Mailing List Archive For snort-sigs@snort.org Mar 2004 By Author

• Adrian Marsden
  • RE: [Snort-sigs] Netsky.P Signature (Wed Mar 24 2004 - 08:12:42 EST)
• Affeld, James
  • [Snort-sigs] Sid:628 update suggestion (Mon Mar 08 2004 - 19:34:12 EST)
• Alberto Gonzalez
  • Re: [Snort-sigs] Help (Thu Mar 25 2004 - 12:58:58 EST)
• Alejandro Flores
  • Re: [Snort-sigs] Need Some Explanation about Sigs (Mon Mar 29 2004 - 11:48:32 EST)
• Amanda Meyer
  • [Snort-sigs] Pure Not Rule not Supported? (Thu Mar 04 2004 - 13:01:48 EST)
• bmc(at)snort.org
  • [Snort-sigs] snort-rules 2.1.* update @ Mon Mar 22 14:15:27 2004 (Mon Mar 22 2004 - 14:15:27 EST)
  • [Snort-sigs] snort-rules CURRENT update @ Sat Mar 20 20:15:26 2004 (Sat Mar 20 2004 - 20:15:26 EST)
  • [Snort-sigs] Re: Hi (Fri Mar 19 2004 - 11:24:51 EST)
  • [Snort-sigs] Hidden message (Thu Mar 18 2004 - 22:40:21 EST)
  • [Snort-sigs] Re: Hi (Thu Mar 18 2004 - 19:20:44 EST)
  • [Snort-sigs] snort-rules 2.1.* update @ Mon Mar 1 14:15:28 2004 (Mon Mar 01 2004 - 14:15:28 EST)
  • [Snort-sigs] snort-rules CURRENT update @ Mon Mar 1 09:40:19 2004 (Mon Mar 01 2004 - 09:40:19 EST)
  • [Snort-sigs] snort-rules 2.1.* update @ Mon Mar 1 09:40:19 2004 (Mon Mar 01 2004 - 09:40:19 EST)
• Bobby Kuzma
  • [Snort-sigs] False positive found for rule side=1634 (Thu Mar 25 2004 - 17:44:45 EST)
• Brian
  • Re: [Snort-sigs] Need Some Explanation about Sigs (Mon Mar 29 2004 - 13:22:25 EST)
  • Re: [Snort-sigs] Netsky.P Signature (Mon Mar 22 2004 - 19:36:57 EST)
  • Re: [Snort-sigs] Witty signature (Sat Mar 20 2004 - 16:57:10 EST)
  • Re: [Snort-sigs] false positives for attack-response rules (and suggested fix) (Fri Mar 19 2004 - 12:02:10 EST)
  • Re: [Snort-sigs] pcre syntax error for sid 1229 (Fri Mar 19 2004 - 12:00:57 EST)
  • Re: [Snort-sigs] Question about rule 1549 (Mon Mar 15 2004 - 09:04:21 EST)
  • Re: [Snort-sigs] Shouldn't all chat.rules be "policy violation"? (Mon Mar 15 2004 - 08:55:35 EST)
• Cam Beasley, ISO
  • [Snort-sigs] Netsky.P Signature (Mon Mar 22 2004 - 17:24:29 EST)
  • RE: [Snort-sigs] W32.Beagle.J Worm Signature? (Thu Mar 04 2004 - 07:49:36 EST)
• Carl Gibbons
  • Re: [Snort-sigs] snort whitelist (Thu Mar 25 2004 - 11:07:41 EST)
• Chintan Gosalia
  • [Snort-sigs] Sober.D - a new variant (Tue Mar 09 2004 - 17:08:06 EST)
• Christian Robottom Reis
  • [Snort-sigs] Slight mistake in SID 2197 (Wed Mar 24 2004 - 10:16:39 EST)
• Cory Hollingsworth
  • [Snort-sigs] writing signatures from isolated viruses (Thu Mar 25 2004 - 18:06:26 EST)
• Dale L. Handy
  • Re: [Snort-sigs] snort whitelist (Thu Mar 25 2004 - 13:24:59 EST)
  • Re: [Snort-sigs] error running snort (Thu Mar 25 2004 - 13:19:58 EST)
  • Re: [Snort-sigs] pass rules (Thu Mar 04 2004 - 12:41:09 EST)
• Dan Michitsch
  • [Snort-sigs] Phatbot Sigs (Wed Mar 17 2004 - 16:28:18 EST)
• Dr. Christoph Wegener
  • [Snort-sigs] Snort SIG update - false positives on SID 2329 (Fri Mar 26 2004 - 03:57:50 EST)
• Dusty Hall
  • [Snort-sigs] Flex Response + NIC (Mon Mar 29 2004 - 09:41:12 EST)
• Ekblad, Eric M
  • [Snort-sigs] snort rule 2329 (Mon Mar 15 2004 - 17:10:37 EST)
• eric.ferguson(at)jaguartech.com
  • [Snort-sigs] Anonymous Proxy Server Detection (Wed Mar 17 2004 - 17:29:51 EST)
• Erik Fichtner
  • [Snort-sigs] WEB-IIS Translate update... (Wed Mar 31 2004 - 15:53:40 EST)
• Federico Petronio
  • Re: [Snort-sigs] Question about rule 1549 (Wed Mar 17 2004 - 15:17:41 EST)
  • [Snort-sigs] Question about rule 1549 (Fri Mar 12 2004 - 10:14:33 EST)
• frank(at)betaversion.net
  • Re: [Snort-sigs] snort whitelist (Thu Mar 25 2004 - 09:44:34 EST)
• Hugo van der Kooij
  • [Snort-sigs] Duplicate 732 (Thu Mar 25 2004 - 01:47:33 EST)
  • Re: [Snort-sigs] detection time (Sun Mar 14 2004 - 14:45:20 EST)
  • Re: [Snort-sigs] False positive (Fri Mar 12 2004 - 17:06:41 EST)
  • Re: [Snort-sigs] W32.Beagle.J Worm Signature? (Wed Mar 03 2004 - 16:32:17 EST)
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Wed Mar 03 2004 - 14:18:02 EST)
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Tue Mar 02 2004 - 17:13:24 EST)
• Ilango S Allikuzhi
  • [Snort-sigs] snort ID: 525 BAD-TRAFFIC udp port 0 traffic (Mon Mar 08 2004 - 16:15:28 EST)
• Islam Hegazy
  • [Snort-sigs] A question about comparing IDSs (Tue Mar 16 2004 - 04:20:46 EST)
  • [Snort-sigs] detection time (Sun Mar 14 2004 - 10:51:23 EST)
  • [Snort-sigs] detection time (Sat Mar 13 2004 - 07:54:30 EST)
• Jasmine CHUA
  • [Snort-sigs] imesh signature? (Wed Mar 10 2004 - 02:51:06 EST)
• Jason
  • Re: [Snort-sigs] Witty signature (Sun Mar 21 2004 - 10:31:37 EST)
• Jason Haar
  • [Snort-sigs] Shouldn't all chat.rules be "policy violation"? (Mon Mar 15 2004 - 04:26:31 EST)
  • Re: [Snort-sigs] writing signatures from isolated viruses (Thu Mar 25 2004 - 20:57:01 EST)
  • Re: [Snort-sigs] Netsky.P Signature (Tue Mar 23 2004 - 20:30:36 EST)
  • [Snort-sigs] FP on "NETBIOS DCERPC Remote Activation bind attempt" (Mon Mar 15 2004 - 15:35:41 EST)
  • [Snort-sigs] FP on sid=535 (Mon Mar 15 2004 - 10:44:47 EST)
  • [Snort-sigs] Rule naming inconsistancy for C$/D$ SMB access (Mon Mar 15 2004 - 11:15:06 EST)
  • [Snort-sigs] FP with sid=2403 (Sun Mar 14 2004 - 16:55:00 EST)
  • Re: [Snort-sigs] W32.Beagle.J Worm Signature? (Wed Mar 03 2004 - 19:13:52 EST)
• jayarajd
  • [Snort-sigs] query (Thu Mar 18 2004 - 03:44:20 EST)
• Jimmi Andersen
  • Re: [Snort-sigs] Help (Mon Mar 08 2004 - 16:00:21 EST)
• Joe Stewart
  • [Snort-sigs] Phatbot signatures (Mon Mar 15 2004 - 14:59:06 EST)
• John B.
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Wed Mar 03 2004 - 15:28:32 EST)
  • Re: [Snort-sigs] pass rules (Wed Mar 03 2004 - 11:50:52 EST)
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Wed Mar 03 2004 - 10:16:07 EST)
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Tue Mar 02 2004 - 15:44:15 EST)
  • Re: [Snort-sigs] Netsky.c + others? attachment sid (Tue Mar 02 2004 - 13:30:44 EST)
• Jonathon Leszczynski
  • [Snort-sigs] False positive generated on SID 2329 (Fri Mar 19 2004 - 11:05:47 EST)
  • [Snort-sigs] False positive generated on SID 2329 (Tue Mar 09 2004 - 09:16:22 EST)
• JStarke(at)benco.com
  • [Snort-sigs] False positive on SID 1561 (pcap attached) (Thu Mar 11 2004 - 10:10:06 EST)
• King Jr, Charles (Contractor)
  • [Snort-sigs] ACID Response Table Bug (Fri Mar 19 2004 - 12:50:12 EST)
• Kreimendahl, Chad J
  • RE: [Snort-sigs] Anonymous Proxy Server Detection (Thu Mar 18 2004 - 11:33:39 EST)
  • [Snort-sigs] Bad rule... Bad bad rule (Tue Mar 09 2004 - 12:15:29 EST)
• Mark.Schutzmann(at)Omron.com
  • Re: [Snort-sigs] Netsky.P Signature (Tue Mar 23 2004 - 09:03:26 EST)
  • Re: [Snort-sigs] Re: W32.Beagle.J Worm Signature? (Thu Mar 04 2004 - 10:49:42 EST)
  • [Snort-sigs] W32.Beagle.J Worm Signature? (Wed Mar 03 2004 - 15:45:50 EST)
  • Re: [Snort-sigs] Here are some Netsky Worm Sigs (Mon Mar 01 2004 - 16:55:44 EST)
• Martin Dion
  • RE: [Snort-sigs] A question about comparing IDSs (Tue Mar 16 2004 - 09:27:12 EST)
• Matt Kettler
  • Re: [Snort-sigs] Pure Not Rule not Supported? (Mon Mar 08 2004 - 15:14:46 EST)
• MEGA Hospedagem
  • [Snort-sigs] error running snort (Tue Mar 23 2004 - 16:36:22 EST)
  • [Snort-sigs] snort whitelist (Tue Mar 23 2004 - 20:37:15 EST)
• Meinecke, Dennis
  • [Snort-sigs] Any signatures for msclock.exe ? (Tue Mar 23 2004 - 08:43:27 EST)
• Michael Miller
  • RE: [Snort-sigs] query (Fri Mar 19 2004 - 10:36:22 EST)
• Michael Richardson
  • Re: [Snort-sigs] snort whitelist (Wed Mar 31 2004 - 10:23:46 EST)
• Michael Sconzo
  • Re: [Snort-sigs] Pure Not Rule not Supported? (Mon Mar 08 2004 - 11:32:39 EST)
• Michaël Catroux
  • [Snort-sigs] False positive (Wed Mar 10 2004 - 08:39:36 EST)
• Milani Paolo
  • [Snort-sigs] false positives for attack-response rules (and suggested fix) (Fri Mar 19 2004 - 07:56:10 EST)
  • [Snort-sigs] pcre syntax error for sid 1229 (Fri Mar 19 2004 - 07:47:47 EST)
• Nigel Houghton
  • Re: [Snort-sigs] Simple Question!! (Wed Mar 31 2004 - 13:04:53 EST)
  • Re: [Snort-sigs] Simple Question!! (Tue Mar 30 2004 - 10:11:00 EST)
  • Re: [Snort-sigs] Snort SIG update - false positives on SID 2329 (Mon Mar 29 2004 - 09:25:51 EST)
  • Re: [Snort-sigs] Documentation sid 2337 (Fri Mar 12 2004 - 17:49:23 EST)
• Patrick Monfette
  • [Snort-sigs] False positive on rules SID=2182 (Wed Mar 31 2004 - 08:56:24 EST)
• pieter claassen
  • Re: [Snort-sigs] writing signatures from isolated viruses (Thu Mar 25 2004 - 18:26:30 EST)
• Roach4
  • [Snort-sigs] Threshold in signatures (Wed Mar 17 2004 - 08:37:23 EST)
• Rodrigo Albernaz Bezerra
  • [Snort-sigs] Help (Tue Mar 23 2004 - 10:45:15 EST)
• Rodrigo B. Ramos
  • [Snort-sigs] Performance Monitor (Sun Mar 21 2004 - 21:19:00 EST)
• Rowland, Krisa W ERDC-ITL-MS Contractor
  • [Snort-sigs] Hotbar (Thu Mar 18 2004 - 15:58:49 EST)
  • [Snort-sigs] pass rules (Wed Mar 03 2004 - 10:45:57 EST)
• Russell Fulton
  • Re: [Snort-sigs] Witty signature (Sat Mar 20 2004 - 20:47:37 EST)
• RuthAnne Bevier
  • [Snort-sigs] Re: W32.Beagle.J Worm Signature? (Thu Mar 04 2004 - 00:54:32 EST)
• SAM IDS
  • [Snort-sigs] Need Some Explanation about Sigs (Mon Mar 29 2004 - 05:31:21 EST)
  • Re: [Snort-sigs] Simple Question!! (Wed Mar 31 2004 - 12:11:51 EST)
  • [Snort-sigs] Simple Question!! (Mon Mar 29 2004 - 23:18:52 EST)
  • [Snort-sigs] Simple Question!! (Mon Mar 29 2004 - 23:28:31 EST)
• Scott Weller
  • [Snort-sigs] Snort-sigs -- confirmation of subscription -- request 711881 (Mon Mar 29 2004 - 10:21:11 EST)
• Scott Zawalski
  • [Snort-sigs] Netsky.c + others? attachment sid (Mon Mar 01 2004 - 14:41:36 EST)
• Sean Wheeler
  • [Snort-sigs] Some intresting stats on base components of rules (Wed Mar 31 2004 - 14:11:22 EST)
  • [Snort-sigs] some corrections to rules incorrectly refering to a reference resource not located in etc/reference.config (Sun Mar 28 2004 - 10:19:07 EST)
  • [Snort-sigs] Does rules 2159 make sense ? (Sun Mar 28 2004 - 11:25:05 EST)
• Sergey V Soldatov
  • [Snort-sigs] Re: [ISSForum] Witty signature (Thu Mar 25 2004 - 08:45:59 EST)
  • [Snort-sigs] Re: [ISSForum] Witty signature (Tue Mar 23 2004 - 09:45:17 EST)
• Steven Alexander
  • [Snort-sigs] Sid 2343 (Fri Mar 12 2004 - 17:59:41 EST)
  • [Snort-sigs] Sid 2340 (Fri Mar 12 2004 - 17:50:37 EST)
  • [Snort-sigs] Sid 2337, again (Fri Mar 12 2004 - 14:15:32 EST)
  • [Snort-sigs] Sid 2338 (Fri Mar 12 2004 - 14:14:20 EST)
  • [Snort-sigs] Documentation sid 2337 (Fri Mar 12 2004 - 14:03:43 EST)
• todb(at)planb-security.net
  • Re: [Snort-sigs] Witty signature (Sun Mar 21 2004 - 10:18:11 EST)
  • Re: [Snort-sigs] Witty signature (Sat Mar 20 2004 - 12:01:08 EST)
  • [Snort-sigs] Witty signature (Sat Mar 20 2004 - 06:17:35 EST)
• Tom.Mclaughlin(at)kp.org
  • Re: [Snort-sigs] Here are some Netsky Worm Sigs (Mon Mar 01 2004 - 12:20:35 EST)
• Tony Hernandez
  • RE: [Snort-sigs] imesh signature? (Fri Mar 12 2004 - 10:11:37 EST)
• Yaakov Yehudi
  • RE: [Snort-sigs] A question about comparing IDSs (Tue Mar 16 2004 - 07:24:55 EST)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:16 EDT