Fri Jul 11 2003 - 12:07:38 EDT
  • Re: [Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Matt Kettler 
• Fri Jul 11 2003 - 10:18:24 EDT
  • RE: [Snort-sigs] P2P Kazaa Traffic Sam Evans 
• Fri Jul 11 2003 - 05:28:37 EDT
  • RE: [Snort-sigs] P2P Kazaa Traffic Jacob Hurley 
• Fri Jul 11 2003 - 04:08:40 EDT
  • RE: [Snort-sigs] P2P Kazaa Traffic Jukka Juslin 
• Fri Jul 11 2003 - 04:00:58 EDT
  • [Snort-sigs] CAN 2002-1123 Gabriel Agatiello 
• Fri Jul 11 2003 - 03:04:00 EDT
  • [Snort-sigs] What is the FLUSH STREAM (in spp_stream4.c) for? Ôø СÁ¢ 
• Thu Jul 10 2003 - 17:24:47 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Tony Lill 
• Thu Jul 10 2003 - 15:03:14 EDT
  • RE: [Snort-sigs] P2P Kazaa Traffic Jacob Hurley 
• Thu Jul 10 2003 - 09:09:54 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Wes Young 
• Thu Jul 10 2003 - 02:39:58 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Jukka Juslin 
• Wed Jul 09 2003 - 23:26:06 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Wes Young 
• Wed Jul 09 2003 - 12:46:56 EDT
  • [Snort-sigs] ICMP PING BeOS4.x Documentation daniel uriah clemens 
• Wed Jul 09 2003 - 12:53:03 EDT
  • [Snort-sigs] ICMP PING Cisco Type.x (supposedly ios 9.x) documentation daniel uriah clemens 
• Wed Jul 09 2003 - 12:21:09 EDT
  • [Snort-sigs] ICMP PING *NIX documentation daniel uriah clemens 
• Wed Jul 09 2003 - 12:24:58 EDT
  • [Snort-sigs] ICMP PING BSDType Documentation daniel uriah clemens 
• Wed Jul 09 2003 - 12:30:28 EDT
  • [Snort-sigs] ICMP PING BayRS Router documentation daniel uriah clemens 
• Wed Jul 09 2003 - 13:11:41 EDT
  • Re: [Snort-sigs] ACID Erick Mechler 
• Wed Jul 09 2003 - 13:18:06 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Sam Evans 
• Wed Jul 09 2003 - 11:44:05 EDT
  • RE: [Snort-sigs] question about content Steven Alexander 
• Wed Jul 09 2003 - 06:36:05 EDT
  • [Snort-sigs] WEB-MISC xp_cmdshell attempt documentation. daniel uriah clemens 
• Wed Jul 09 2003 - 11:31:26 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Sam Evans 
• Wed Jul 09 2003 - 11:06:11 EDT
  • Re: [Snort-sigs] P2P Kazaa Traffic Chris Baker 
• Wed Jul 09 2003 - 06:03:35 EDT
  • Re: [Snort-sigs] P2P foldershare.com ftp connection with FTP STUFF daniel uriah clemens 
• Wed Jul 09 2003 - 10:31:33 EDT
  • [Snort-sigs] P2P Kazaa Traffic Sam Evans 
• Wed Jul 09 2003 - 08:01:26 EDT
  • [Snort-sigs] ACID Esler, Joel Contractor 
• Wed Jul 09 2003 - 01:28:29 EDT
  • [Snort-sigs] question about content karim hassib 
• Tue Jul 08 2003 - 19:25:42 EDT
  • RE: [Snort-sigs] Questions about Snort Alerts Steven Alexander 
• Tue Jul 08 2003 - 19:08:42 EDT
  • RE: [Snort-sigs] Rule management Eric Hines 
• Tue Jul 08 2003 - 13:17:38 EDT
  • Re: [Snort-sigs] 10 documented Signatures daniel uriah clemens 
• Tue Jul 08 2003 - 12:47:39 EDT
  • [Snort-sigs] P2P foldershare.com going to http traffic without a GET daniel uriah clemens 
• Tue Jul 08 2003 - 12:28:05 EDT
  • [Snort-sigs] P2P foldershare.com ftp connection with FTP STUFF daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:16 EDT
  • [Snort-sigs] GATOR CLIENT GET exe file + Precision Time daniel uriah clemens 
• Tue Jul 08 2003 - 12:17:40 EDT
  • [Snort-sigs] P2P foldershare.com 8000 connection daniel uriah clemens 
• Tue Jul 08 2003 - 17:13:36 EDT
  • Re: [Snort-sigs] P2P rate limiting Chris Green 
• Tue Jul 08 2003 - 11:55:37 EDT
  • [Snort-sigs] OUTGOING GENERIC GATOR CLIENT CONNECTION VIA HTTP POST + .dll daniel uriah clemens 
• Tue Jul 08 2003 - 11:54:37 EDT
  • [Snort-sigs] Gator Client GET zip file daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:30 EDT
  • [Snort-sigs] GATOR.COM (GATOR/4.0) CLIENT AUTOUPDATE POST daniel uriah clemens 
• Tue Jul 08 2003 - 11:54:29 EDT
  • [Snort-sigs] Generic Gator client GET Rule daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:02 EDT
  • [Snort-sigs] Gator.com Client HTTP GET w/ BLAST THREAD daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:23 EDT
  • [Snort-sigs] Gator client (Gator/4.0) POST + bannerserver.dll daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:42 EDT
  • [Snort-sigs] GATOR.COM CLIENT Generic AutoUPDATE POST daniel uriah clemens 
• Tue Jul 08 2003 - 11:54:46 EDT
  • [Snort-sigs] Generic Gator Client Post rule daniel uriah clemens 
• Tue Jul 08 2003 - 11:55:10 EDT
  • [Snort-sigs] Gator client connection via HTTP GET Precision Time - ini file daniel uriah clemens 
• Tue Jul 08 2003 - 11:54:55 EDT
  • [Snort-sigs] Gator.com Client GET w/Date Manager daniel uriah clemens 
• Thu Jul 03 2003 - 16:51:07 EDT
  • [Snort-sigs] 10 documented Signatures Babbin, Jacob Mr NSS-P 
• Thu Jul 03 2003 - 20:56:35 EDT
  • [Snort-sigs] P2P rate limiting Sewell, Michael K 
• Sat Jul 05 2003 - 00:52:20 EDT
  • [Snort-sigs] Questions about Snort Alerts eric 
• Sun Jul 06 2003 - 12:10:18 EDT
  • [Snort-sigs] Rule management tim 
• Tue Jul 08 2003 - 16:15:03 EDT
  • Re: [Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Chris Green 
• Tue Jul 08 2003 - 11:17:29 EDT
  • Re: [Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Dale L. Handy 
• Mon Jul 07 2003 - 21:12:13 EDT
  • [Snort-sigs] what do the two constants TH_RES2,TH_RES1 mean Ôø СÁ¢ 
• Mon Jul 07 2003 - 18:33:37 EDT
  • Re: [Snort-sigs] capturing and inspecting an email! Brian 
• Mon Jul 07 2003 - 17:44:54 EDT
  • Re: [Snort-sigs] Question about rule semantic stephane 
• Mon Jul 07 2003 - 14:35:32 EDT
  • [Snort-sigs] speedera rule Bryan Irvine 
• Sun Jul 06 2003 - 13:18:30 EDT
  • [Snort-sigs] sigs admin Tim 
• Fri Jul 04 2003 - 18:09:57 EDT
  • [Snort-sigs] capturing and inspecting an email! Héroux, Christian 
• Thu Jul 03 2003 - 19:32:36 EDT
  • [Snort-sigs] 10 more snort signatures documented. Babbin, Jacob Mr NSS-P 
• Thu Jul 03 2003 - 11:24:49 EDT
  • Re: [Snort-sigs] WEB-CGI admin.pl access Erick Mechler 
• Thu Jul 03 2003 - 08:22:26 EDT
  • [Snort-sigs] WEB-CGI admin.pl access Chaudhury, Neel 
• Thu Jul 03 2003 - 08:16:18 EDT
  • [Snort-sigs] WEB-CGI admin.pl access Chaudhury, Neel 
• Wed Jul 02 2003 - 06:33:21 EDT
  • Re: [Snort-sigs] Gator spyware detection daniel uriah clemens 
• Wed Jul 02 2003 - 10:51:05 EDT
  • [Snort-sigs] Gator spyware detection Esler, Joel Contractor 
• Tue Jul 01 2003 - 17:35:58 EDT
  • [Snort-sigs] SID 1836, 1837 should include more ports Raffael Marty 
• Tue Jul 01 2003 - 12:31:28 EDT
  • [Snort-sigs] What does this mean? Michael Breton 
• Tue Jul 01 2003 - 15:35:21 EDT
  • [Snort-sigs] error in rules 1377 & 1378 ? stephane 
• Tue Jul 01 2003 - 15:37:17 EDT
  • [Snort-sigs] Do not use snort-<list>-admin for general list postings Chris Green 
• Tue Jul 01 2003 - 13:34:42 EDT
  • Re: [Snort-sigs] What does this mean? Dale L. Handy 
• Tue Jul 01 2003 - 13:26:10 EDT
  • Re: [Snort-sigs] What does this mean? Erek Adams 
• Tue Jul 01 2003 - 12:48:05 EDT
  • [Snort-sigs] What does this mean? Michael Breton 
• Tue Jul 01 2003 - 10:21:02 EDT
  • Re: Antwort: [Snort-sigs] Rules Ali BASEL 
• Tue Jul 01 2003 - 09:56:32 EDT
  • Antwort: [Snort-sigs] Rules m.stiefenhofer(at)ecofis.de 
• Tue Jul 01 2003 - 09:24:21 EDT
  • Re: [Snort-sigs] Rules Mathias Gygax 
• Tue Jul 01 2003 - 08:54:55 EDT
  • [Snort-sigs] Rules Vanio Rogerio Santos 
• Tue Jul 01 2003 - 01:22:21 EDT
  • [Snort-sigs] snort-rules CURRENT update @ Tue Jul 1 01:22:21 2003 bmc(at)snort.org 
  • [Snort-sigs] snort-rules STABLE update @ Tue Jul 1 01:22:21 2003 bmc(at)snort.org 

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT