Mailing List Archive For snort-sigs@snort.org Sep 2003 By Author

• <-delusion->
  • [Snort-sigs] quick question about Snort + ACID on FreeBSD (Tue Sep 02 2003 - 01:13:08 EDT)
• acastellani(at)riverwatch.com
  • [Snort-sigs] SNORT HELP (Fri Sep 19 2003 - 15:02:07 EDT)
• Adam Towarnyckyj
  • [Snort-sigs] False Positive on sid 10000009 (Fri Sep 26 2003 - 12:59:40 EDT)
• Aluru Madhuri
  • [Snort-sigs] Re: Snort-sigs digest, Vol 1 #698 - 11 msgs (Fri Sep 12 2003 - 02:18:38 EDT)
• Bamm Visscher
  • RE: [Snort-sigs] Unified output for barnyard (Fri Sep 05 2003 - 17:53:08 EDT)
• Bill Terwilliger
  • Re: [Snort-sigs] sig for recent massive ICMP scans (Thu Sep 25 2003 - 23:44:48 EDT)
• bmc(at)snort.org
  • [Snort-sigs] snort-rules CURRENT update @ Thu Sep 11 22:18:58 2003 (Thu Sep 11 2003 - 22:18:58 EDT)
  • [Snort-sigs] snort-rules STABLE update @ Thu Sep 11 22:18:58 2003 (Thu Sep 11 2003 - 22:18:58 EDT)
• Brian
  • Re: [Snort-sigs] rules licensing (Thu Sep 11 2003 - 21:07:08 EDT)
  • Re: [Snort-sigs] Rule for the newest DCOM vulnerability? (Thu Sep 11 2003 - 15:27:34 EDT)
  • Re: [Snort-sigs] Re: Rule 498 and 1882 (Wed Sep 03 2003 - 10:03:48 EDT)
• Brian Howard
  • Re: [Snort-sigs] sig for recent massive ICMP scans (Fri Sep 26 2003 - 00:00:57 EDT)
• Brian May
  • Re: [Snort-sigs] spamassisan (Tue Sep 02 2003 - 15:02:33 EDT)
• Choudhary, Anil
  • [Snort-sigs] correct of signature sid:1685 (Tue Sep 23 2003 - 05:47:17 EDT)
• CJ.Schmit(at)kohls.com
  • [Snort-sigs] CJ Schmit is out of the office. (Fri Sep 26 2003 - 05:00:46 EDT)
• Compton, Rich
  • RE: [Snort-sigs] Rule for the newest DCOM vulnerability? (Thu Sep 11 2003 - 15:31:19 EDT)
  • [Snort-sigs] Rule for the newest DCOM vulnerability? (Wed Sep 10 2003 - 23:02:47 EDT)
• D Murdoch
  • [Snort-sigs] Q on (Fri Sep 05 2003 - 08:36:00 EDT)
• d'Ambly, Jeff
  • RE: [Snort-sigs] NETBIOS DCERPC ISystemActivator bind attempt (Fri Sep 26 2003 - 09:01:11 EDT)
  • [Snort-sigs] NETBIOS DCERPC ISystemActivator bind attempt (Thu Sep 25 2003 - 11:29:25 EDT)
• Daniel de Young
  • Re: [Snort-sigs] False positives WEB-CGI calendar access (Tue Sep 30 2003 - 04:16:57 EDT)
  • Re: [Snort-sigs] False positives WEB-CGI calendar access (Mon Sep 29 2003 - 04:54:01 EDT)
• delusi0n(at)bellsouth.net
  • Re: Re: [Snort-sigs] quick question about Snort + ACID on FreeBSD (Tue Sep 02 2003 - 11:44:30 EDT)
• dmitriy.dunavetsky(at)clorox.com
  • Re: [Snort-sigs] Using snort to Identify P2P transfers. (Tue Sep 30 2003 - 11:58:33 EDT)
• Dusty Hall
  • Re: [Snort-sigs] Unified output for barnyard (Thu Sep 04 2003 - 17:16:40 EDT)
• Eric Hines
  • [Snort-sigs] Positive Technologies DCOM Buffer Overflow2 Signatures/Packets (Thu Sep 11 2003 - 16:43:24 EDT)
  • RE: [Snort-sigs] Rule for the newest DCOM vulnerability? (Wed Sep 10 2003 - 23:39:59 EDT)
• Esler, Joel Contractor
  • RE: [Snort-sigs] exclude IP from a rule (Tue Sep 23 2003 - 08:32:57 EDT)
• Gene Gomez
  • [Snort-sigs] SID 556 RE-contrib (apologies; I misread the rule) (Fri Sep 19 2003 - 13:53:19 EDT)
  • [Snort-sigs] SID 615 contrib (Fri Sep 19 2003 - 14:09:43 EDT)
  • [Snort-sigs] SID 714 contrib (Fri Sep 19 2003 - 14:37:48 EDT)
  • [Snort-sigs] SID 557 contrib (Fri Sep 19 2003 - 13:32:32 EDT)
  • [Snort-sigs] SID 557 RE-contrib (apologies; I misread the rule) (Fri Sep 19 2003 - 13:47:41 EDT)
  • [Snort-sigs] SID 558 contrib (please note msg change; done for consistency with 556, 557, 559) (Fri Sep 19 2003 - 13:54:50 EDT)
  • [Snort-sigs] SID 559 contrib (Fri Sep 19 2003 - 13:55:45 EDT)
  • [Snort-sigs] SID 556 contrib (Fri Sep 19 2003 - 13:23:38 EDT)
• Giovanni
  • [Snort-sigs] Rule 498 and 1882 (Tue Sep 02 2003 - 21:55:15 EDT)
• Gisler, Johnny
  • RE: [Snort-sigs] snort rule update (Wed Sep 03 2003 - 15:05:18 EDT)
• Graham, Jeffery A. MAJ - G6
  • [Snort-sigs] Netcat telnet attack signature (change 1) (Thu Sep 11 2003 - 08:51:36 EDT)
• Hugo van der Kooij
  • [Snort-sigs] False positives WEB-CGI calendar access (Mon Sep 29 2003 - 01:11:03 EDT)
• Ian Boje
  • Re: [Snort-sigs] NETBIOS DCERPC ISystemActivator bind attempt (Thu Sep 25 2003 - 16:11:36 EDT)
• Irwan Hadi
  • Re: [Snort-sigs] quick question about Snort + ACID on FreeBSD (Tue Sep 02 2003 - 04:41:59 EDT)
• Jade E. Deane
  • Re: [Snort-sigs] Looking for a Yahoo Instant Messenger rule (Mon Sep 15 2003 - 20:27:32 EDT)
  • Re: [Snort-sigs] snort rule update (Tue Sep 02 2003 - 21:26:21 EDT)
• james
  • Re: [Snort-sigs] Using snort to Identify P2P transfers. (Tue Sep 30 2003 - 01:34:36 EDT)
• Jason Alexander
  • Re: [Snort-sigs] DCOMRPC Exploit POC code posted (Wed Sep 17 2003 - 23:06:24 EDT)
• Jason Haar
  • Re: [Snort-sigs] quick rules for new dcom stuff (Thu Sep 11 2003 - 11:43:24 EDT)
• Jason Monroe \
  • [Snort-sigs] Snort Rule signature file request (Wed Sep 17 2003 - 17:00:23 EDT)
• Jayachandran K
  • [Snort-sigs] PortScan Logs (Tue Sep 16 2003 - 15:48:58 EDT)
• Jeanne Mode
  • [Snort-sigs] snort rule update (Mon Sep 01 2003 - 17:44:34 EDT)
• Jeff Nathan
  • [Snort-sigs] UPDATE: flexresp2 (new and improved active response for Snort) (Thu Sep 04 2003 - 05:59:24 EDT)
• Joe Stewart
  • Re: [Snort-sigs] False Positive on sid 10000009 (Mon Sep 29 2003 - 17:30:17 EDT)
  • [Snort-sigs] ProFTPD vulnerability signature development (Wed Sep 24 2003 - 15:18:03 EDT)
• John Impallomeni
  • [Snort-sigs] Looking for a Yahoo Instant Messenger rule (Mon Sep 15 2003 - 17:56:31 EDT)
• Johnathan Norman
  • Re: [Snort-sigs] False positives WEB-CGI calendar access (Tue Sep 30 2003 - 02:46:49 EDT)
  • Re: [Snort-sigs] quick rules for new dcom stuff (Thu Sep 11 2003 - 07:42:44 EDT)
  • Re: [Snort-sigs] snort rule update (Tue Sep 02 2003 - 09:32:48 EDT)
  • Re: [Snort-sigs] repeated signatures? (Tue Sep 02 2003 - 09:37:51 EDT)
• Jon Hart
  • [Snort-sigs] Bluesocket remote admin signature (Mon Sep 15 2003 - 12:57:01 EDT)
  • [Snort-sigs] update docs for sid 528 (Thu Sep 11 2003 - 01:44:09 EDT)
  • [Snort-sigs] false negatives with SID 1882 (userid) (Sun Sep 07 2003 - 17:27:36 EDT)
  • Re: [Snort-sigs] sid 567 and new mail relay signatures (Thu Sep 04 2003 - 19:50:09 EDT)
  • [Snort-sigs] sid 567 and new mail relay signatures (Thu Sep 04 2003 - 15:20:17 EDT)
• Jordi Herrero
  • Re: [Snort-sigs] W32/SWEN.A signature (Fri Sep 26 2003 - 05:43:05 EDT)
• Keen Joseph A1C HQ SSG/XOIN
  • RE: [Snort-sigs] PortScan Logs (Fri Sep 19 2003 - 07:20:26 EDT)
• keshav
  • [Snort-sigs] repeated signatures? (Tue Sep 02 2003 - 03:32:52 EDT)
• Knut Bjornstad
  • [Snort-sigs] Error in http://www.snort.org/snort-db/sid.html?sid=618 and 620 (Tue Sep 23 2003 - 04:21:55 EDT)
• Laura Scott
  • [Snort-sigs] Snort Question (Mon Sep 01 2003 - 16:04:01 EDT)
• Matt Kettler
  • Re: [Snort-sigs] sig question (Wed Sep 24 2003 - 13:30:21 EDT)
  • Re: [Snort-sigs] SNORT HELP (Mon Sep 22 2003 - 11:16:30 EDT)
  • Re: [Snort-sigs] rules licensing (slightly off-topic pondering) (Thu Sep 11 2003 - 16:34:17 EDT)
  • Re: [Snort-sigs] spamassisan (Wed Sep 03 2003 - 16:15:47 EDT)
• Michael Miller
  • RE: [Snort-sigs] Unified output for barnyard (Fri Sep 05 2003 - 15:02:37 EDT)
  • [Snort-sigs] Unified output for barnyard (Thu Sep 04 2003 - 16:19:44 EDT)
• Michael Scheidell
  • [Snort-sigs] spamassisan (Tue Sep 02 2003 - 10:40:01 EDT)
• Milani Paolo
  • RE: [Snort-sigs] rules licensing (Fri Sep 12 2003 - 04:51:35 EDT)
  • [Snort-sigs] rules licensing (Wed Sep 10 2003 - 13:20:58 EDT)
• mos def
  • [Snort-sigs] MUMU (Thu Sep 04 2003 - 06:33:26 EDT)
• Muhammad Faisal Rauf Danka
  • [Snort-sigs] SID 113 (Wed Sep 24 2003 - 03:07:54 EDT)
• Neal Timm
  • [Snort-sigs] Rule Doc 1288 (Thu Sep 18 2003 - 14:18:01 EDT)
• nick black
  • [Snort-sigs] Re: Snort Rule signature file request (Wed Sep 17 2003 - 18:04:36 EDT)
• Nick Duda
  • RE: [Snort-sigs] False Positive on sid 10000009 (Mon Sep 29 2003 - 17:43:22 EDT)
  • [Snort-sigs] sig question (Wed Sep 24 2003 - 11:37:21 EDT)
  • RE: [Snort-sigs] exclude IP from a rule (Tue Sep 23 2003 - 08:38:00 EDT)
  • [Snort-sigs] Kazaa sig (Tue Sep 23 2003 - 07:47:13 EDT)
  • [Snort-sigs] exclude IP from a rule (Tue Sep 23 2003 - 07:50:33 EDT)
• Nick.Cross(at)uk.consulting.fujitsu.com
  • [Snort-sigs] Re: sig for recent massive ICMP scans (Tue Sep 30 2003 - 06:02:36 EDT)
• Nigel Houghton
  • Re: [Snort-sigs] Question about submitting additions to existing rule docs (Wed Sep 24 2003 - 09:50:35 EDT)
  • Re: [Snort-sigs] SID 113 (Wed Sep 24 2003 - 08:56:58 EDT)
  • [Snort-sigs] Re: Rule 498 and 1882 (Wed Sep 03 2003 - 08:12:49 EDT)
• Paul M. Sittler
  • Re: [Snort-sigs] snort rule update (Tue Sep 02 2003 - 09:25:11 EDT)
• Paul Schmehl
  • Re: [Snort-sigs] sig for recent massive ICMP scans (Thu Sep 25 2003 - 23:08:17 EDT)
• pieter claassen
  • [Snort-sigs] W32/SWEN.A signature (Tue Sep 23 2003 - 06:15:11 EDT)
• Richard Ullrich
  • [Snort-sigs] RE: {Snort-sigs] sig for recent massive ICMP's (Thu Sep 25 2003 - 17:11:42 EDT)
• Robert Reid
  • RE: [Snort-sigs] NETBIOS DCERPC ISystemActivator bind attempt (Thu Sep 25 2003 - 20:59:04 EDT)
• Robert Wagner
  • RE: [Snort-sigs] Sig for Worm Swen.a? (Tue Sep 23 2003 - 09:42:35 EDT)
  • [Snort-sigs] Sig for Worm Swen.a? (Mon Sep 22 2003 - 09:20:35 EDT)
  • RE: [Snort-sigs] MUMU (Thu Sep 04 2003 - 08:02:09 EDT)
• Sam Evans
  • Re: [Snort-sigs] quick rules for new dcom stuff (Thu Sep 11 2003 - 09:42:45 EDT)
• Scott Myers
  • [Snort-sigs] Scott Myers is out of the office. (Mon Sep 29 2003 - 10:01:38 EDT)
• Shane Smith
  • [Snort-sigs] P2P GNUTella GET causes lots of false positives (Thu Sep 04 2003 - 15:29:01 EDT)
• Sir Fenix
  • Re: [Snort-sigs] NETBIOS DCERPC ISystemActivator bind attempt (Thu Sep 25 2003 - 13:12:41 EDT)
• Snorkelpuss
  • Re: FW: [Snort-sigs] Looking for a Yahoo Instant Messenger rule (Tue Sep 16 2003 - 10:47:26 EDT)
• SoloNet Newsfeed
  • Re: [Snort-sigs] sig for recent massive ICMP scans (Fri Sep 26 2003 - 09:25:23 EDT)
  • [Snort-sigs] sig for recent massive ICMP scans (Thu Sep 25 2003 - 16:43:37 EDT)
  • Re: [Snort-sigs] DCOMRPC Exploit POC code posted (Tue Sep 16 2003 - 10:29:13 EDT)
• SoloNet Newsfeed Processor
  • [Snort-sigs] DCOMRPC Exploit POC code posted (Mon Sep 15 2003 - 14:14:21 EDT)
• Tony Hernandez
  • [Snort-sigs] Using snort to Identify P2P transfers. (Mon Sep 29 2003 - 11:51:12 EDT)
• Trent Whaley
  • [Snort-sigs] Possible new trojan (Sun Sep 14 2003 - 03:38:30 EDT)
• warchild(at)spoofed.org
  • [Snort-sigs] Re: That movie (Mon Sep 01 2003 - 06:34:49 EDT)
• Wes Young
  • Re: Re: [Snort-sigs] quick question about Snort + ACID on FreeBSD (Wed Sep 03 2003 - 15:21:24 EDT)
• Yackley, Matt
  • [Snort-sigs] Question about submitting additions to existing rule docs (Wed Sep 24 2003 - 09:36:42 EDT)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT