Hosting Provided By

Mailing List Archive For snort-sigs@snort.org By messages with attachments

[Snort-sigs] web-attacks.rules: many false positives Benjamin Case (Mon Nov 01 2004 - 19:18:49 EST)
1. attacks.csv__charset_ANSI_X3.4-1968 (139780 bytes)
[Snort-sigs] False Positive on rule ID 1365 (WEB-ATTACKS rm command attempt) McKenzie, Omar (Fri Oct 29 2004 - 10:19:30 EDT)
1. sid-template.txt (1179 bytes)
[Snort-sigs] Possible False Positive on SID 2381??? Seth Art (Wed Nov 10 2004 - 11:16:45 EST)
1. checkpoint.log (1512 bytes)
2. bare_byte.log (1512 bytes)
Re: [Snort-sigs] Proposal for addition of author to standard rule listings Frank Knobbe (Fri Nov 05 2004 - 09:50:16 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Proposal for addition of author to standard rule listings Frank Knobbe (Wed Nov 03 2004 - 18:19:10 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Proposal for addition of author to standard rule listings Nigel Houghton (Wed Nov 03 2004 - 14:38:39 EST)
1. part (190 bytes)
Re: [Snort-sigs] Proposal for addition of author to standard rule listings Frank Knobbe (Wed Nov 03 2004 - 14:26:49 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Proposal for addition of author to standard rule listings Nigel Houghton (Wed Nov 03 2004 - 14:03:32 EST)
1. part (190 bytes)
[Snort-sigs] Proposal for addition of author to standard rule listings Frank Knobbe (Wed Nov 03 2004 - 13:43:15 EST)
1. signature.asc (188 bytes)
[Snort-sigs] Re: help us help you Brian (Tue Nov 02 2004 - 11:52:12 EST)
1. parser.pl (1317 bytes)
[Snort-sigs] [Snort-users] help us help you Brian (Mon Nov 01 2004 - 17:30:09 EST)
1. parser.pl (1242 bytes)
[Snort-sigs] help us help you Brian (Mon Nov 01 2004 - 17:30:09 EST)
1. parser.pl (1242 bytes)
Re: [Snort-sigs] Snort signatures for PBX Frank Knobbe (Fri Oct 29 2004 - 15:15:38 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] Possible False Positive Brian Noel (Fri Oct 22 2004 - 16:24:26 EDT)
1. sid-template.txt (1154 bytes)
[Snort-sigs] Additional False Positives for rule 1:498 Coral J. Cook (Wed Oct 27 2004 - 13:09:47 EDT)
1. cook_coral.vcf (328 bytes)
2. smime.p7s (4720 bytes)
[Snort-sigs] false positive report: SID 2517 Lorrin Nelson (Fri Oct 15 2004 - 18:18:41 EDT)
1. false_positive_2517_first50only (10521 bytes)
Re: [Snort-sigs] Thresholds on Policy Rules Frank Knobbe (Thu Oct 14 2004 - 13:10:03 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] false positive on 1:469 ICMP PING NMAP Chris Connell (Wed Oct 13 2004 - 05:27:09 EDT)
1. image001.jpg (86608 bytes)
[Snort-sigs] False Positive Koelewijn, Bert (Thu Oct 14 2004 - 04:01:47 EDT)
1. snmp_fp.pcap (160 bytes)
RE: [Snort-sigs] JPEG / GDI+ DLL exploit sig? Frank Knobbe (Tue Sep 21 2004 - 12:00:52 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] JPEG / GDI+ DLL exploit sig? Frank Knobbe (Mon Sep 20 2004 - 13:06:59 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] " ..MS Terminal Server no encryption.. " misfire? Ben Dugdale (Tue Aug 31 2004 - 12:21:04 EDT)
1. snort.log.1093968900 (630 bytes)
[Snort-sigs] how to see the log from database neha agrawal (Fri Sep 10 2004 - 00:25:32 EDT)
1. Text2_File (6106 bytes)
[Snort-sigs] typot false positives? Joerg Weber (Mon Sep 06 2004 - 07:40:46 EDT)
1. signature.asc (190 bytes)
Re: [Snort-sigs] Re: [Snort-users] VNC Failed Login Nigel Houghton (Thu Sep 02 2004 - 19:03:46 EDT)
1. part (190 bytes)
Re: [Snort-sigs] New idea in change tracking for nets Frank Knobbe (Thu Sep 02 2004 - 18:58:05 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] Re: [Snort-users] VNC Failed Login Frank Knobbe (Thu Sep 02 2004 - 18:42:27 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New idea in change tracking for nets Frank Knobbe (Thu Sep 02 2004 - 18:45:27 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New idea in change tracking for nets Frank Knobbe (Wed Sep 01 2004 - 01:20:00 EDT)
1. signature.asc (188 bytes)
RE: [Snort-sigs] secure connection to bleedingsnort.com Frank Knobbe (Tue Aug 31 2004 - 18:22:13 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] Snorting gzip encoded http source code Abe Use (Fri Aug 27 2004 - 13:40:58 EDT)
1. pcap.cap (11046 bytes)
Re: [Snort-sigs] SSH Scans Frank Knobbe (Mon Aug 23 2004 - 16:30:00 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] SSH Scans Frank Knobbe (Mon Aug 23 2004 - 16:03:36 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New adobe vulnerability Frank Knobbe (Fri Aug 20 2004 - 16:16:04 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New adobe vulnerability Frank Knobbe (Fri Aug 20 2004 - 14:20:29 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] SID 2417 Frank Knobbe (Fri Aug 20 2004 - 13:42:56 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New adobe vulnerability Frank Knobbe (Fri Aug 20 2004 - 12:49:33 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] DHCP Attack Frank Knobbe (Thu Aug 19 2004 - 23:56:55 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] New adobe vulnerability Frank Knobbe (Thu Aug 19 2004 - 23:46:08 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] PNG vulnerabilities and more Joe Stewart (Thu Aug 19 2004 - 17:28:12 EDT)
1. transparent.png (1744 bytes)
[Snort-sigs] Possible False Positive on SID 2383 Lance Boon (Thu Aug 19 2004 - 10:52:50 EDT)
1. smime.p7s (3739 bytes)
Re: [Snort-sigs] Please remove the word "nazi" from the website bmc(at)snort.org (Wed Aug 11 2004 - 15:46:08 EDT)
1. 2_Mime.822 (5912 bytes)
2. GWAVADAT.TXT (40 bytes)
RE: [Snort-sigs] new rules 2 patrick.harper(at)phns.com (Wed Aug 11 2004 - 13:57:16 EDT)
1. 2_Mime.822 (4698 bytes)
2. GWAVADAT.TXT (40 bytes)
RE: [Snort-sigs] new rules 2 patrick.harper(at)phns.com (Wed Aug 11 2004 - 13:46:45 EDT)
1. 2_Mime.822 (4698 bytes)
2. GWAVADAT.TXT (40 bytes)
[Snort-sigs] rukes for worms Joseph Gama (Tue Aug 10 2004 - 14:50:22 EDT)
1. worms.rule (4414 bytes)
[Snort-sigs] new rules 7 Joseph Gama (Tue Aug 10 2004 - 14:48:28 EDT)
1. new7.rule (5948 bytes)
[Snort-sigs] XSS rules Joseph Gama (Tue Aug 10 2004 - 14:51:04 EDT)
1. XSS.rule (5421 bytes)
[Snort-sigs] Fasle Positive for Sid: 1841 Colin Tinker (Tue Aug 03 2004 - 17:56:14 EDT)
1. part (190 bytes)
Re: [Snort-sigs] BleedingSnort.com Updates Frank Knobbe (Tue Aug 03 2004 - 17:47:02 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Unknown IIS Issue Frank Knobbe (Wed Jul 28 2004 - 14:22:10 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Unknown IIS Issue Frank Knobbe (Wed Jul 28 2004 - 14:28:57 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] sigs with asn1 fails Keith A. Pachulski (Wed Jul 28 2004 - 11:51:09 EDT)
1. signature.asc (190 bytes)
Re: [Snort-sigs] sigs with asn1 fails Keith A. Pachulski (Wed Jul 28 2004 - 10:48:07 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] rules in tgz format, no docs Joseph Gama (Thu Jul 15 2004 - 22:13:09 EDT)
1. rules.tgz (55576 bytes)
2. rules2.tgz (3843 bytes)
[Snort-sigs] New rules Joseph Gama (Thu Jul 15 2004 - 22:21:26 EDT)
1. hackedFTPserver.rule (2218 bytes)
2. HalfLifeServer.rule (451 bytes)
3. IE_spyware.rule (3014 bytes)
4. IISrules.rule (3986 bytes)
5. moreSQLinjection.rule (4646 bytes)
6. NMAP.rule (2271 bytes)
[Snort-sigs] Rules for MS-SQL Joseph Gama (Fri Jul 09 2004 - 22:07:42 EDT)
1. SnortRul.arj (510552 bytes)
[Snort-sigs] False positive/negative Rasmus Carstensen (Tue Jul 13 2004 - 05:27:46 EDT)
1. sid-template.txt (1292 bytes)
[Snort-sigs] False positive Antonio Henrique A. P. Oliveira (Wed Jun 30 2004 - 07:20:57 EDT)
1. sid-template.txt (3207 bytes)
2. dovecot.conf (17893 bytes)
[Snort-sigs] False positive on rule SID 2403 NETBIOS SMB Session Setup AndX request unicode username overflow attempt Joseph Gama (Mon Jun 28 2004 - 20:36:01 EDT)
1. DS_Session_Setup_AndX_request_unicode_username_overflow_attempt (1500 bytes)
[Snort-sigs] detect most binary file formats Joseph Gama (Mon Jul 12 2004 - 23:28:49 EDT)
1. downloadBinaryFiles.rule (4518 bytes)
[Snort-sigs] Improved code to create the relationships in MS-SQL Joseph Gama (Mon Jul 12 2004 - 19:49:43 EDT)
1. Snort_data_structure_SQL_Server.png (21219 bytes)
[Snort-sigs] Rules for ject and scob worms Joseph Gama (Thu Jul 08 2004 - 18:55:00 EDT)
1. ject_and_scob.rules (2148 bytes)
2. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER (1428 bytes)
3. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER_2 (1437 bytes)
4. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT (1421 bytes)
5. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_2 (1437 bytes)
6. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_3 (1408 bytes)
7. JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_4 (1425 bytes)
[Snort-sigs] false positive sid:1917 Top, Jonathan (Tue Jun 22 2004 - 12:53:28 EDT)
1. false_positive_sid1917.txt (888 bytes)
RE: [Snort-sigs] signature doesn't match Alexandru Balan (Fri Jun 18 2004 - 09:43:10 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] payload problem Alexandru Balan (Mon Jun 21 2004 - 05:35:15 EDT)
1. signature.asc (308 bytes)
RE: [Snort-sigs] signature doesn't match Alexandru Balan (Fri Jun 18 2004 - 09:47:30 EDT)
1. signature.asc (308 bytes)
[Snort-sigs] signature doesn't match Alexandru Balan (Fri Jun 18 2004 - 07:43:11 EDT)
1. signature.asc (308 bytes)
[Snort-sigs] SID: 2329 - probable false positive Domain Admin (Mon May 31 2004 - 08:08:46 EDT)
1. 32.htm (13149 bytes)
2. 66.htm (13161 bytes)
Re: [Snort-sigs] Problem with SID 2514? Jason (Fri May 28 2004 - 16:02:03 EDT)
1. LSASS.rtf (4146 bytes)
Re: [Snort-sigs] how current are snort signatures ? Frank Knobbe (Thu May 27 2004 - 21:29:18 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Packet Payload database? Rodrigo Ramos (Sat May 22 2004 - 07:48:51 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] SID 498 False Negative Erik Richter (Sat May 08 2004 - 03:37:48 EDT)
1. snort (1178 bytes)
[Snort-sigs] SIDs Keith A. Pachulski (Tue May 04 2004 - 08:56:44 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] Problem to configure IDS with snort-wireless Piergiorgio Venuti (Fri Apr 30 2004 - 06:56:59 EDT)
1. smime.p7s (6063 bytes)
Re: [Snort-sigs] RE: Signature Database Frank Knobbe (Wed Apr 28 2004 - 12:20:11 EDT)
1. signature.asc (188 bytes)
RE: [Snort-sigs] RE: Signature Database Frank Knobbe (Wed Apr 28 2004 - 12:15:47 EDT)
1. signature.asc (188 bytes)
Re: [Snort-sigs] FW: Signature Database Frank Knobbe (Tue Apr 27 2004 - 21:34:49 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] False Positives SID 972 WEB-IIS %2E-asp access Claude Watson (Thu Apr 08 2004 - 09:21:12 EDT)
1. sid-template.txt (8347 bytes)
Re: [Snort-sigs] Help Alberto Gonzalez (Thu Mar 25 2004 - 12:58:58 EST)
1. signature.asc (190 bytes)
[Snort-sigs] Re: Hi bmc(at)snort.org (Fri Mar 19 2004 - 11:24:51 EST)
1. bihwgbhgrm.gif (1216 bytes)
2. MoreInfo.rar (21791 bytes)
[Snort-sigs] imesh signature? Jasmine CHUA (Wed Mar 10 2004 - 02:51:06 EST)
1. PGPexch.rtf.asc (539 bytes)
[Snort-sigs] help Sridhar Govardhan (Fri Feb 27 2004 - 23:29:57 EST)
1. winmail.dat (3086 bytes)
RE: [Snort-sigs] SNORT on Enterprise Linux CACHET Nicolas (Thu Feb 26 2004 - 06:20:23 EST)
1. init_snortd.tar (10240 bytes)
Re: [Snort-sigs] Stopping P2P Traffic Cedric Foll (Mon Oct 13 2003 - 08:28:45 EDT)
1. signature.asc (190 bytes)
Re: [Snort-sigs] Using snort to Identify P2P transfers. Dan Monjar (Wed Oct 01 2003 - 11:50:31 EDT)
1. part (190 bytes)
[Snort-sigs] SNORT HELP acastellani(at)riverwatch.com (Fri Sep 19 2003 - 15:02:07 EDT)
1. pic19169.gif (37893 bytes)
[Snort-sigs] Rule Doc 1288 Neal Timm (Thu Sep 18 2003 - 14:18:01 EDT)
1. 1288.txt (644 bytes)
[Snort-sigs] Netcat telnet attack signature (change 1) Graham, Jeffery A. MAJ - G6 (Thu Sep 11 2003 - 08:51:36 EDT)
1. image001.jpg (17511 bytes)
2. image002.jpg (47198 bytes)
3. image003.jpg (28788 bytes)
Re: [Snort-sigs] Looking for a Yahoo Instant Messenger rule Jade E. Deane (Mon Sep 15 2003 - 20:27:32 EDT)
1. signature.asc (190 bytes)
RE: [Snort-sigs] Unified output for barnyard Bamm Visscher (Fri Sep 05 2003 - 17:53:08 EDT)
1. signature.asc (190 bytes)
Re: [Snort-sigs] snort rule update Jade E. Deane (Tue Sep 02 2003 - 21:26:21 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] Snort Question Laura Scott (Mon Sep 01 2003 - 16:04:01 EDT)
1. SeaMarbl.jpg (6281 bytes)
Re: [Snort-sigs] I don't want scan.log Dan Monjar (Fri Aug 29 2003 - 13:14:07 EDT)
1. part (190 bytes)
[Snort-sigs] I don't want scan.log Dan Monjar (Thu Aug 28 2003 - 11:33:48 EDT)
1. part (190 bytes)
[Snort-sigs] 1378 sig docs Neal Timm (Sun Aug 17 2003 - 22:31:41 EDT)
1. 1378.txt (1830 bytes)
RE: [Snort-sigs] Blaster Alert-False Negative? Jade E. Deane (Sun Aug 17 2003 - 15:07:22 EDT)
1. signature.asc (190 bytes)
Re: FW: [Snort-sigs] DCom RPC attack response sig Bennett Todd (Tue Aug 12 2003 - 14:54:07 EDT)
1. part (190 bytes)
[Snort-sigs] Documentation: sid 1791 Steven Alexander (Wed Aug 06 2003 - 16:58:37 EDT)
1. 1791.txt (1511 bytes)
[Snort-sigs] Snort Sigs Documents Neal Timm (Wed Aug 06 2003 - 10:06:18 EDT)
1. 1975.txt (2052 bytes)
2. 724.txt (2933 bytes)
3. 725.txt (2924 bytes)
4. 726.txt (2919 bytes)
5. 727.txt (2950 bytes)
6. 728.txt (2902 bytes)
7. 735.txt (2927 bytes)
8. 1149.txt (1910 bytes)
[Snort-sigs] Snort rules am attaching the files Neal Timm (Wed Jul 30 2003 - 22:09:11 EDT)
1. 1975.rtf (2468 bytes)
2. 724.txt (3416 bytes)
3. 725.txt (2924 bytes)
4. 726.txt (3402 bytes)
5. 727.txt (3437 bytes)
6. 728.rtf (3386 bytes)
7. 735.rtf (3413 bytes)
[Snort-sigs] Sig for Grim's Ping FTP scanner tool JP Vossen (Sat Aug 02 2003 - 02:01:49 EDT)
1. gpuser.pcap (2191 bytes)
[Snort-sigs] snort-rules with resp Alexandru Balan (Wed Jul 30 2003 - 21:56:30 EDT)
1. signature.asc (188 bytes)
[Snort-sigs] i've recieved your help qkhou (Wed Jul 30 2003 - 06:07:24 EDT)
1. clip_image002.gif (1674 bytes)
RE: [Snort-sigs] DCOM MS03-026 Alpha Rules Paul Tinsley (Tue Jul 29 2003 - 00:57:26 EDT)
1. dcom.rules (2780 bytes)
Re: [Fwd: [Snort-sigs] dce rpc rules] Kevin Pietersma (Fri Jul 25 2003 - 11:17:13 EDT)
1. TEXT.htm (7826 bytes)
[Snort-sigs] Microsoft Security Bulletin MS03-026 signature Kevin Pietersma (Thu Jul 24 2003 - 11:13:10 EDT)
1. TEXT.htm (1079 bytes)
[Snort-sigs] yet more porn docs Steven Alexander (Sat Jul 19 2003 - 17:40:27 EDT)
1. more_porn_docs.zip (6394 bytes)
[Snort-sigs] More porn docs Steven Alexander (Fri Jul 18 2003 - 15:00:30 EDT)
1. 1781.txt (923 bytes)
2. 1782.txt (944 bytes)
3. 1783.txt (932 bytes)
4. 1784.txt (938 bytes)
5. 1785.txt (926 bytes)
6. 1786.txt (930 bytes)
[Snort-sigs] Documentation: porn rules Steven Alexander (Fri Jul 18 2003 - 14:49:47 EDT)
1. porn_rule_docs.zip (6928 bytes)
[Snort-sigs] Documentation: sid 627 Steven Alexander (Fri Jul 18 2003 - 14:14:44 EDT)
1. 627.txt (1346 bytes)
[Snort-sigs] Documentation: sid 626 Steven Alexander (Fri Jul 18 2003 - 14:14:22 EDT)
1. 626.txt (1752 bytes)
[Snort-sigs] Documentation: sid 1133 Steven Alexander (Fri Jul 18 2003 - 13:34:35 EDT)
1. 1133.txt (1235 bytes)
[Snort-sigs] Re: Fw: Cisco Vulnerability Testing Results William Stearns (Fri Jul 18 2003 - 13:40:07 EDT)
1. shadowchode.pcap (472 bytes)
[Snort-sigs] Documentation: sid 619 Steven Alexander (Fri Jul 18 2003 - 13:44:18 EDT)
1. 619.txt (1251 bytes)
[Snort-sigs] Documentation: SID 522 Steven Alexander (Fri Jul 18 2003 - 12:17:35 EDT)
1. 522.txt (2593 bytes)
[Snort-sigs] Documentation: Sid 504 Steven Alexander (Thu Jul 17 2003 - 20:45:30 EDT)
1. 504.txt (1235 bytes)
[Snort-sigs] Documentation: Sid 503 Steven Alexander (Thu Jul 17 2003 - 20:45:06 EDT)
1. 503.txt (1426 bytes)
Re: [Snort-sigs] Re: "bad guy" tagging Michael Boman (Thu Jul 17 2003 - 18:33:57 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] Documentation: SID 279 Steven Alexander (Fri Jul 11 2003 - 14:16:02 EDT)
1. 279.txt (1306 bytes)
[Snort-sigs] Documentation: SID 281 Steven Alexander (Fri Jul 11 2003 - 13:59:06 EDT)
1. 281.txt (1467 bytes)
[Snort-sigs] sigs documentation Chaos (Thu Jun 12 2003 - 15:05:08 EDT)
1. sigs.tgz (7441 bytes)
[Snort-sigs] doc of rules blacharz(at)femur.pl (Sat Jun 07 2003 - 06:56:17 EDT)
1. snort.zip (15636 bytes)
[Snort-sigs] Snort Rules Contributions Nawapong Nakjang (Thu Jun 05 2003 - 22:21:53 EDT)
1. image001.gif (3245 bytes)
2. snort.zip (17108 bytes)
[Snort-sigs] SMB Login Failure Andy Wood (Thu Jun 05 2003 - 13:24:02 EDT)
1. smb_fail.dmp (4996 bytes)
[Snort-sigs] SMB login Failure Andy Wood (Thu Jun 05 2003 - 20:21:28 EDT)
1. smb_fail.dmp (4996 bytes)
[Snort-sigs] T-shirt! Norbert.Kotras(at)at.flextronics.com (Thu Jun 05 2003 - 07:45:12 EDT)
1. docu-common.xls (411136 bytes)
Re: [Snort-sigs] Announcing sp_perl Chris Green (Mon May 12 2003 - 09:05:50 EDT)
1. part (189 bytes)
RE: [Snort-sigs] Issue with rule sid 255 Geoff Craig (Fri Apr 25 2003 - 09:53:43 EDT)
1. dns2 (1452 bytes)
2. dns (1282 bytes)
Re: [Snort-sigs] Strange question Bennett Todd (Wed Apr 23 2003 - 13:17:14 EDT)
1. part (190 bytes)
[Snort-sigs] Strange ICMP Log Ron Shuck (Tue Apr 22 2003 - 10:26:58 EDT)
1. smime.p7s (3099 bytes)
[Snort-sigs] WhiteHat Web Server Fingerprinter Signatures Ryan.Barnett(at)atf.gov (Fri Apr 11 2003 - 09:49:19 EDT)
1. sid-whitehat_fingerprinter.txt (6026 bytes)
fw: [Snort-sigs] Possible rule for samba-2.2.XX exploit Jacob Hurley (Fri Apr 11 2003 - 09:18:03 EDT)
1. samba_exp2.tar.gz (15799 bytes)
RE: [Snort-sigs] SMTP From Comment Overflow rule problems Ron Shuck (Fri Apr 11 2003 - 08:56:02 EDT)
1. smime.p7s (3099 bytes)
Re: [Snort-sigs] Possible rule for samba-2.2.XX exploit Joerg Weber (Fri Apr 11 2003 - 06:21:22 EDT)
1. signature.asc (190 bytes)
[Snort-sigs] SMTP From Comment Overflow rule problems Ron Shuck (Mon Apr 07 2003 - 15:45:50 EDT)
1. smime.p7s (3099 bytes)
[Snort-sigs] Possible rule for samba-2.2.XX exploit Joerg Weber (Thu Apr 10 2003 - 05:31:35 EDT)
1. signature.asc (190 bytes)
Re: [Snort-sigs] Question about sid: 1002 Michael Boman (Fri Apr 04 2003 - 09:15:32 EST)
1. part (233 bytes)
Re: [Snort-sigs] Submitt new rules rmkml (Fri Mar 28 2003 - 04:11:30 EST)
1. xscan_icmp_ping.tcpdump.gz (206 bytes)
Re: [Snort-sigs] Symantec Sig for webdav Frank Knobbe (Wed Mar 19 2003 - 17:54:46 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] [Fwd: Snort Signature for WedDAV] Frank Knobbe (Fri Mar 21 2003 - 11:53:51 EST)
1. signature.asc (188 bytes)
[Snort-sigs] [Fwd: Snort Signature for WedDAV] Frank Knobbe (Thu Mar 20 2003 - 19:13:27 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Wed Mar 19 2003 - 19:20:48 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Wed Mar 19 2003 - 12:47:10 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Bennett Todd (Wed Mar 19 2003 - 11:23:53 EST)
1. part (190 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Tue Mar 18 2003 - 23:47:40 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Tue Mar 18 2003 - 21:54:32 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Tue Mar 18 2003 - 20:41:00 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Tue Mar 18 2003 - 18:11:29 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] WebDAV nessus script? Frank Knobbe (Tue Mar 18 2003 - 17:13:47 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Symantec Sig for webdav Frank Knobbe (Tue Mar 18 2003 - 13:01:07 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Possible WebDAV Exploit Signature. Frank Knobbe (Tue Mar 18 2003 - 12:38:14 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Alleged webdav exploit code Joerg Weber (Tue Mar 18 2003 - 11:00:40 EST)
1. signature.asc (190 bytes)
Re: [Snort-sigs] IIS WebDav sig? Frank Knobbe (Mon Mar 17 2003 - 20:19:32 EST)
1. signature.asc (188 bytes)
[Snort-sigs] Bug in SID 1070 Frank Knobbe (Mon Mar 17 2003 - 20:19:35 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] IIS WebDav sig? Frank Knobbe (Mon Mar 17 2003 - 18:03:53 EST)
1. signature.asc (188 bytes)
[Snort-sigs] Sig for Notes RPC overflow? Frank Knobbe (Mon Mar 17 2003 - 12:55:02 EST)
1. signature.asc (188 bytes)
Re: [Snort-sigs] Signature for Kazaa Lite Anne Carasik (Fri Mar 14 2003 - 10:56:28 EST)
1. part (190 bytes)
Re: [Snort-sigs] Sendmail crackaddr header overflow sig - Dozens of False Positives Bennett Todd (Sun Mar 09 2003 - 11:50:04 EST)
1. part (190 bytes)
[Snort-sigs] snort local rules help?? Nick Fear (Wed Mar 05 2003 - 12:12:06 EST)
1. wink.gif (373 bytes)
Re: [Snort-sigs] Sendmail crackaddr header overflow sigs Joerg Weber (Wed Mar 05 2003 - 08:51:58 EST)
1. signature.asc (190 bytes)

Last message date: Wed Nov 24 2004 - 17:04:40 EST
Archived on: Wed Aug 23 2006 - 14:09:15 EDT

3180 messages sort by: [ thread ] [ author ] [ date ] [ subject ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:09:15 EDT