Snort: by thread
1913 messages
starting Dec 31 03 and
ending Mar 31 04
Date index |
Thread index |
Author index
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Brice B (Dec 31)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Dec 31)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jim Brown (Jan 03)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Jan 03)
- RE: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Chris N (Jan 02)
- <Possible follow-ups>
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Simon Smith (Dec 31)
- Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
- tcp resets on stealth interface agnelo d (Jan 01)
- Re: tcp resets on stealth interface Edin Dizdarevic (Jan 01)
- Re: Oinkmaster Oddity Andreas Östling (Jan 01)
- Win32 - multiple interfaces? Rich Adamson (Jan 01)
- RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
- RE: Win32 - multiple interfaces? Rich Adamson (Jan 01)
- Re: Win32 - multiple interfaces? Scot Scot (Jan 01)
- Re: Win32 - multiple interfaces? Rich Adamson (Jan 01)
- RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
- RE: Win32 - multiple interfaces? Rich Adamson (Jan 01)
- RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
- Re: TCP Data Offset is less than 5 GDHough (Jan 01)
- upgrade to 2.1 Bryan Irvine (Jan 01)
- Re: upgrade to 2.1 Paul Schmehl (Jan 01)
- Re: upgrade to 2.1 Chris Reid (Jan 01)
- Win32 v2.1 Flex not correct? Rich Adamson (Jan 01)
- libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)
- <Possible follow-ups>
- libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)
- Re: libpcre.so.0 error loading shared libraries George Theall (Jan 01)
- barnyard with postgres Bryan Irvine (Jan 01)
- RE: Snort-users digest, Vol 1 #3871 - 5 msgs Guy Witney Krocker (Jan 01)
- BackDoor Subsevsen Biswas, Proneet (Jan 01)
- I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. soldier Mx (Jan 02)
- Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Edin Dizdarevic (Jan 02)
- Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Michael Boman (Jan 02)
- diferences between the rules of whitehats.com and snort.org soldier Mx (Jan 02)
- unknown:eth0 agnelo d (Jan 02)
- Re: unknown:eth0 Paul Schmehl (Jan 02)
- Snort, remote logging, unified logs, mudpit and me! Russell Packer (Jan 02)
- Ofcom test Russell Packer (Jan 02)
- Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)
- Re: Snort, Mudpit, Unified logs and me... Dirk Geschke (Jan 02)
- Re: Snort, Mudpit, Unified logs and me... Bamm Visscher (Jan 02)
- Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 03)
- Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 05)
- <Possible follow-ups>
- RE: Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)
- http_inspect question. A.L. (Jan 02)
- Re: http_inspect question. Jeremy Hewlett (Jan 05)
- Re: Managing many sensors Kristofer T. Karas (Jan 02)
- RE: Managing many sensors robert schwartz (Jan 06)
- <Possible follow-ups>
- Re: Managing many sensors Andreas Östling (Jan 02)
- compiling snort-2.1 Victor Lamptey (Jan 02)
- <Possible follow-ups>
- compiling snort-2.1 Victor Lamptey (Jan 02)
- Re: Snort-users digest, Vol 1 #3872 - 13 msgs Russell Fulton (Jan 02)
- 2.1 compilation issues on Solaris and *BSD Erek Adams (Jan 02)
- snort-2.1.0 and barnyard Christian Beine (Jan 02)
- <Possible follow-ups>
- snort-2.1.0 and barnyard Christian Beine (Jan 05)
- Edit Snort's Source Code John Steele (Jan 03)
- <Possible follow-ups>
- Edit Snort's Source Code John Steele (Jan 05)
- cannot resolve host error Topper (Jan 04)
- Re: cannot resolve host error Rahul (Jan 04)
- RE: cannot resolve host error Michael Steele (Jan 05)
- Message not available
- Re: cannot resolve host error Topper (Jan 04)
- Re: cannot resolve host error Rahul (Jan 04)
- Message not available
- Re: cannot resolve host error Topper (Jan 05)
- Re: snort webmin configuration GDHough (Jan 05)
- Re: Linux: RPM's 2.0.6 and 2.1.0 Updates? Daniel Wittenberg (Jan 05)
- <Possible follow-ups>
- Re: RE: http\_inspect alerts Jeremy Hewlett (Jan 06)
- Re: Detection of subnet scan activity Matt Kettler (Jan 05)
- Re: Gigabit IDS Erek Adams (Jan 06)
- Re: Gigabit IDS twig les (Jan 06)
- RE: HELP!!!!! Compiling Snort with MYSQL Peter Robb (Jan 06)
- Re: HELP!!!!! Compiling Snort with MYSQL Dirk Geschke (Jan 06)
- RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
- RE: where can i find ms_unicode_generator Matt Kettler (Jan 06)
- RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
- Re: where can i find ms_unicode_generator Jeremy Hewlett (Jan 06)
- RE: where can i find ms_unicode_generator Matt Kettler (Jan 06)
- <Possible follow-ups>
- where can i find ms_unicode_generator Koay Yee Chen (Jan 06)
- <Possible follow-ups>
- 2.1.0 Compile Probs On Windows snort user (Jan 06)
- RE: mysql_error: Access denied for user: 'snort@localhost' (Using pas sword: YES) Michael Steele (Jan 06)
- <Possible follow-ups>
- RE: Can't connect to local MySQL server through socket Keaton, Lindamaria (Jan 06)
- RE: Can't connect to local MySQL server through socket CGhercoias (Jan 06)
- <Possible follow-ups>
- neuronal network over snort Ernesto (Jan 08)
- Re: snort signature updates Michael Boman (Jan 06)
- Re: threshold in rule definition and in threshold.conf Jeremy Hewlett (Jan 07)
- Re: threshold in rule definition and in threshold.conf Nerijus Krukauskas (Jan 12)
- Re: Dual Processor Machines Ben Nelson (Jan 07)
- Re: Dual Processor Machines Michael Stone (Jan 13)
- <Possible follow-ups>
- RE: Dual Processor Machines PPowenski (Jan 08)
- Re: Dual Processor Machines fiorenzi () tiscali it (Jan 12)
- RE: Dual Processor Machines PPowenski (Jan 13)
- Re: Build problem with Snort CVS Erek Adams (Jan 07)
- Re: Build problem with Snort CVS Bamm Visscher (Jan 07)
- Re: Build problem with Snort CVS Michael W. Lucas (Jan 07)
- Re: Build problem with Snort CVS Michael Boman (Jan 12)
- Re: Build problem with Snort CVS Erek Adams (Jan 13)
- <Possible follow-ups>
- RE: No alerts? Russell Packer (Jan 08)
- Re: Snort Inline on Redhat 9 tslighter (Jan 08)
- Re: Snort Inline on Redhat 9 tslighter (Jan 08)
- <Possible follow-ups>
- RE: Which Linux distro for a Win32 Snort admin? Russell Packer (Jan 08)
- Re: Which Linux distro for a Win32 Snort admin? Leonard Miller (Jan 08)
- Re: Which Linux distro for a Win32 Snort admin? Daniel Wittenberg (Jan 08)
- RE: Which Linux distro for a Win32 Snort admin? Robert Reid (Jan 09)
- Re: MS-SQL Worm propagation -false positive Martin Olsson (Jan 09)
- <Possible follow-ups>
- RE: MS-SQL Worm propagation -false positive larosa, vjay (Jan 08)
- RE: MySql + Snort config errors (yet again) robert schwartz (Jan 08)
- <Possible follow-ups>
- Re: MySql + Snort config errors (yet again) Leonard Miller (Jan 08)
- <Possible follow-ups>
- RE: Segmentation Fault Sudhakar Gummadi (Jan 09)
- Re: RE: Segmentation Fault Martin Roesch (Jan 10)
- Segmentation Fault Sudhakar Gummadi (Jan 12)
- Re: Segmentation Fault Erek Adams (Jan 08)
- Re: Segmentation Fault SN ORT (Jan 12)
- Re: Segmentation Fault Josh . Sakofsky (Jan 12)
- <Possible follow-ups>
- Snort performance SN ORT (Feb 02)
- RE: Snort performance Michael Steele (Feb 02)
- Snort Performance Laura (Mar 26)
- RE: Snort Performance Jim Hendrick (Mar 26)
- Re: Snort Performance Rodrigo B. Ramos (Mar 26)
- Re: Snort Performance Mark . Schutzmann (Mar 26)
- RE: Snort Performance Laura (Mar 26)
- Re: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
- Re: [Snort-users] AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Scott Zawalski (Jan 09)
- Re: Why is this rule still being tripped? Martin Roesch (Jan 10)
- Re: Why is this rule still being tripped? Orion Poplawski (Jan 13)
- Re: Why is this rule still being tripped? Martin Roesch (Jan 17)
- Re: Why is this rule still being tripped? Orion Poplawski (Jan 19)
- Re: Why is this rule still being tripped? Orion Poplawski (Jan 13)
- Re: Question about var SERVICE_PORTS Andreas Östling (Jan 09)
- <Possible follow-ups>
- RE: Question about var SERVICE_PORTS Schmehl, Paul L (Jan 09)
- RE: Question about var SERVICE_PORTS Andreas Östling (Jan 09)
- <Possible follow-ups>
- snort reference Jinqiao Yu (Jan 11)
- snort reference Jinqiao Yu (Jan 13)
- Re: snort reference Matt Kettler (Jan 13)
- Re: Some please help me.. Erek Adams (Jan 12)
- <Possible follow-ups>
- Re: Please help me... James Nonya (Jan 12)
- <Possible follow-ups>
- Re: ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.3alpha for snort 2.1.0 released Sandro Poppi (Jan 12)
- Re: simple snort pass Chris Keladis (Jan 11)
- <Possible follow-ups>
- RE: taps What Brand and Where in network CGhercoias (Jan 12)
- RE: taps What Brand and Where in network PPowenski (Jan 12)
- RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
- RE: taps What Brand and Where in network Ron Shuck (Jan 12)
- RE: taps What Brand and Where in network Peters, Michael D. (Jan 12)
- RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
- RE: taps What Brand and Where in network Petriz, Pablo (Jan 16)
- <Possible follow-ups>
- SnortCenter v1.0 RC1 byte_test work around Richard Pesce (Jan 12)
- Re: Upgrade to 2.1.0 help needed Dave C (Jan 12)
- Re: Upgrade to 2.1.0 help needed tslighter (Jan 12)
- Re: Upgrading from 2.0 to 2.1? Michael Boman (Jan 12)
- <Possible follow-ups>
- Upgrading from 2.0 to 2.1? Steve Jacobsen (Jan 12)
- Re: BUG in fpdetect.c (2.1.0)? Andreas Östling (Jan 12)
- Re: numbers meaning Brian (Jan 12)
- <Possible follow-ups>
- RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 14)
- RE: Problems with snort-2.1.0 Andreas Östling (Jan 14)
- RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 15)
- Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
- RE: Problems with snort-2.1.0 Andreas Östling (Jan 14)
- RE: Problems with snort-2.1.0 Schmehl, Paul L (Jan 14)
- RE: Problems with snort-2.1.0 DM (Jan 14)
- Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
- <Possible follow-ups>
- Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 12)
- Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
- Re: https and http_inspect gives *many* false positives Jason (Jan 12)
- Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
- Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 13)
- Re: snort ssl plug-in Matt Kettler (Jan 13)
- Re: snort ssl plug-in Derya Sezen (Jan 13)
- RE: snort ssl plug-in robert schwartz (Jan 14)
- <Possible follow-ups>
- Re: snort ssl plug-in Jason Haar (Jan 13)
- Re: Snort Implementation Matt Kettler (Jan 13)
- <Possible follow-ups>
- Snort Implementation yyyyyy yaher (Jan 13)
- Snort Implementation yyyyyy yaher (Jan 13)
- <Possible follow-ups>
- Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
- Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
- <Possible follow-ups>
- Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
- RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)
- Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
- Re: Snort 2.1.0 - Shutting up http_inspect on non web servers Owen McCusker (Jan 14)
- RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)
- Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
- <Possible follow-ups>
- There is no /var/log/snort/alert file d_greenjr (Jan 15)
- <Possible follow-ups>
- RE: Problems with snort-2.1.0] Schmehl, Paul L (Jan 13)
- Re: Where can i get a Simlation attack to see if all my rules work! ? Dirk Geschke (Jan 14)
- <Possible follow-ups>
- RE: Where can i get a Simlation attack to see if all my rules work! ? Button, William (STRA) (Jan 14)
- Re: Upgrade from 2.0.1 error? Dirk Geschke (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 twig les (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
- Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
- <Possible follow-ups>
- Snort 2.0.6 - Error with a working rule under Snort-2.0.2 CGhercoias (Jan 15)
- <Possible follow-ups>
- Re: Error Installing PHP Leonard Miller (Jan 14)
- RE: Error Installing PHP Bradberry, John (Jan 15)
- <Possible follow-ups>
- Re: WEB-IIS view source via translate header false alarms James Nonya (Jan 14)
- Re: Perfmonitor...does anyone really use this thing? Andreas Östling (Jan 14)
- Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 14)
- Re: Perfmonitor...does anyone really use this thing? sam (Jan 15)
- Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 15)
- Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 14)
- Re: Simple questions. Jeremy Hewlett (Jan 14)
- Message not available
- Re: Simple questions. Matt Kettler (Jan 14)
- Message not available
- Re: Stupid question re: message archives ... Matt Kettler (Jan 14)
- Re: Tell snort to resolve ip or use /etc/hosts? james (Jan 14)
- Re: Tell snort to resolve ip or use /etc/hosts? Matt Kettler (Jan 14)
- <Possible follow-ups>
- RE: Tell snort to resolve ip or use /etc/hosts? SRH-Lists (Jan 14)
- Re: Please help with this strangeness Erek Adams (Jan 15)
- Re: File Size Limit Exceeded - error Erek Adams (Jan 15)
- <Possible follow-ups>
- Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
- RE: Question-using perl with snort-creating a user friendly interface Schmehl, Paul L (Jan 15)
- Re: Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
- <Possible follow-ups>
- Re: no alerts logged M. Morgan (Jan 15)
- Re: no alerts logged Mat Harris (Jan 15)
- portscan but no rules - Was: Re: no alerts logged Mat Harris (Jan 16)
- Re: no alerts logged Mat Harris (Jan 15)
- RE: no alerts logged Michael Chapman (Jan 15)
- RE: no alerts logged Michael Chapman (Jan 16)
- RE: no alerts logged Michael Chapman (Jan 16)
- <Possible follow-ups>
- Re: Is ACID Dead? Scott Skrogstad (Jan 15)
- RE: Is ACID Dead? McCash, John (Jan 15)
- RE: Is ACID Dead? Owen McCusker (Jan 15)
- Re: Is ACID Dead? Bamm Visscher (Jan 15)
- RE: Is ACID Dead? Owen McCusker (Jan 15)
- RE: Is ACID Dead? CGhercoias (Jan 15)
- Re: Is ACID Dead? Michael Anderson (Jan 15)
- RE: Is ACID Dead? Richard Pesce (Jan 15)
- Re: Is ACID Dead? John Creegan (Jan 15)
- Re: Is ACID Dead? Owen McCusker (Jan 16)
- RE: Is ACID Dead? Dave Randolph (Jan 16)
- RE: Is ACID Dead? Josh Berry (Jan 16)
- Re: Is ACID Dead? Jason Alexander (Jan 16)
- RE: Is ACID Dead? Josh Berry (Jan 16)
- RE: Is ACID Dead? Dave Randolph (Jan 16)
- Re: Is ACID Dead? Roman Danyliw (Jan 16)
- Re: Is ACID Dead? Owen McCusker (Jan 16)
- Re: Is ACID Dead? lists (Jan 16)
- RE: Is ACID Dead? Michael Pacheco (Jan 16)
- Re: Differences Between Versions Martin Olsson (Jan 16)
- unsubscribe Pete (Jan 16)
- Re: Hey, how could i delete the alert log cuz /var is full Matt Kettler (Jan 16)
- Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)
- <Possible follow-ups>
- Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)
- RE: Hey, how could i delete the alert log cuz /var is full Bell, Josh (Jan 16)
- Re: Snort, Logging, and Windows 2000 Rob Lewis (Jan 16)
- Re: [Fwd: Re: Error while compile snort with mysql version 4.0.17] Dirk Geschke (Jan 16)
- Re: ERROR: unknown preprocessor "http_decode" james (Jan 16)
- Re: ERROR: unknown preprocessor "http_decode" Erek Adams (Jan 16)
- <Possible follow-ups>
- RE: ERROR: unknown preprocessor "http_decode" Warner Joseph (Jan 16)
- RE: ERROR: unknown preprocessor "http_decode" Schmehl, Paul L (Jan 18)
- Re: messages to syslog at startup. Martin Roesch (Jan 17)
- Re: Snort setting off my pager Jim Brown (Jan 17)
- <Possible follow-ups>
- RE: Snort setting off my pager Nick Duda (Jan 16)
- Re: Compiling snort and mysql Dirk Geschke (Jan 16)
- Re: Unified log format. Martin Roesch (Jan 17)
- <Possible follow-ups>
- RE: Yahoo Instant Messenger Biswas, Proneet (Jan 18)
- Re: Yahoo Instant Messenger Ravi (Jan 19)
- RE: Yahoo Instant Messenger CGhercoias (Jan 19)
- RE: Yahoo Instant Messenger Biswas, Proneet (Jan 19)
- <Possible follow-ups>
- RE: the alert log is getting so huge in minutes! Hudak, Tyler (Jan 19)
- Re: Hey the option Dsize is useful against the buffer overflows ? Matt Kettler (Jan 19)
- <Possible follow-ups>
- App Eventlog: missing event id Romulo M. Cholewa (Jan 22)
- Re: Is IPTables blocking Snort detection? Dirk Geschke (Jan 19)
- Message not available
- Re: Is IPTables blocking Snort detection? Matt Kettler (Jan 19)
- Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Dirk Geschke (Jan 19)
- Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
- Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Jeff Nathan (Feb 11)
- Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
- EasyIDS updated Gregory W. Ratcliff (Jan 19)
- Re: Snort 2.1.0, getting mixed up signatures. Jason Haar (Feb 08)
- Re: Snort 2.1.0, getting mixed up signatures. Erek Adams (Feb 09)
- Re: Snort 2.1.0, getting mixed up signatures. Skip Carter (Feb 09)
- <Possible follow-ups>
- Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 21)
- Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 22)
- Re: Snort with Oracle Rick Coloccia (Jan 20)
- Re: Snort with Oracle Matt Kettler (Jan 20)
- <Possible follow-ups>
- RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
- RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
- Re: Signature question... Jeff Penn (Jan 27)
- RE: Frontends for Snort Jeff Dell (Jan 21)
- <Possible follow-ups>
- RE: Frontends for Snort Kaplan, Andrew H. (Jan 21)
- RE: Frontends for Snort Grime, Richard S (Jan 21)
- Re: Frontends for Snort deny1 (Jan 21)
- RE: Frontends for Snort Brian Whitehead (Jan 22)
- RE: Frontends for Snort Jeff Dell (Jan 22)
- Re: Frontends for Snort deny1 (Jan 22)
- Re: How do I supress file-logging but not database-logging? Dirk Geschke (Jan 21)
- Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
- Re: How do I supress file-logging but not database-logging? Bamm Visscher (Jan 21)
- Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
- Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
- Re: How do I supress file-logging but not database-logging? Frank Knobbe (Jan 21)
- <Possible follow-ups>
- RE: Portscans not displayed in ACID? Peters, Michael D. (Jan 23)
- Re: payload clarification Jeremy Hewlett (Jan 31)
- Re: Truncated TCP options? MH (Jan 22)
- <Possible follow-ups>
- Truncated Tcp Options? Rich Adamson (Mar 15)
- Re: Truncated Tcp Options? ypwhich (Mar 16)
- Re: Truncated Tcp Options? Rich Adamson (Mar 16)
- Re: Truncated Tcp Options? Chris Green (Mar 16)
- Re: Truncated Tcp Options? Rich Adamson (Mar 16)
- Re: Truncated Tcp Options? ypwhich (Mar 16)
- Re: Using snort to listen on a nic without an IP james (Jan 21)
- Re: Using snort to listen on a nic without an IP Frank Knobbe (Jan 21)
- <Possible follow-ups>
- Re: Using snort to listen on a nic without an IP M. Morgan (Jan 21)
- RE: Using snort to listen on a nic without an IP Schmehl, Paul L (Jan 21)
- RE: Using snort to listen on a nic without an IP List Mail (Jan 21)
- Using snort to listen on a nic without an IP Mark Reis (Jan 22)
- RE: Using snort to listen on a nic without an IP Vigilant Labs (Jan 22)
- Re: Libprelude working with snort 2.1.x Martin Olsson (Jan 22)
- Re: Re: [Snort-users] Libprelude working with snort 2.1.x Chris Green (Jan 22)
- Re: Snort 2.1.0 rules won't update in SnortCenter Jason Alexander (Jan 23)
- <Possible follow-ups>
- RE: Snort 2.1.0 rules won't update in SnortCenter Jeff Evenson (Jan 27)
- <Possible follow-ups>
- Re: Attack Detection: Then what M. Morgan (Jan 25)
- RE: snort: database: mysql_error: Duplicate entry Chris N (Jan 26)
- <Possible follow-ups>
- RE: snort: database: mysql_error: Duplicate entry Warner Joseph (Jan 30)
- RE: snort: database: mysql_error: Duplicate entry Hutchinson, Andrew (Jan 31)
- <Possible follow-ups>
- RE: Alert Testing Warner Joseph (Jan 23)
- FW: Alert Testing Warner Joseph (Jan 27)
- <Possible follow-ups>
- RE: Snort MySQL problem Neil Fryer (Jan 23)
- RE: Snort MySQL problem Neil Fryer (Jan 23)
- RE: Snort MySQL problem Schmehl, Paul L (Jan 26)
- RE: Snort MySQL problem Schmehl, Paul L (Jan 29)
- <Possible follow-ups>
- Re: cost/benefit analysis of running Snort M. Morgan (Jan 30)
- <Possible follow-ups>
- Re: alert_syslog plugin problem James Nonya (Jan 26)
- Re: non-root user cannot run snort Edin Dizdarevic (Jan 26)
- Re: non-root user cannot run snort Erwin Van de Velde (Jan 26)
- Re: non-root user cannot run snort d_greenjr (Jan 26)
- Re: non-root user cannot run snort Robert Storey (Jan 27)
- Re: non-root user cannot run snort Robert Storey (Jan 27)
- Re: non-root user cannot run snort Matt Kettler (Jan 27)
- Re: non-root user cannot run snort Robert Storey (Jan 27)
- Re: non-root user cannot run snort Edin Dizdarevic (Jan 29)
- Re: non-root user cannot run snort Edin Dizdarevic (Jan 27)
- Re: non-root user cannot run snort Matt Kettler (Jan 27)
- Re: non-root user cannot run snort Brian (Jan 31)
- <Possible follow-ups>
- RE: non-root user cannot run snort Grime, Richard S (Jan 26)
- location to download barnyard samwun (Jan 26)
- Message not available
- Re: Snort readng across switches? Matt Kettler (Jan 26)
- <Possible follow-ups>
- Compromising Packet... Dusty Hall (Jan 26)
- RE: Compromising Packet... Dusty Hall (Jan 26)
- Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Joe Stewart (Jan 28)
- Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? sam (Jan 28)
- Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)
- RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Brian Gregorcy (Jan 28)
- Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? sam (Jan 28)
- Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)
- <Possible follow-ups>
- RE: New Worm / Virus - WORM_MIMAIL.R? CGhercoias (Jan 27)
- RE: New Worm / Virus - WORM_MIMAIL.R? Brian M. Diehl (Jan 27)
- <Possible follow-ups>
- (no subject) tony . williams (Jan 26)
- (no subject) Finney Charles E (Feb 16)
- (no subject) sumit vora (Feb 22)
- Re: (no subject) Keith W. McCammon (Feb 22)
- (no subject) marcio (Feb 23)
- (no subject) Kris (Mar 30)
- <Possible follow-ups>
- It is like "guardian" but then not. Try "GateKeeper". Alon Noy (Jan 28)
- <Possible follow-ups>
- RE: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Jim Clews (Jan 27)
- RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Martin Jr., D. Michael (Jan 28)
- RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? SN ORT (Feb 02)
- Re: Where Can i get any open standart for IDS Keith W. McCammon (Jan 27)
- Re: 'mysql' support is not compiled...OH YES IT IS Bamm Visscher (Jan 27)
- Re: 'mysql' support is not compiled...OH YES IT IS chris (Jan 27)
- Re: 'mysql' support is not compiled...OH YES IT IS Matt Southworth (Jan 27)
- <Possible follow-ups>
- Question Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
- <Possible follow-ups>
- Excluding Ip from Alert logging! Gabriel Moricz (Jan 27)
- Re: Excluding Ip from Alert logging! Edin Dizdarevic (Jan 27)
- Re: Status of IDMEF support? Joe McAlerney (Jan 27)
- Re: Needed: sample stunnel 4.04 stunnel.conf files twig les (Jan 28)
- RE: Needed: sample stunnel 4.04 stunnel.conf files robert schwartz (Jan 28)
- same tcpdump.log to remote log server instead of local sensor samwun (Jan 27)
- Re: same tcpdump.log to remote log server instead of local sensor Frank Knobbe (Jan 28)
- RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
- RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
- RE: same tcpdump.log to remote log server instead oflocal sensor Frank Knobbe (Jan 30)
- Re: same tcpdump.log to remote log server instead of local sensor Frank Knobbe (Jan 28)
- <Possible follow-ups>
- snort 2.1.0 bugs ? Koay Yee Chen (Jan 27)
- Re: Snort errors on startup -- rules related? Josh Berry (Jan 28)
- <Possible follow-ups>
- RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
- RE: Multihomed Sensor Dean Davis (Jan 28)
- RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
- RE: Multihomed Sensor DeBerry, Casey (Jan 28)
- RE: Multihomed Sensor mailing-list (Jan 31)
- Re: 2 class C network Jeff (Jan 31)
- Re: Why resp and session option Dont work!? Jeremy Hewlett (Jan 31)
- Re: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 28)
- Re: Temporary "solution" to MyDoom worm Matt Kettler (Jan 31)
- Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
- <Possible follow-ups>
- RE: Temporary "solution" to MyDoom worm snort-ml (Jan 30)
- Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
- Re: preprocessor flow-portscan Chris Green (Jan 30)
- Re: Multi-homed Sensor Michael Boman (Jan 30)
- RE: Multi-homed Sensor Jim Hendrick (Jan 30)
- Re: Multi-homed Sensor Marc Spitzer (Jan 31)
- Re: About the ruletype syntax Brian (Jan 30)
- Re: Order on snort rules Edin Dizdarevic (Jan 30)
- Re: Order on snort rules Jeremy Hewlett (Jan 30)
- RE: Installing Snort on SuSe Linux machine KS (Jan 30)
- Re: Installing Snort on SuSe Linux machine Tim Sutinen (Jan 31)
- Re: Installing Snort on SuSe Linux machine Alexandr (Jan 31)
- <Possible follow-ups>
- Any known isssues Ravi (Jan 31)
- <Possible follow-ups>
- Re: Testing Snort-inline without any rules aravind babu (Jan 30)
- Re: Snort-inline in embedded device Matt Kettler (Jan 31)
- Re: Snort-inline in embedded device ravivsn (Jan 31)
- <Possible follow-ups>
- Why logging the attacked one? Gabriel Moricz (Jan 30)
- RE: Why logging the attacked one? Erickson Brent W KPWA (Jan 30)
- Why logging the attacked one? Gabriel Moricz (Jan 31)
- Re: snort 2.1 and stream4 Matt Kettler (Jan 30)
- <Possible follow-ups>
- remote tcpdump output & analysis (database) McCash, John (Jan 31)
- Re: remote tcpdump output & analysis (database) Dirk Geschke (Jan 31)
- Re: Off topic- Your Favorite Linux Distro David Alonso De La Vega Tapage (Jan 30)
- Re: Off topic- Your Favorite Linux Distro Kristofer T. Karas (Jan 30)
- Re: Off topic- Your Favorite Linux Distro Mark Nipper (Jan 31)
- Re: Off topic- Your Favorite Linux Distro Paul Schmehl (Jan 31)
- Re: Off topic- Your Favorite Linux Distro Tim Sutinen (Feb 01)
- <Possible follow-ups>
- RE: Off topic- Your Favorite Linux Distro Christopher Lyon (Jan 30)
- RE: Off topic- Your Favorite Linux Distro Erek Adams (Jan 31)
- Re: Off topic- Your Favorite Linux Distro M. Morgan (Feb 01)
- Re: Quick stupid question Michael Boman (Jan 30)
- Re: Quick stupid question ravivsn (Jan 31)
- Re: Quick stupid question Dragos Ruiu (Jan 31)
- Re: Quick stupid question ravivsn (Jan 31)
- Re: Segfault with snort 2.0 James Edwards (Jan 31)
- Re: Segfault with snort 2.0 Erek Adams (Jan 31)
- Re: libmysqlclient.so.12 error when I start snort. Dirk Geschke (Jan 31)
- <Possible follow-ups>
- [REPOST] Snort not loging on MySql Di Fresco Marco (Feb 02)
- RE: Please help here Mark E. Donaldson (Jan 31)
- Re: Hopefully someone else has a better grasp on HTTP/_Inspect Erek Adams (Jan 31)
- <Possible follow-ups>
- How to modify the signature reference in sid-msg.map Jinqiao Yu (Jan 31)
- Re: idea for detection of rouge nodes? James Edwards (Feb 01)
- RE: idea for detection of rouge nodes? Fred McFeeters (Feb 02)
- How are alerts being logged? Peggy Kam (Feb 02)
- Re: How are alerts being logged? Erek Adams (Feb 02)
- Re: regarding snort rules Ravi (Feb 01)
- W32.Novarg.A@mm worm Work!, but.... Snortty (Feb 02)
- Re: [Looking for] Open source reporting tool Michael Boman (Feb 01)
- <Possible follow-ups>
- Re: [Looking for] Open source reporting tool Aaron (Feb 02)
- <Possible follow-ups>
- Re: Ethernet Tap Question M. Morgan (Feb 02)
- RE: Ethernet Tap Question CGhercoias (Feb 02)
- Re: Viirus rules Matt Kettler (Feb 02)
- Re: snort and mysql Edin Dizdarevic (Feb 02)
- <Possible follow-ups>
- RE: Snort not loging on MySql Michael Steele (Feb 02)
- Re: SNORT and Linux 8.0 Edin Dizdarevic (Feb 02)
- <Possible follow-ups>
- RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
- RE: SNORT and Linux 8.0 PPowenski (Feb 02)
- RE: SNORT and Linux 8.0 John Creegan (Feb 02)
- RE: SNORT and Linux 8.0 Dave Randolph (Feb 02)
- RE: SNORT and Linux 8.0 Thompson, Jimi (Feb 02)
- Re: SNORT and Linux 8.0 Andy Richter (Feb 02)
- Re: SNORT and Linux 8.0 Keith W. McCammon (Feb 02)
- RE: SNORT and Linux 8.0 robert schwartz (Feb 02)
- RE: SNORT and Linux 8.0 Jim Hendrick (Feb 02)
- RE: SNORT and Linux 8.0 Matt Kettler (Feb 02)
- RE: SNORT and Linux 8.0 Nick Duda (Feb 02)
- RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
- RE: SNORT and Linux 8.0 Erek Adams (Feb 02)
- RE: SNORT and Linux 8.0 PPowenski (Feb 03)
- setting up Snort for the first time Richard Worwood (Feb 03)
- Re: setting up Snort for the first time Christian Ehlen (Feb 04)
- setting up Snort for the first time Richard Worwood (Feb 03)
- Re: Snort dropping packets Matt Kettler (Feb 02)
- Re: Snort dropping packets Erek Adams (Feb 02)
- Re: What to do with malicius encrypted code!??i Matt Kettler (Feb 03)
- Re: Correct version of libpcap? Erek Adams (Feb 02)
- Re: Correct version of libpcap? Christian Ehlen (Feb 03)
- Re: *BSD performance (was:Correct version of libpcap?) Martin Olsson (Feb 04)
- Re: Re: *BSD performance (was:Correct version of libpcap?) Christian Ehlen (Feb 07)
- Re: *BSD performance (was:Correct version of libpcap?) Martin Olsson (Feb 04)
- Re: Help needed with logs Michael Boman (Feb 03)
- Re: monitoring only occuring on snort host Matt Kettler (Feb 03)
- Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Sean Lazar (Feb 02)
- Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Ben Nelson (Feb 03)
- <Possible follow-ups>
- RE: DNS server keeps communicating with Darkprofits.net and darkprofits.com Grime, Richard S (Feb 03)
- Re: Obtain CVE id from unix sock output of Snort Brian (Feb 03)
- <Possible follow-ups>
- RE: Obtain CVE id from unix sock output of Snort Biswas, Proneet (Feb 03)
- Re: Obtain CVE id from unix sock output of Snort Brian (Mar 01)
- Re: snapshot layouts on snort.org Andreas Östling (Feb 03)
- Message not available
- Re: how to start to read the snort source code Matt Kettler (Feb 03)
- <Possible follow-ups>
- RE: Help with a new rule to detect web traffic JP Vossen (Feb 05)
- Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
- Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
- Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
- Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
- Re: Snort Mysql Acid Combo Josh Berry (Feb 04)
- Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
- Re: Snort Mysql Acid Combo Mark Fagan (Feb 04)
- Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
- RE: Snort Mysql Acid Combo Michael Steele (Feb 04)
- Re: Snort Mysql Acid Combo Nick Oliver (Feb 04)
- <Possible follow-ups>
- Re: Snort Mysql Acid Combo M. Morgan (Feb 04)
- Re: Question on snort redirecting Jack Whitsitt (jofny) (Feb 04)
- Re: Question on snort redirecting Owen McCusker (Feb 04)
- Re: Question on snort redirecting Matt Kettler (Feb 04)
- Re: snort and honeypot Skip Carter (Feb 04)
- Re: one IP Matt Kettler (Feb 04)
- <Possible follow-ups>
- RE: one IP JP Vossen (Feb 05)
- Re: Does barnyard work with snort2.1.0? Bamm Visscher (Feb 04)
- <Possible follow-ups>
- Re: Does barnyard work with snort2.1.0? David (Feb 05)
- RE: Port scans not showing up in ACID. Michael Steele (Feb 04)
- <Possible follow-ups>
- RE: Port scans not showing up in ACID. John Creegan (Feb 05)
- RE: Port scans not showing up in ACID. John Creegan (Feb 05)
- RE: Port scans not showing up in ACID. Michael Steele (Feb 05)
- RE: Port scans not showing up in ACID. John Creegan (Feb 05)
- RE: Port scans not showing up in ACID. John Creegan (Feb 05)
- Re: drowning in http inspect NON RFC character alerts Jeremy Hewlett (Feb 05)
- Re: Email Notification Methods? Dirk Geschke (Feb 04)
- RE: Email Notification Methods? Michael Steele (Feb 04)
- <Possible follow-ups>
- Email Notification Methods? Jason Baeder (Feb 05)
- RE: Email Notification Methods? Peters, Michael D. (Feb 05)
- Re: [Snort-devel] Snort 2.1.1-RC1 Available snortdev (Feb 05)
- RE: syslog messages Erik Mintz (Feb 05)
- snort-2.1.0 upgrade error Peggy Kam (Feb 05)
- Re: snort-2.1.0 upgrade error Jeremy Hewlett (Feb 05)
- Re: snort-2.1.0 upgrade error Peggy Kam (Feb 05)
- snort-2.1.0 upgrade error Peggy Kam (Feb 05)
- <Possible follow-ups>
- RE: syslog messages Nick Duda (Feb 05)
- oinkmaster.pl - Unable to download rules, Why?? Snortty (Feb 05)
- Re: oinkmaster.pl - Unable to download rules, Why?? Andreas Östling (Feb 05)
- Re: oinkmaster.pl - Unable to download rules, Why?? Timm Schneider (Feb 05)
- Re: Aberrant alerts with snort 2.1.0 build 9 Jeremy Hewlett (Feb 05)
- Re: snortrules-snapshot-2_1.tar.gz and flowbits? Brian (Feb 06)
- Message not available
- Re: react: block not working Matt Kettler (Feb 06)
- Re: react: block not working Matt Kettler (Feb 06)
- alert_syslog Peggy Kam (Feb 06)
- Re: alert_syslog Josh Berry (Feb 06)
- Re: alert_syslog Peggy Kam (Feb 06)
- Re: alert_syslog Owen McCusker (Feb 06)
- Sneeze Peggy Kam (Feb 06)
- Re: alert_syslog Josh Berry (Feb 06)
- <Possible follow-ups>
- Has any one tried SnorcCenter with Snort 2.1.1-RC1? crazy (Feb 07)
- Re: Has any one tried SnorcCenter with Snort 2.1.1-RC1? Jason Alexander (Feb 09)
- Re: Snort Variables Matt Kettler (Feb 06)
- <Possible follow-ups>
- RE: Snort Variables bmcdowell (Feb 06)
- Re: Snort Sensor Erek Adams (Feb 06)
- <Possible follow-ups>
- Re: Snort Sensor M. Morgan (Feb 06)
- Message not available
- Re: MyDoom Outbound Impossible Detects Chris Keladis (Feb 06)
- Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
- Re: Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)
- Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
- Re: Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)
- <Possible follow-ups>
- Re: IDS Design Help Richard Bejtlich (Feb 09)
- RE: IDS Design Help hugh_fraser (Feb 09)
- RE: PLEASE HELP HERE. Jim Hendrick (Feb 09)
- <Possible follow-ups>
- Re: PLEASE HELP HERE. M. Morgan (Feb 09)
- Re: Problem with Snort-inline ravivsn (Feb 09)
- Re: Help!! Problem testing Snort ravivsn (Feb 09)
- Re: invalid event id, eventlog, win32 Chris Reid (Feb 09)
- RE: invalid event id, eventlog, win32 Michael Steele (Feb 09)
- Re: Need help with Sneeze ravivsn (Feb 09)
- false positive generator Peggy Kam (Feb 10)
- Re: false positive generator twig les (Feb 10)
- Re: false positive generator Dirk Geschke (Feb 11)
- Re: false positive generator Matt Kettler (Feb 10)
- Re: false positive generator Ravi (Feb 10)
- Re: false positive generator Dirk Geschke (Feb 11)
- false positive generator Peggy Kam (Feb 10)
- <Possible follow-ups>
- Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 09)
- RE: SNORT (Linux) / MySQL (Win32) Michael Steele (Feb 10)
- Re: SNORT (Linux) / MySQL (Win32) MVIBE (Feb 10)
- RE: SNORT (Linux) / MySQL (Win32) Fred McFeeters (Feb 11)
- Re: SNORT (Linux) / MySQL (Win32) M. Salman Farisi (Feb 10)
- Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 12)
- Re: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
- RE: SNORT (Linux) / MySQL (Win32) robert schwartz (Feb 12)
- RE: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
- Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 11)
- <Possible follow-ups>
- RE: ACID DeBerry, Casey (Feb 12)
- RE: ACID Michael Steele (Feb 12)
- ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
- RE: ACID Fred McFeeters (Feb 23)
- DB SNORT Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
- RE: DB SNORT HuMPie (Feb 23)
- Re: ACID Scott Elgram (Feb 24)
- RE: ACID Fred McFeeters (Feb 23)
- ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
- ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 24)
- Re: HOME_NET James Riden (Feb 10)
- Re: HOME_NET Matt Kettler (Feb 10)
- <Possible follow-ups>
- Re: problem logging M. Morgan (Feb 10)
- Re: problem logging Elena Escolano Torner (Feb 10)
- Re: problem logging Jeff Kell (Feb 10)
- Re: RULES -> Unknown ClassType: Brian (Feb 10)
- Re: RULES -> Unknown ClassType: MVIBE (Feb 10)
- RE: RULES -> Unknown ClassType: Michael Steele (Feb 10)
- <Possible follow-ups>
- RULES -> Unknown Classtype: VIBE (Feb 11)
- Re: snort.conf and startup variables Erek Adams (Feb 11)
- Re: Configuring snort.conf Erek Adams (Feb 11)
- Re: false positive generator Dirk Geschke (Feb 11)
- <Possible follow-ups>
- RE: false positive generator Bob Walder (Feb 11)
- Re: false positive generator Dirk Geschke (Feb 11)
- <Possible follow-ups>
- RE: SNORT Rule for netbios brute force break-in Shaffer, Paul D (Feb 11)
- SNORT Rule for netbios brute force break-in Robert Caplan (Feb 11)
- RE: SNORT Rule for netbios brute force break-in larosa, vjay (Feb 11)
- Base 64 encoding phorvati (Mar 04)
- <Possible follow-ups>
- Re: IPless interface on Debian... M. Morgan (Feb 11)
- Re: IPless interface on Debian... Tobias Rice (Feb 11)
- Re: old versions of snort? Erek Adams (Feb 11)
- Re: -T option error Erek Adams (Feb 11)
- Re[2]: -T option error crazy (Feb 12)
- Re[2]: -T option error Erek Adams (Feb 11)
- Re: Re[2]: -T option error Drew Smith (Feb 11)
- Re: Re[2]: -T option error Erek Adams (Feb 11)
- Re[3]: -T option error crazy (Feb 12)
- Re[3]: -T option error Erek Adams (Feb 11)
- Re[4]: -T option error crazy (Feb 12)
- Re[4]: -T option error Erek Adams (Feb 13)
- Message not available
- Re[6]: -T option error crazy (Feb 16)
- Integrate Snort with Remedy, Anyone Please??? Snortty (Feb 12)
- Re: Integrate Snort with Remedy, Anyone Please??? Owen McCusker (Feb 12)
- Re: Integrate Snort with Remedy, Anyone Please??? Jeff Nathan (Feb 12)
- Re: Re[3]: -T option error AJ Butcher, Information Systems and Computing (Mar 25)
- Re[2]: -T option error crazy (Feb 12)
- Re: Documentation!! Matt Kettler (Feb 11)
- Re: Documentation!! SN ORT (Feb 11)
- Re: Documentation!! Matt Kettler (Feb 11)
- Re: Documentation!! SN ORT (Feb 11)
- <Possible follow-ups>
- RE: Documentation!! Mike Koponick (Feb 12)
- RE: Documentation!! SN ORT (Feb 12)
- RE: Documentation!! Michael Steele (Feb 12)
- Re: Please virus scan your systems Keith W. McCammon (Feb 11)
- Re: Please virus scan your systems Bryan Irvine (Feb 11)
- Re: Please virus scan your systems Matt Southworth (Feb 11)
- Re: Please virus scan your systems Drew Smith (Feb 11)
- Re: Please virus scan your systems Josh Berry (Feb 11)
- Re: Please virus scan your systems Matt Kettler (Feb 11)
- Re: Please virus scan your systems Matt Southworth (Feb 11)
- Re: filters Matt Kettler (Feb 11)
- Re: filters Drew Smith (Feb 11)
- Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 12)
- <Possible follow-ups>
- snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
- snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
- Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
- Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 13)
- Re: snort-2.2.1-RC1 compile error Martin Roesch (Feb 13)
- Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 16)
- Re: ACID PHP MYSQL ERROR Drew Smith (Feb 11)
- <Possible follow-ups>
- ACID PHP MYSQL ERROR VIBE (Feb 12)
- RE: Re: Snort-users] ACID PHP MYSQL ERROR Michael Steele (Feb 11)
- Re[2]: Subject: IPless interface on Debian... Patrick Sitton (Feb 12)
- Re: Some thoughts on IDS types - request for clarification :) Matt Kettler (Feb 12)
- Re: Question regarding creating rules in Snortcenter ... AJ Butcher, Information Systems and Computing (Mar 25)
- Re: Updating Rules? Andreas Östling (Feb 12)
- <Possible follow-ups>
- RE: Updating Rules? Vines Scott D 2d Lt AFFTC/IT (Feb 12)
- Re: Updating Rules? Andy Richter (Feb 12)
- RE: Updating Rules? Paul Schmehl (Feb 12)
- RE: Updating Rules? AJ Butcher, Information Systems and Computing (Mar 25)
- RE: Updating Rules? John Creegan (Feb 12)
- Re: Updating Rules? Dusty Hall (Feb 12)
- Re: Updating Rules? Paul Schmehl (Feb 12)
- Re: Flexresp is not working Eduardo E. Silva (Feb 13)
- Re: (spp_frag2) Oversized fragment, probable DoS Martin Roesch (Feb 13)
- Re: snort rules with OS info? Martin Roesch (Feb 13)
- Re: Snort logging way too much Martin Roesch (Feb 13)
- Re[2]: Snort logging way too much Ochronus (Feb 13)
- Message not available
- Re[2]: Snort logging way too much Ochronus (Feb 15)
- Block Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
- Message not available
- Re: Block Matt Kettler (Feb 16)
- Re: Block Paul Schmehl (Feb 16)
- Re: Block Frank Knobbe (Feb 16)
- Re: Block Paul Schmehl (Feb 16)
- Re: Block Frank Knobbe (Feb 16)
- Re: Block Brian (Feb 16)
- Re: Block Matt Kettler (Feb 17)
- Re[2]: Snort logging way too much Ochronus (Feb 13)
- RE: Mysql is collecting data from snort, Acid won't display it. Michael Steele (Feb 14)
- <Possible follow-ups>
- RE: Mysql is collecting data from snort, Acid won't display it. Wally Bedford (Feb 15)
- <Possible follow-ups>
- RE: preprocessor arpspoof, help! Daniel Ascensão (Feb 15)
- preprocessor arpspoof, help! Daniel Ascensão (Feb 16)
- Re: Different Portscan format under 2.1.0 to 2.0.5 M. Salman Farisi (Feb 15)
- RE: ACID and delete alerts Michael Steele (Feb 16)
- Re: ACID and delete alerts cc (Feb 16)
- RE: ACID and delete alerts Michael Steele (Feb 17)
- Re: ACID and delete alerts cc (Feb 16)
- <Possible follow-ups>
- Re: ACID and delete alerts cc (Feb 17)
- Re: Reserved characters in msg:"..."? Martin Roesch (Feb 17)
- New snort rule for WORM_NETSKY.B yet PLEASE??? Snortty (Feb 18)
- Re: New snort rule for WORM_NETSKY.B yet PLEASE??? Matt Kettler (Feb 18)
- New snort rule for WORM_NETSKY.B yet PLEASE??? Snortty (Feb 18)
- <Possible follow-ups>
- RE: Reserved characters in msg:"..."? CGhercoias (Feb 16)
- Re: Snort and VPN Matt Kettler (Feb 16)
- Re: Snort and VPN Bala Ayres (Feb 16)
- Re: Snort and VPN Matt Kettler (Feb 16)
- Re: Snort and VPN Bala Ayres (Feb 16)
- <Possible follow-ups>
- Re: ARPSpoof! Jeff Nathan (Feb 17)
- Re: anomalous http server Matt Kettler (Feb 18)
- Re: Snort in VMware Stephen W. Thompson (Feb 19)
- <Possible follow-ups>
- RE: Snort in VMware Douglas McCrea (Feb 18)
- Re: Snort in VMware M. Morgan (Feb 18)
- Re: Snort in VMware Jeff (Feb 18)
- RE: Snort in VMware DM (Feb 19)
- Re: Snort in VMware Brian McNeilly (Feb 19)
- Re: Snort in VMware M. Morgan (Feb 19)
- Re: Snort in VMware Mark Fagan (Feb 19)
- OT: Re: Snort in VMware/hubs Jeff (Feb 19)
- Re: Snort in VMware Michael Stone (Feb 23)
- Re: Snort in VMware Mark Fagan (Feb 19)
- Message not available
- Re: Change path for compiler Matt Kettler (Feb 18)
- <Possible follow-ups>
- RE: NetSky worm signature definition...!!! Tim Hergert (Feb 19)
- RE: NetSky worm signature definition...!!! Shane Williams (Feb 19)
- Performance Question Martin Bündgens (Feb 19)
- Re: Performance Question twig les (Feb 19)
- RE: NetSky worm signature definition...!!! Semerjian, Ohanes (Feb 19)
- Re: Snort failing to start... Joe Oligny (Feb 19)
- Re: Snort failing to start... Matt Kettler (Feb 19)
- Re: config PHP for Snort in RH9 Mark Fagan (Feb 19)
- Re: config PHP for Snort in RH9 mel (Feb 19)
- <Possible follow-ups>
- RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
- Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
- RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
- Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
- Re: OT New information about clamav Matt Kettler (Feb 20)
- Re: OT New information about clamav Paul Schmehl (Feb 20)
- Re: how to enable portscan alert twig les (Feb 19)
- Re: New version (1.3) of SnortSlinger available M. Salman Farisi (Feb 20)
- Re: New version (1.3) of SnortSlinger available Ben Nelson (Feb 21)
- Re: Snort on Linux with no IP James Riden (Feb 20)
- Re: Snort on Linux with no IP Erek Adams (Feb 20)
- Re: Snort on Linux with no IP Yonah Russ (Feb 24)
- <Possible follow-ups>
- RE: Snort on Linux with no IP Grejda, Eric (Feb 23)
- RE: Snort on Linux with no IP Mark Fagan (Feb 23)
- Re: Snort on Linux with no IP Tony Fraser (Feb 23)
- Re: Snort on Linux with no IP Brian McNeilly (Feb 23)
- RE: Snort on Linux with no IP Schmehl, Paul L (Feb 24)
- RE: Snort on Linux with no IP ypwhich (Feb 24)
- Re: Snort on Linux with no IP Gabriel L. Somlo (Feb 24)
- Re: Please post a good Nachi.B Signature Erek Adams (Feb 21)
- Re: Please post a good Nachi.B Signature Jason Haar (Feb 22)
- <Possible follow-ups>
- Re: Please post a good Nachi.B Signature Dan (Feb 21)
- Re: Please post a good Nachi.B Signature James Riden (Feb 21)
- Re: Please post a good Nachi.B Signature SN ORT (Feb 23)
- Simple configuration Mario Guerendo (Feb 22)
- RE: Simple configuration Mark E. Donaldson (Feb 22)
- <Possible follow-ups>
- SQUID scan proxy attempt Fabio Viero (Feb 24)
- RE: SQUID scan proxy attempt Wally Bedford (Feb 24)
- Re: Source IP 173.80.0.0 ypwhich (Feb 24)
- Re: Source IP 173.80.0.0 [revisited], bug? Ed (Mar 02)
- RE: Source IP 173.80.0.0 [revisited], bug? Fred McFeeters (Mar 02)
- Re: Source IP 173.80.0.0 [revisited], bug? ypwhich (Mar 02)
- Re: Source IP 173.80.0.0 [revisited], bug? Ed (Mar 02)
- Re: Compiling mysql support into snort and barnyard Rahul (Feb 22)
- Re: Compiling mysql support into snort and barnyard Dirk Geschke (Feb 23)
- Re: barnyard file reading question AJ Butcher, Information Systems and Computing (Feb 23)
- <Possible follow-ups>
- RE: 2.1.0 compile problems and primary development platform Schmehl, Paul L (Feb 23)
- Re: Remotely monitor a switch port... Erek Adams (Feb 23)
- <Possible follow-ups>
- Re: Remotely monitor a switch port... JP Vossen (Feb 23)
- Re: Remotely monitor a switch port... Ridlon, Michael (Feb 24)
- Re: Remotely monitor a switch port... JP Vossen (Feb 24)
- Re: Remotely monitor a switch port... Ridlon, Michael (Feb 24)
- RE: Remotely monitor a switch port... Chris Calaf (Feb 24)
- Re: [Snort-users] ERROR: unknown preprocessor "ø~_decode" Rahul (Feb 23)
- <Possible follow-ups>
- RE: Puresecure... Shaffer, Paul D (Feb 23)
- Re: snortsam problem Frank Knobbe (Feb 23)
- Snort Wireless and BSD A. Wright (Feb 24)
- Re: I have a problem with snort.conf Rahul (Feb 24)
- Re: I have a problem with snort.conf twig les (Feb 24)
- Message not available
- Re: I have a problem with snort.conf Rahul (Feb 24)
- <Possible follow-ups>
- Re: Bad Loop Back Traffic bclark (Feb 24)
- Re: Bad Loop Back Traffic Mat Harris (Feb 24)
- Re: Bad Loop Back Traffic Frank Knobbe (Feb 24)
- Re: Bad Loop Back Traffic Scott Elgram (Feb 25)
- RE: Bad Loop Back Traffic Finney Charles E (Feb 24)
- Re: RE: Bad Loop Back Traffic Scott Elgram (Feb 25)
- Re: RE: Bad Loop Back Traffic James Nonya (Feb 24)
- Re: Bad Loop Back Traffic SN ORT (Feb 25)
- Re: Bad Loop Back Traffic Scott Elgram (Feb 27)
- Re: Bad Loop Back Traffic Mark . Schutzmann (Feb 27)
- <Possible follow-ups>
- RE: Flowbits Peters, Michael D. (Feb 24)
- Re: Flowbits Joe Matusiewicz (Feb 24)
- Re: flowbits adam (Feb 24)
- Re: Re: flowbits Andreas Östling (Feb 24)
- RE: Re: flowbits Douglas McCrea (Feb 24)
- Re: flowbits adam (Feb 24)
- Re: Install of Snort2.1.1 cc (Feb 24)
- Re: Snort Deployment Suggestions Josh Berry (Feb 25)
- <Possible follow-ups>
- RE: Snort Deployment Suggestions Kreimendahl, Chad J (Feb 25)
- RE: Snort Deployment Suggestions Josh Berry (Feb 25)
- Snort Deployment Suggestions Tom Riley (Feb 27)
- RE: Building snort w/ mysql support Mark E. Donaldson (Feb 25)
- <Possible follow-ups>
- RE: Building snort w/ mysql support Koren, Alexander (Feb 25)
- RE: Building snort w/ mysql support M. Salman Farisi (Feb 25)
- <Possible follow-ups>
- RE: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 27)
- Re: Segfault on fun funy rule Erek Adams (Feb 25)
- Re: Segfault on fun funy rule Jason Monroe "JC" (Feb 26)
- Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
- Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
- Re: configure option "enable-linux-smp-stats" Jeremy Hewlett (Feb 27)
- Re: Problem with building snort-2.1.1 on rh7.0 - solved boka (Feb 26)
- Re: SNORT and VLans twig les (Feb 26)
- <Possible follow-ups>
- RE: SNORT and VLans Martin Jr., D. Michael (Feb 26)
- Re: SNORT and VLans Jason Haar (Feb 26)
- <Possible follow-ups>
- RE: snortdb-extra.gz Shawn Kottke (Feb 26)
- <Possible follow-ups>
- RE: Snort 1U Appliance for Sale on EBay Kreimendahl, Chad J (Feb 27)
- Re: Snort 1U Appliance for Sale on EBay Brian (Feb 27)
- Re: Snort 1U Appliance for Sale on EBay Frank Knobbe (Feb 27)
- Re: Snort 1U Appliance for Sale on EBay Nicholas Bachmann (Feb 27)
- Re: Snort 1U Appliance for Sale on EBay Brian (Feb 27)
- RE: Snort 1U Appliance for Sale on EBay Keith Pachulski (Mar 01)
- Re: make: Fatal error in reader: Makefile, line 484 : Unexpected end o f line seen Jeremy Hewlett (Feb 27)
- <Possible follow-ups>
- RE: alert refused to pass Jasmine CHUA (Feb 27)
- Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" M. Salman Farisi (Feb 27)
- Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Jeremy Hewlett (Feb 27)
- Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Kristofer T. Karas (Feb 27)
- Re: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Ian Macdonald (Feb 27)
- Re: SNORT has memory leak on Linux Red hat 9 ypwhich (Feb 27)
- Re: SNORT has memory leak on Linux Red hat 9 twig les (Feb 27)
- <Possible follow-ups>
- RE: SNORT has memory leak on Linux Red hat 9 SN ORT (Mar 01)
- (http_inspect) NON-RFC HTTP DELIMITER Peggy Kam (Mar 01)
- RE: Page not available Michael Steele (Feb 27)
- Re: P2P Rules and Sending TCP Resets. Josh Berry (Feb 27)
- <Possible follow-ups>
- RE: P2P Rules and Sending TCP Resets. Chas Tomlin (Feb 27)
- RE: Adware/Malware Rules List Jerry Shenk (Feb 29)
- RE: Adware/Malware Rules List Mark E. Donaldson (Feb 29)
- Re: Adware/Malware Rules List Max Valdez (Mar 01)
- Re: Adware/Malware Rules List Bryan Irvine (Mar 02)
- <Possible follow-ups>
- Re: Adware/Malware Rules List James Nonya (Mar 02)
- RE: Adware/Malware Rules List Jerry Shenk (Mar 04)
- <Possible follow-ups>
- RE: Adware/Malware Rules List V2 Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 04)
- RE: Adware/Malware Rules List V2 Darden, Patrick S. (Mar 05)
- Re: Newbie Josh Berry (Feb 27)
- <Possible follow-ups>
- Newbie Jim Brown (Feb 28)
- RE: Newbie Michael Steele (Feb 28)
- Newbie Jim Brown (Feb 28)
- Re: TCP Resets twig les (Feb 27)
- Re: TCP Resets Josh Berry (Feb 27)
- Re: TCP Resets Jeff Kell (Feb 27)
- Re: TCP Resets Josh Berry (Feb 27)
- <Possible follow-ups>
- Re: TCP Resets Gary Flynn (Feb 28)
- Re: Segmentation fault after installing 2.1.1 (and 2.1.1RC1). Bo Jacobsen (Feb 28)
- Re: ACID gives erroneous information Josh Berry (Feb 29)
- Re: ACID gives erroneous information Erwin Van de Velde (Feb 29)
- <Possible follow-ups>
- Re: double decoding attack Ben Beeson (Mar 01)
- Re: double decoding attack Sean Lazar (Mar 01)
- RE: ACID modification Michael Steele (Mar 01)
- Re: ACID modification cc (Mar 02)
- Re: acid error Thomas Bechtold (Mar 01)
- Re: acid error boka (Mar 01)
- Re: Acid/Snort not logging UDP packets Josh Berry (Mar 01)
- <Possible follow-ups>
- Re: Snort/mysql/acid and dshield.org Dusty Hall (Mar 01)
- <Possible follow-ups>
- snort doesn't write to mysql Ochs, Pamela T [Contr (HPTI)] (Mar 01)
- Re: snort doesn't write to mysql Josh Berry (Mar 01)
- snort doesn't write to mysql Ochs, Pam (Mar 02)
- snort doesn't write to mysql Ochs, Pam (Mar 02)
- <Possible follow-ups>
- RE: snort postgresql rpm problem Thompson, Jimi (Mar 01)
- RE: snort postgresql rpm problem JP Vossen (Mar 01)
- Newbie question: needed PC specs and performance R . Welz (Mar 01)
- RE: Newbie question: needed PC specs and performance Fred McFeeters (Mar 01)
- <Possible follow-ups>
- RE: Newbie question: needed PC specs and performance CGhercoias (Mar 01)
- Re: More TCP Reset Questions Bamm Visscher (Mar 01)
- Message not available
- Re: More TCP Reset Questions Matt Kettler (Mar 01)
- Re: More TCP Reset Questions Josh Berry (Mar 01)
- Message not available
- Re: More TCP Reset Questions Matt Kettler (Mar 01)
- Re: More TCP Reset Questions Matt Kettler (Mar 01)
- <Possible follow-ups>
- RE: mostly an (my)sql question. John (Mar 01)
- Re: mostly an (my)sql question. Roman Danyliw (Mar 01)
- Re: threshold and suppress ?? Jason (Mar 02)
- Re: threshold and suppress ?? Thomas Bechtold (Mar 02)
- <Possible follow-ups>
- FW: No logs in MYSQL Database but logs on localhost logfiles? Shannon M. Anderson (Mar 01)
- RE: Snort is exiting after start Jerry Shenk (Mar 02)
- Re: Snort is exiting after start twig les (Mar 02)
- <Possible follow-ups>
- undefined reference to `errno` ?? Marcin Laskowski (Mar 04)
- Re: snort.org and sourcefire.com resolving no more? John Sage (Mar 03)
- <Possible follow-ups>
- www.snort.org down? Michael Scheidell (Mar 03)
- Re: www.snort.org down? Mat Harris (Mar 03)
- Re: www.snort.org down? jrhendri (Mar 03)
- Re: www.snort.org down? Mat Harris (Mar 03)
- <Possible follow-ups>
- RE: Snort Install Shawn Kottke (Mar 03)
- Snort Install Shabbar Arsiwala (Mar 08)
- Snort install Mario Guerendo (Mar 14)
- Re: Snort install Thomas Bechtold (Mar 14)
- Snort install john greene (Mar 14)
- RE: Snort install Amod K (Mar 14)
- RE: Snort install Amod K (Mar 14)
- Re: Snort install Thomas Bechtold (Mar 14)
- Re: Snort install nhdave (Mar 14)
- <Possible follow-ups>
- Snort log alert is not the same as the live alerts. vmlinuz Mandrake (Mar 18)
- <Possible follow-ups>
- RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)
- Re: RE: flow-portscan really suitable ??? BIZOU (Mar 04)
- RE: RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)
- Re: RE: RE: flow-portscan really suitable ??? BIZOU (Mar 05)
- Re: RE: RE: flow-portscan really suitable ??? Jeremy Hewlett (Mar 05)
- Re: Demark PureSecure questions Ridlon, Michael (Mar 04)
- Re: Demark PureSecure questions Kristofer T. Karas (Mar 04)
- <Possible follow-ups>
- RE: Demark PureSecure questions Nick Duda (Mar 05)
- <Possible follow-ups>
- Re: Noisy Rules Mark . Schutzmann (Mar 04)
- RE: Noisy Rules Schmehl, Paul L (Mar 04)
- Re: Question about best hardware Michael Sconzo (Mar 04)
- <Possible follow-ups>
- Re: Question about best hardware M. Morgan (Mar 05)
- RE: Question about best hardware Kreimendahl, Chad J (Mar 05)
- RE: Question about best hardware Jason Haar (Mar 07)
- RE: Question about best hardware Josh Berry (Mar 08)
- Re: Question about best hardware Michael Stone (Mar 09)
- RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 09)
- RE: Question about best hardware Josh Berry (Mar 10)
- RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
- Re: Question about best hardware Sigurd Urdahl (Mar 12)
- RE: Question about best hardware Jason Haar (Mar 07)
- RE: Question about best hardware SN ORT (Mar 08)
- RE: Question about best hardware Michael Miller (Mar 08)
- RE: Question about best hardware Josh Berry (Mar 10)
- RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
- RE: Question about best hardware Josh Berry (Mar 10)
- RE: Question about best hardware Hutchinson, Andrew (Mar 08)
- Re: Question about best hardware Jason Haar (Mar 08)
- pcre.h error . David Alonso De La Vega Tapage (Mar 08)
- creating tables .. David Alonso De La Vega Tapage (Mar 09)
- Re: creating tables .. David Alonso De La Vega Tapage (Mar 09)
- Re: Question about best hardware Jason Haar (Mar 08)
- RE: Question about best hardware Kreimendahl, Chad J (Mar 09)
- <Possible follow-ups>
- RE: Embedded SPEC incorrect in v2.1.1 JP Vossen (Mar 04)
- Re: mysql_error: Access denied for user: 'snort@localhost Jeff Price (Mar 05)
- <Possible follow-ups>
- RE: custom sig file JP Vossen (Mar 04)
- RE: custom sig file SN ORT (Mar 05)
- <Possible follow-ups>
- flexresp question ravath k (Mar 04)
- Flexresp question ravath k (Mar 05)
- Re: Flexresp question Kristofer T. Karas (Mar 05)
- Re: sensor twig les (Mar 04)
- <Possible follow-ups>
- RE: sensor Dmitry Chorine (Mar 04)
- Re: E-mail twig les (Mar 04)
- Re: E-mail Ben Nelson (Mar 04)
- Re: have i been banned twig les (Mar 04)
- Re: have i been banned Matt Kettler (Mar 05)
- Re: Repost: resp:rst_all not working Matt Kettler (Mar 05)
- Re: Repost: resp:rst_all not working Venkata Raghavan (Mar 05)
- Re: Repost: resp:rst_all not working Matt Kettler (Mar 08)
- Re: Repost: resp:rst_all not working Venkata Raghavan (Mar 05)
- RE: [OT] - RE: Repost: resp:rst_all not working Lucretia Enterprises (Mar 05)
- Re: Help need in Snort configuration Ravi (Mar 08)
- ignorehost in snort.conf Dose Not ignore my scanner, why? Snortty (Mar 10)
- <Possible follow-ups>
- RE: Help need in Snort configuration Nick Duda (Mar 05)
- Re: Testing snort? Ciprian Badescu (Mar 08)
- RE: Windows Set-up Mark E. Donaldson (Mar 06)
- Re: Win32 v2.1 as service - two instances? Chris Burton (Mar 06)
- Re: Win32 v2.1 as service - two instances? Rich Adamson (Mar 06)
- <Possible follow-ups>
- RE: Looking for Perl archive script for Snort with ACID and MySQL Schmehl, Paul L (Mar 08)
- RE: Sensor logging at remote mysql db Michael Steele (Mar 08)
- Re: Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 09)
- Re: Sensor logging at remote mysql db AJ Butcher, Information Systems and Computing (Mar 10)
- Re: Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 09)
- Re: running snort in promiscuous mode AJ Butcher, Information Systems and Computing (Mar 10)
- Re: Setup & Configure Snort 2.1.1 on Windows XP? keith-list (Mar 09)
- Re: Interesting problem with Snort 2.1.0 today -- Jeremy Hewlett (Mar 10)
- Re: Problems with links in ACID AJ Butcher, Information Systems and Computing (Mar 10)
- <Possible follow-ups>
- RE: Snort error Danny Cannady (Mar 09)
- Re: Portscan traffic on ACID James Chong (Mar 09)
- Re: Portscan traffic on ACID James Chong (Mar 09)
- RE: No portscan still on ACID James Chong (Mar 09)
- RE: RE: No portscan still on ACID Michael Steele (Mar 09)
- Re: failure to generate alerts from tcpdump file ypwhich (Mar 10)
- Re: failure to generate alerts from tcpdump file Matt Kettler (Mar 10)
- Re: Question about passwd file twig les (Mar 10)
- <Possible follow-ups>
- RE: Snort log management Jason Humes (Mar 11)
- Re: installing snort ? Matt Kettler (Mar 10)
- commercial installations ? john greene (Mar 11)
- RE: ACID 2.0? Fred McFeeters (Mar 11)
- Re: ACID 2.0? SNORT (Mar 12)
- Re: Snort+iptables in the same machine Nick Hatch (Mar 11)
- <Possible follow-ups>
- RE: Snort+iptables in the same machine SN ORT (Mar 12)
- Re: Unified log - how binary are they? Andrew R. Baker (Mar 13)
- Re: Snort, MySql, Apache, & PHP Problem - Checked by Vexira - Jim Hendrick (Mar 12)
- Hummm... Michael Steele (Mar 12)
- RE: Hummm... Jerry Shenk (Mar 12)
- Re: Hummm... Jason Haar (Mar 14)
- Re: Hummm... ypwhich (Mar 14)
- RE: Hummm... Michael Steele (Mar 14)
- RE: Hummm... Ben (Mar 14)
- RE: Hummm... Michael Steele (Mar 15)
- Re: Hummm... Martin Roesch (Mar 15)
- RE: Hummm... ypwhich (Mar 14)
- RE: Hummm... Ted Kaczmarek (Mar 16)
- Re: Hummm... AJ Butcher, Information Systems and Computing (Mar 15)
- Re: Hummm... Martin Roesch (Mar 15)
- Re: Hummm... Martin Roesch (Mar 15)
- RE: Hummm... Jerry Shenk (Mar 12)
- RE: Disable alerts from certain machines Jerry Shenk (Mar 12)
- RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 25)
- RE: Disable alerts from certain machines - Not working for me? Andreas Östling (Mar 25)
- RE: Disable alerts from certain machines - Not working for me? rodrigo . ramos (Mar 26)
- RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 26)
- RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 25)
- Re: Disable alerts from certain machines Martin Roesch (Mar 31)
- Re: Tuning Signatures AJ Butcher, Information Systems and Computing (Mar 15)
- Re: Tuning Signatures Tod Beardsley (Mar 15)
- <Possible follow-ups>
- RE: Hummm... Kreimendahl, Chad J (Mar 15)
- Re: Hummm... Martin Roesch (Mar 15)
- RE: Hummm... Shannon M. Anderson (Mar 16)
- Re: Hummm... Martin Roesch (Mar 17)
- RE: Hummm... Kreimendahl, Chad J (Mar 16)
- Re: Hummm... Martin Roesch (Mar 16)
- RE: Hummm... Kreimendahl, Chad J (Mar 17)
- RE: Hummm... Shaffer, Paul D (Mar 17)
- Re: CVS FAQ? (snort and barnyard issues) Martin Roesch (Mar 15)
- RE: CVS FAQ? ... Fred Portnoy (Mar 15)
- Re: CVS FAQ? (snort and barnyard issues) Andrew R. Baker (Mar 15)
- <Possible follow-ups>
- RE: CVS FAQ? (snort and barnyard issues) Michael Miller (Mar 15)
- Re: Logsnorter problem Jason Haar (Mar 15)
- <Possible follow-ups>
- Logsnorter problem Carlos (Mar 18)
- Re: Logsnorter problem Michael Boman (Mar 19)
- Re: Logsnorter problem Carlos (Mar 18)
- Re: Logsnorter problem Michael Boman (Mar 19)
- Re: Keeping separate databases? twig les (Mar 15)
- Re: Keeping separate databases? Jason Haar (Mar 15)
- <Possible follow-ups>
- RE: Keeping separate databases? Jason Humes (Mar 15)
- RE: Keeping separate databases? Jason Humes (Mar 16)
- RE: Keeping separate databases? Jason Haar (Mar 16)
- RE: Keeping separate databases? Jason Monroe "JC" (Mar 16)
- Re: Keeping separate databases? Jason Haar (Mar 16)
- RE: Keeping separate databases? Jason Monroe "JC" (Mar 16)
- RE: How to delete alerts without acid twig les (Mar 15)
- <Possible follow-ups>
- RE: How to delete alerts without acid Jason Humes (Mar 15)
- RE: How to delete alerts without acid SN ORT (Mar 15)
- How to delete alerts without acid Jason Humes (Mar 16)
- RE: How to delete alerts without acid Jerry Shenk (Mar 15)
- RE: How to delete alerts without acid Hutchinson, Andrew (Mar 16)
- RE: How to delete alerts without acid Schmehl, Paul L (Mar 16)
- RE: winsnort install robert schwartz (Mar 16)
- Re: barnyard looses details WRT ACID? Bamm Visscher (Mar 15)
- Re: barnyard looses details WRT ACID? AJ Butcher, Information Systems and Computing (Mar 16)
- Re: building snort from CVS Michael Boman (Mar 16)
- <Possible follow-ups>
- Re: building snort from CVS Nigel Houghton (Mar 16)
- <Possible follow-ups>
- RE: Update rules....but not all Dan Fiorito (Mar 16)
- <Possible follow-ups>
- RE: v2.1 config question Dave Randolph (Mar 16)
- Re: Generator ID in threshold directive Jeremy Hewlett (Mar 19)
- Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 16)
- Re: Cannot archive alerts (ACID) Jeff Workman (Mar 19)
- Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 17)
- Re: Cannot archive alerts (ACID) Jeff Workman (Mar 19)
- <Possible follow-ups>
- Re: FIltering out Internal Mail Logging Mark . Schutzmann (Mar 16)
- Re: Are there any problems Snort 2.1.1 with ACID v0.9.6b23? Paul Schmehl (Mar 16)
- Re: Problem with compiling/installing snort 2.1.1 on RH 9.0 Ted Kaczmarek (Mar 16)
- Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 16)
- Re: Feature request: thresholds need another counter? Jason (Mar 17)
- Re: Feature request: thresholds need another counter? Frank Knobbe (Mar 18)
- Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 19)
- Re: Feature request: thresholds need another counter? Jason Haar (Mar 20)
- Re: Feature request: thresholds need another counter? Michael Boman (Mar 19)
- Re: Feature request: thresholds need another counter? Jason (Mar 17)
- <Possible follow-ups>
- portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)
- Re: portscan2 - display which ports scanned in acid Marcin Laskowski (Mar 19)
- RE: portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)
- RE: portscan2 - display which ports scanned in acid Kreimendahl, Chad J (Mar 19)
- RE: ACID: Unknown Database type specified: a DBtype of " was specified Lucretia Enterprises (Mar 17)
- Re: problem with ACID (portscan) Marcin Laskowski (Mar 17)
- <Possible follow-ups>
- Re: log files Dusty Hall (Mar 18)
- RE: Icmp Ping Jerry Shenk (Mar 18)
- RE: Icmp Ping Jim Hendrick (Mar 18)
- Re: Icmp Ping cc (Mar 18)
- RE: Icmp Ping Jerry Shenk (Mar 19)
- Re: Icmp Ping cc (Mar 18)
- RE: Icmp Ping Jim Hendrick (Mar 18)
- RE: Icmp Ping Lucretia Enterprises (Mar 19)
- RE: Icmp Ping Jim Hendrick (Mar 18)
- <Possible follow-ups>
- syslog-ng problem agnelo d (Mar 19)
- syslog-ng problem agnelo d (Mar 19)
- Re: Snort permissions problem neil (Mar 18)
- Re: How to tell snort version and upgrade neil (Mar 18)
- <Possible follow-ups>
- RE: How to tell snort version and upgrade Jason Humes (Mar 18)
- RE: How to tell snort version and upgrade neil (Mar 18)
- Re: Snort running on two interfaces neil (Mar 18)
- Re: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 18)
- <Possible follow-ups>
- RE: Snort running on two interfaces Jason Humes (Mar 18)
- RE: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 19)
- Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
- Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
- Re: What does the number in the binary log file name mean? Bamm Visscher (Mar 18)
- Re: Making zero headway with barnyard Bamm Visscher (Mar 18)
- <Possible follow-ups>
- RE: Making zero headway with barnyard Michael Miller (Mar 19)
- Re: Making zero headway with barnyard Bamm Visscher (Mar 19)
- RE: Making zero headway with barnyard Michael Miller (Mar 19)
- RE: 'mysql_error: Duplicate entry', what am I doing wrong? Mark E. Donaldson (Mar 19)
- <Possible follow-ups>
- problem with syslog-ng agnelo d (Mar 19)
- <Possible follow-ups>
- Re: Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
- listening 2 interfaces at once? Peggy Kam (Mar 19)
- Re: listening 2 interfaces at once? neil (Mar 19)
- listening 2 interfaces at once? Peggy Kam (Mar 19)
- Re: Snort inline and ip_queue neil (Mar 19)
- Re: Snort inline and ip_queue Stephan Scholz (Mar 23)
- Re: Snort inline and ip_queue Ravi (Mar 23)
- Re: Detecting use of Anonymous Proxies neil (Mar 19)
- <Possible follow-ups>
- RE: Event Correlation or Incident Management for Snort Database? hugh_fraser (Mar 19)
- RE: Event Correlation or Incident Management for Snort Database? McCash, John (Mar 19)
- <Possible follow-ups>
- http_decode line in snort.conf gets garbled Christophe Zwecker (Mar 22)
- Re: http_decode line in snort.conf gets garbled Rajesh Joseph (Mar 23)
- Re: Exhausted - SNORT not logging to MySQL database Paul Schmehl (Mar 20)
- RE: Exhausted - SNORT not logging to MySQL database Michael Steele (Mar 20)
- Promiscuous Mode pfeito (Mar 20)
- Re: Promiscuous Mode Paul Schmehl (Mar 20)
- RE: Promiscuous Mode pfeito (Mar 21)
- RE: Promiscuous Mode Paul Schmehl (Mar 21)
- HOME_NET var on snort.conf pfeito (Mar 21)
- Re: HOME_NET var on snort.conf Paul Schmehl (Mar 21)
- Re: HOME_NET var on snort.conf neil (Mar 22)
- RE: HOME_NET var on snort.conf pfeito (Mar 22)
- RE: HOME_NET var on snort.conf pfeito (Mar 22)
- RE: HOME_NET var on snort.conf Michael Boman (Mar 22)
- RE: HOME_NET var on snort.conf pfeito (Mar 25)
- Promiscuous Mode pfeito (Mar 20)
- RE: Exhausted - SNORT not logging to MySQL database Mark E. Donaldson (Mar 20)
- Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
- <Possible follow-ups>
- Re: Snort Abend after BAD-TRAFFIC Mark . Schutzmann (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Frank Knobbe (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
- Re: Snort Abend after BAD-TRAFFIC Steve Thompson (Mar 23)
- Re: Unzipping Question Matt Kettler (Mar 21)
- RE: Unzipping Question Mark Sargent (Mar 22)
- RE: snort gui management tool Jeff Dell (Mar 22)
- RE: snort gui management tool Mark E. Donaldson (Mar 22)
- <Possible follow-ups>
- RE: ATTACK RESPONSES 403 Forbidden Gould, Scott (Mar 23)
- <Possible follow-ups>
- RE: have i beenn HACKED or rooted ?? Petriz, Pablo (Mar 23)
- Re: Witty worm sig Tod Beardsley (Mar 23)
- Re: Snort en mode NIDS neil (Mar 23)
- Re: Snort en mode NIDS Ravi (Mar 23)
- Re: Snort en mode NIDS Tomasz Piotr Palarz (Mar 23)
- RE: Snort sensor setup Michael Steele (Mar 23)
- Re: Asymmetric routing and IDS correlation ? Rich Adamson (Mar 23)
- Re: Asymmetric routing and IDS correlation ? Josh Berry (Mar 23)
- Re: Asymmetric routing and IDS correlation ? Jason Haar (Mar 23)
- Re: Asymmetric routing and IDS correlation ? Dirk Geschke (Mar 24)
- Re: Asymmetric routing and IDS correlation ? Michael Richardson (Mar 25)
- <Possible follow-ups>
- RE: Asymmetric routing and IDS correlation ? Biswas, Proneet (Mar 23)
- Re: does --enable-flexresp(2) works? Paul Schmehl (Mar 23)
- Re: does --enable-flexresp(2) works? pierangelo motta (Mar 24)
- <Possible follow-ups>
- Re: Is snort dropping packets John Creegan (Mar 23)
- RE: Is snort dropping packets Jason Humes (Mar 24)
- RE: Is snort dropping packets John Creegan (Mar 24)
- RE: Is snort dropping packets Hutchinson, Andrew (Mar 24)
- RE: Is snort dropping packets Rodrigo B. Ramos (Mar 24)
- Re: Is snort dropping packets Jeff (Mar 24)
- Re: Is snort dropping packets John Creegan (Mar 24)
- RE: Snort with SPADE...snort in anomaly mode? pfeito (Mar 25)
- Re: Detecting http 'basic-auth' brute force Josh Berry (Mar 23)
- Re: Detecting http 'basic-auth' brute force Jason Haar (Mar 23)
- <Possible follow-ups>
- Obtaining HTTP header info and Barnyard Christopher Bell (Mar 25)
- Re: Couple of quick questions Bennett Todd (Mar 23)
- Re: Couple of quick questions Jason Haar (Mar 23)
- Re: Couple of quick questions Charles Lacroix (Mar 24)
- Re: Couple of quick questions Jason Haar (Mar 23)
- <Possible follow-ups>
- RE: Swatch configuration problem Vogle, Brian (Mar 24)
- Re: Swatch configuration problem ids (Mar 24)
- Re: Snort not logging to the /var/log/snort/alert file Rodrigo B. Ramos (Mar 24)
- <Possible follow-ups>
- RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file Michael Sconzo (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
- Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
- RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- Snort not logging to the /var/log/snort/alert file ids (Mar 26)
- Snort check Martin Bündgens (Mar 24)
- Re: Snort check Matt Kettler (Mar 24)
- <Possible follow-ups>
- Re: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
- Re: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
- RE: Snort not logging to the /var/log/snort/alert file Jim Hendrick (Mar 24)
- Re: Snort not logging to the /var/log/snort/alert file Christopher Cramer (Mar 25)
- <Possible follow-ups>
- Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
- RE: RE: Snort not logging to the /var/log/snort/alertfile Jim Hendrick (Mar 24)
- Great news! Snort not logging to the /var/log/snort/aler tfile Alan (Mar 25)
- RE: Great news! Snort not logging to the /var/log/snort/aler tfile Jim Hendrick (Mar 25)
- Re: RE: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
- RE: RE: Snort not logging to the /var/log/snort/alertfile Jim Hendrick (Mar 24)
- Re: error while trying to install snort v2.1.1 with mySql v4.0.18 AJ Butcher, Information Systems and Computing (Mar 25)
- <Possible follow-ups>
- Content Usage Steve Johnson (Mar 24)
- Re: Content Usage Rodrigo B. Ramos (Mar 25)
- <Possible follow-ups>
- Incomplete RPC segment shivabasu (Mar 25)
- Re: Snort, unified/database output plugins, session capture Andrew R. Baker (Mar 25)
- Re: Snort, unified/database output plugins, session capture AJ Butcher, Information Systems and Computing (Mar 25)
- Re: Snort Install - troubles Glenn Forbes Fleming Larratt (Mar 25)
- <Possible follow-ups>
- Re: Question about content keyword Dan (Mar 26)
- <Possible follow-ups>
- Re: Snort en mode NIDS ravivsn (Mar 29)
- Re: Snort en mode NIDS Mark . Schutzmann (Mar 30)
- <Possible follow-ups>
- Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 25)
- RE: Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 29)
- Re: Snort capabilities AJ Butcher, Information Systems and Computing (Mar 26)
- <Possible follow-ups>
- RE: Snort stopped receiving alerts Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
- RE: Snort stopped receiving alerts Shawn Kottke (Mar 25)
- <Possible follow-ups>
- lost sensor Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
- RE: lost sensor Shawn Kottke (Mar 25)
- Re: Snort and pcre error Brian (Mar 25)
- RE: TTL LIMIT Exceeded Mark E. Donaldson (Mar 26)
- Re: TTL LIMIT Exceeded Jason (Mar 26)
- RE: TTL LIMIT Exceeded Alejandro Flores (Mar 27)
- Re: Snort + Acid AJ Butcher, Information Systems and Computing (Mar 26)
- Re: Snort + Acid Cyril Beaufrere (Mar 26)
- Re: Snort + Acid Tom Cinqmars (Mar 29)
- Re: Snort + Acid Tom Cinqmars (Mar 29)
- Re: Duplicate entry message Max Valdez (Mar 26)
- Re: problem with snort and guardian Alejandro Flores (Mar 27)
- Re: problem with snort and guardian Max Valdez (Mar 27)
- Re: odd traffic Michael Boman (Mar 29)
- Re: odd traffic AJ Butcher, Information Systems and Computing (Mar 29)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 29)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
- Re: Reconstruction of TCP packets Jason Haar (Mar 29)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 30)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 30)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 31)
- Re: Reconstruction of TCP packets Dirk Geschke (Mar 31)
- Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
- <Possible follow-ups>
- Re: global threshold quesiton Charles Lacroix (Mar 29)
- Re: Snort/Barnyard/MySQL/ACID - Duplicate entry Andrew R. Baker (Mar 29)
- Re: Barnyard and duplicate entries AJ Butcher, Information Systems and Computing (Mar 29)
- <Possible follow-ups>
- RE: Snort Virus Detector Williams Jon (Mar 29)
- <Possible follow-ups>
- Re: How to achieve alerts from tcpdump files? Nigel Houghton (Mar 30)
- Re: Problem with ethercard and promiscuous mode Josh Berry (Mar 30)
- Re: Problem with ethercard and promiscuous mode Jim Patterson (Mar 31)
- Re: snort and tap ethernet AJ Butcher, Information Systems and Computing (Mar 30)
- Re: snort and tap ethernet Craig Paterson (Mar 30)
- <Possible follow-ups>
- Re: snort and tap ethernet Mark . Schutzmann (Mar 30)
- RE: snort and tap ethernet Spencer, Arthur (Mar 30)
- Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
- Message not available
- Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
- Message not available
- Re: OpenSource Alternative to SourceFire's RNA Josh Berry (Mar 31)
- Re: flow-portscan, pcap files, and timestamps.. Chris Green (Mar 30)
- Re: False Positive or not? Max Valdez (Mar 30)
- Re: False Positive or not? AJ Butcher, Information Systems and Computing (Mar 31)
- Re: Cisco Device Exploit Perl Script Ben Nelson (Mar 30)
- <Possible follow-ups>
- RE: Cisco Device Exploit Perl Script Perrymon, Josh L. (Mar 30)
- RE: Cisco Device Exploit Perl Script Mark . Schutzmann (Mar 31)
- <Possible follow-ups>
- AW: OpenSource Alternative to SourceFire's RNA Sean Wheeler (Mar 31)
- Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)
- Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)
- Re: Technically speaking Matt Kettler (Mar 31)
- RE: TCP and ACID Michael Steele (Mar 31)
- <Possible follow-ups>
- RE: TCP and ACID Shawn Kottke (Mar 31)
- RE: TCP and ACID Kromodimedjo, John (Mar 31)
- RE: TCP and ACID Kromodimedjo, John (Mar 31)
- Re: Snort code Rajesh Joseph (Mar 31)
- Re: Snort code Matt Kettler (Mar 31)
- <Possible follow-ups>
- RE: Snort on Windows 2000 Engle, Kurt (Mar 31)
- Re: Is there any statistic for snort rules false positive alert? Keith W. McCammon (Mar 31)
- Re: how to block P2P with snort Charles Lacroix (Mar 31)
- Re: how to block P2P with snort Sylvain BERTRAND (Mar 31)
- Re: how to block P2P with snort Charles Lacroix (Mar 31)
- Re: how to block P2P with snort Sylvain BERTRAND (Mar 31)