Snort: by date

• RSS Feed
• About List
• All Lists

Previous period

Next period

2572 messages starting Sep 30 02 and ending Dec 31 02
Date index | Thread index | Author index

Monday, 30 September

Trouble getting started Peter Youll

Tuesday, 01 October

stream reassemble and dsize Holger . Woehle
Re: Seg fault with 1.8.7 and MySQL Richard Ellerbrock
Re: UDP Portscans Are Not Capture Grigoris Vidakis
RE: Basic snort setup for traffic analysis Nanabhay Mohamed * Group (GP)
spp_portscan unproper timestamp in replay(-r option) procedure Grigoris Vidakis
Re: stream reassemble and dsize Martin Roesch
barnyard (Payload) Ron Shuck
Re: barnyard (Payload) Alwin Raymundo
Acid Toby Nelson
RE: Subject: ACID SECURITY JC
Announcement: Snort - Next Generation Christopher Kruegel
Re: barnyard (Payload) Martin Roesch
Re: barnyard (Payload) Bamm Visscher
switch port settings? Matthew Harrell
Re: barnyard on sparc64 openbsd insane
FrontPage Server Extensions 2000/2002 vulnerability Tudor Panaitescu
RE: switch port settings? McCammon, Keith
Re: spp_portscan unproper timestamp in replay(-r option) procedure James Hoagland
RE: Snort/ACID: Database Error 134 Tim Vruwink
Re: switch port settings? Matt Kettler
Snort as service on Win2K Dhruv Chandra
Portscan parameters shadi Rostami
stealth interface Dallas Jordan
Re: Portscan parameters Glenn Forbes Fleming Larratt
Other packet capturing libraries for Snort rkeller
SnortReport problem Cloppert, Michael
Snort as Service on Win2K Dhruv Chandra
Rule Creation Question !. Moreno Poli
RE: stealth interface Wirth, Jeff
RE: Seg fault with 1.8.7 and MySQL Snort
Re: Snort Logging error Ian Macdonald
RE: stealth interface Dallas Jordan
Re: stealth interface Mike Beal
tcpdump - showing data size netsec novice
RE: Snort as service on Win2K Michael Steele
RE: Acid Michael Steele
RE: Snort as Service on Win2K Michael Steele
RE: Snort - Red hat 8.0 Michael Steele
Re: tcpdump - showing data size Martin Roesch
Re: Rule Creation Question !. Michael Boman

Wednesday, 02 October

Re: Flexresp Support and libnet ver 1.1.0 Jeff Nathan
Hi, general question Philippe Dhont (Sea-ro)
Re: Hi, general question Arvind Clemente
good NIC? mono toy
Re: stealth interface Joe Matusiewicz
RE: stealth interface Matt Yackley
Re: stealth interface Jon Quiros
RE: stealth interface Dallas Jordan
Re: 2 sensors/1 interface? Martin Olsson
Re: R: Rule Creation Question !. Michael Boman
How to capture the Snort sensor ID using SnMP traps Jose Vicente Nunez Zuleta
ACID: Problem Viewing Alerts... Michael Gady
Re: Snort and high-traffic lines Jens Krabbenhoeft
Re: ACID: Problem Viewing Alerts... Jens Krabbenhoeft
RE: ACID: Problem Viewing Alerts... Randy Bey
Re: Snort and high-traffic lines Gary Flynn
Snort 1.8.7 on winXP laptop Sandy Biring
Snort Sensors die Scott_Avvento
Channel bonding in Linux --- brief HOWTO Bennett Todd
Benchmarking load generator? Bennett Todd
Re: Snort 1.8.7 on winXP laptop Serge M. Slivitzky
Re: Snort 1.8.7 on winXP laptop Frank Knobbe
Re: Snort and high-traffic lines Jens Krabbenhoeft
RE: Snort 1.8.7 on winXP laptop Miller, Eoin
Re: Snort Sensors die Chris Green
RE: Acid Tika
Re: bugbear signature? Shane Williams
Re: Snort 1.8.7 on winXP laptop Dragos Ruiu
Crashes with Dr.Watson errors - WindowsNT4 & Snort-1.8.7b128-Win 32_Barebones_Release.zip Bryce Stenberg
Re: Benchmarking load generator? creining
Re: Benchmarking load generator? Michael Boman

Thursday, 03 October

Re: Snort Sensors die Martin Roesch
RE: Snort Sensors die Thorson Shane R Contr 75 CS/SCBS
RE: Acid Randy Bey
Need Paging Capability Based On Alert Severity Ibarra, Michael
ACID and SnortReport Questions Ibarra, Michael
RE: ACID and SnortReport Questions Hicks, John
RE: ACID and SnortReport Questions Ibarra, Michael
Corrupted Payloads in MySQL DB? Nick Lange
Public packet traces? (was Re: Benchmarking load generator?) Bennett Todd
Re: Snort and high-traffic lines jsp1999
Re: Public packet traces? (was Re: Benchmarking load generator?) jsp1999
ACID Tim Bogart
Re: Public packet traces? (was Re: Benchmarking load generator?) Bennett Todd
memory leak in Snort 1.8.7? Matthew Harrell
RE: ACID Ibarra, Michael
Need help with Scan Socks Proxy Attempts Ed Kasky
RE: Need help with Scan Socks Proxy Attempts Ibarra, Michael
Re: memory leak in Snort 1.8.7? Matthew Harrell
solaris 2.8 compile error on snort 1.9b6 Michael Scheidell
Re: solaris 2.8 compile error on snort 1.9b6 Chris Green
Snort testing with Snot Kelly Mandrake
RE: Snort/ACID: Database Error 134 JC
Snort-users] ACID: Alert Viewing problem..... Michael
Rule Creation Question !. Moreno Poli
Use Snort to measure HTTP transfer ? Juan José Sánchez Mesa
Re: Win2K Advanced Server problems Doolittle, David
RE: Use Snort to measure HTTP transfer ? Miller, Eoin
--enable-flexresp Larry Calow
signature follow-up how-to doc twig les
Re: solaris 2.8 compile error on snort 1.9b6 Michael Scheidell
Re: memory leak in Snort 1.8.7? Ben Feinstein
RE: Rule Creation Question !. Wayne T Work
Re: --enable-flexresp Jeff Nathan
snort-1.9.0 is released! Chris Green

Friday, 04 October

Starting SNORT Remus
snortrules.tar.gz not updated Martin Olsson
Problems with MySQL output Borja Marcos
Re: snortrules.tar.gz not updated Chris Green
Re: memory leak in Snort 1.8.7? Matthew Harrell
Snort 1.9 and ACID? Pacheco, Michael F.
Re: ACID Lefevre, Steven
RE: Starting SNORT Snort
RE: Problems with MySQL output Snort
RE: Snort 1.9 and ACID? Uhte, Russ
Re: Rule Creation Question !. Bennett Todd
Win32 v1.9 incorrect on snort.org web site Rich Adamson
RE: Snort 1.9 and ACID? Pacheco, Michael F.
RE: [Snort-devel] Win32 v1.9 incorrect on snort.org web site Turner Ryan S KPWA
wrong title Lefevre, Steven
RE: Snort 1.9 and ACID? Uhte, Russ
Executing SQL (postgresql) to get results? Sloan Bowman
Re: Win32 v1.9 incorrect on snort.org web site Chris Green
RE: [Snort-devel] Win32 v1.9 incorrect on snort.org web site Rich Adamson
Error: Unknown config: reference Scott_Avvento
RE: snort-1.9.0 is released! Kreimendahl, Chad J
Re: snort-1.9.0 is released! twig les
Channel bonding in Linux --- brief HOWTO, version 1.1 Bennett Todd
Weird Messages Ibarra, Michael
snort1.9 WIN32 compile problems Paul Accosta
Re: snort-1.9.0 is released! Bennett Todd
Re: snort1.9 WIN32 compile problems Chris Green
Re: Weird Messages Chris Green
RE: Weird Messages Ibarra, Michael
Snort 1.9, RH 7.3 and Acid Beckett, Josh
RE: Executing SQL (postgresql) to get results? Kevin Brown
snort1.9.0 source and binary issue Paul Accosta
Re: Weird Messages Chris Green
Re: Snort-users] ACID: Alert Viewing problem..... Gene Yoo
Re: snort1.9.0 source and binary issue Chris Green
Re: Snort 1.9, RH 7.3 and Acid Addam Schroll
RE: Snort 1.9, RH 7.3 and Acid Beckett, Josh
Snort 1.90 no Spade? Shane Hickey
Library required for --enable-flexresp francisv

Saturday, 05 October

How to log an alert plus x number of packets? Rich Adamson
Re: How to log an alert plus x number of packets? Michael Boman
Re: Library required for --enable-flexresp Frank Knobbe
Re: Snort 1.90 no Spade? James Hoagland
Re: Library required for --enable-flexresp Jeff Nathan
Re: Snort 1.90 no Spade? james
Barnyard: classification off by one? Michael Scheidell
Re: Barnyard: classification off by one? Dragos Ruiu

Sunday, 06 October

Re: [Barnyard-users] Barnyard: classification off by one? Andrew R. Baker
Initializing Output Plugins! Sander Smeenk
Re: Initializing Output Plugins! Erek Adams
Re: Initializing Output Plugins! Sander Smeenk
Re: Initializing Output Plugins! Erek Adams
Re: Initializing Output Plugins! Sander Smeenk
Re: Win32 v1.9 incorrect on snort.org web site Juan José Sánchez Mesa
RE: Starting SNORT Michael Brown
snort1.9 WIN32 compile problems Paul Accosta
mystery arp message robin
Strange Acid/php error: (-upgrade to older version) Magnus.M.Glantz
Re: mystery arp message Chris Reining
Re: mystery arp message Jeff Nathan
Re: mystery arp message Jeff Nathan

Monday, 07 October

Connecting to other than localhost crashes mysqld Josh Harding
Addendum: Problems with MySQL output Borja Marcos
fewer alerts found with acid than snort reported charella constansia
Logging to non local database Helmut Schneider
WEB-IIS cmd.exe access Alwin Raymundo
RE: Logging to non local database Wayne T Work
RE: WEB-IIS cmd.exe access Laverdière Yvan
RE: Library required for --enable-flexresp Slighter, Tim
Re: Logging to non local database Helmut Schneider
RE: Strange Acid/php error: (-upgrade to older vers ion) Slighter, Tim
RE: Logging to non local database Miller, Eoin
RE: Snort 1.9, RH 7.3 and Acid Slighter, Tim
RE: Library required for --enable-flexresp Jeff Nathan
RE: Logging to non local database Wayne T Work
RE: Snort 1.9, RH 7.3 and Acid Beckett, Josh
Re: Logging to non local database Helmut Schneider
Red Hat 8 and Snort Alex Pinheiro Machado Rodrigues
RE: Logging to non local database Miller, Eoin
RE: Logging to non local database Ted Stringer
Re: Logging to non local database Helmut Schneider
Re: Logging to non local database Helmut Schneider
Re: Red Hat 8 and Snort shrek-m () gmx de
Re: Logging to non local database Jeff Nathan
Re: Red Hat 8 and Snort Alex Pinheiro Machado Rodrigues
loghog question Matthew Harrell
RE: Snort 1.9, RH 7.3 and Acid Erek Adams
Re: loghog question Matthew Harrell
RE: loghog question Miller, Eoin
Re: Re: Red Hat 8 and Snort shrek-m () gmx de
Barnyard 0.1 RC3 available Andrew R. Baker
Snort 1.9.0 documentation? Cloppert, Michael
Re: Snort 1.9.0 documentation? Chris Green
simple question Petre Bandac
RE: simple question Steve Halligan
RE: Snort 1.9, RH 7.3 and Acid Kevin Brown
Problem with Upgrading to 1.9 linus
improvements with snort-ng Paul Accosta

Tuesday, 08 October

Snorting with a single ethernet card Xavi Altafulla
Re: Logging to non local database Borja Marcos
logsnorter Ben Whittaker
RE: Strange Acid/php error: (-upgrade to older version) Paulo Filipe Mira
Snort1.9 TCPdump output file format Grime, Richard S
(no subject) Abimbola Abiola
(no subject) counterping
Snort 1.9.0 as Service on Win2k bunger
ATTACK RESPONSES id check returned root Dallas Jordan
RE: ATTACK RESPONSES id check returned root McCammon, Keith
Re: ATTACK RESPONSES id check returned root Chris Green
Portscan from self? Marc Thomas
snort & mysql; not using the password?! Folkert van Heusden
RE: Portscan from self? Miller, Eoin
Errror : can not get write access to logging directory "1". Abimbola Abiola
RE: Snort 1.9, RH 7.3 and Acid Beckett, Josh
RE: snort & mysql; not using the password?! Miller, Eoin
RE: Errror : can not get write access to logging directory "1". Miller, Eoin
RE: snort & mysql; not using the password?! Folkert van Heusden
Re: Snort1.9 TCPdump output file format Erek Adams
stream4 is alerting from my own MySQL Box??? Jeff Ramsey
RE: Snort 1.9, RH 7.3 and Acid Erek Adams
AW: snort & mysql; not using the password?! Sean Wheeler
Re: stream4 is alerting from my own MySQL Box??? Erek Adams
Query display Toby Nelson
csv output plugin problems on 1.9 w32 John York
RE: snort & mysql; not using the password?! Slighter, Tim
AW: snort & mysql; not using the password?! Sean Wheeler
portscan-ignorehosts for portscan2? (was Re: Portscan from self?) Bennett Todd
RE: ATTACK RESPONSES id check returned root Metz, Tim
Re: portscan-ignorehosts for portscan2? (was Re: Portscan from self?) Erek Adams
Re: Query display Matt Kettler
RE: Miller, Eoin
Re: (no subject) Matt Kettler
RE: snort & mysql; not using the password?! Slighter, Tim
snortsnarf displays 0 alerts Dennis Gorman
Query display (Resent w/ more info) Toby Nelson
RE: (no subject) Beckett, Josh
error when starting snort on a Linux 8.0 system Nathan Whitehouse
1.9.0 and "Unknown Datagram decoding problem" Jason Haar
Re: error when starting snort on a Linux 8.0 system Erek Adams
Re: snortsnarf displays 0 alerts James Hoagland
RE: error when starting snort on a Linux 8.0 system Wayne T Work
Re: 1.9.0 and "Unknown Datagram decoding problem" Erek Adams
RE: (no subject) Beckett, Josh
RE: My own MySQL server giving me stream4 alerts Jeff Ramsey
RE: snortsnarf displays 0 alerts Dennis Gorman
Editing detect_scans Michael Shekman
ADODB ACID SNORT Toby Nelson
Re: 1.9.0 and "Unknown Datagram decoding problem" Chris Green
RE: ATTACK RESPONSES id check returned root Semerjian, Ohanes
Snort version comparisons Sabari Devadoss
Spade 021008.1 available! James Hoagland
Re: Snort version comparisons Chris Green
drive config for sensor? /dev/null
Re: Snort version comparisons Erek Adams
Re: drive config for sensor? Erek Adams

Wednesday, 09 October

Segfault on Alpha 1.9.0 Kunos Péter
Re: Segfault on Alpha 1.9.0 Erek Adams
RE: Snort1.9 TCPdump output file format Grime, Richard S
RE: Snort1.9 TCPdump output file format Erek Adams
Re: Snort version comparisons larc
installing snort Andrea Iacopini
RE: Segfault on Alpha 1.9.0 Kunos Péter
portscan2 Alwin Raymundo
Re: Spade 021008.1 available! James Hoagland
Finding SIDs in ACID Michael G. Meskill (MIS)
Re: Snortcenter can't connect to sensor Larc
Snortcenter faq/mailing list anywhere? peterm
Snortcenter can't connect to sensor peterm
Re: Problem with compiling mysql-support on RedHat 7.3 peterm
Re: [Snort-users] Snort 1.9.0 Beta 6 Chris Green
Re: Snortcenter can't connect to sensor peterm
RE: Acid Issues with snort Slighter, Tim
Query display (Resent w/ more info) Toby Nelson
ADODB ACID SNORT Toby Nelson
Anything better? Toby Nelson
RE: Anything better? Tod Neil
Snort stall at start Nathan Whitehouse
RE: Anything better? Ibarra, Michael
RE: Snort version comparisons Crow, Owen
RE: Anything better? Hicks, John
RE: Anything better? Slighter, Tim
RE: Anything better? Slighter, Tim
RE: Anything better? Hicks, John
Re: RE: [Snort-sigs] Current rule set for snort 1.8.7 netbios.rules -- Windows 2000 to Windows 2000 mapping detecting C$ and ADMIN$ whats the deal? Chris Green
Bouncer Sheahan, Paul (PCLN-NW)
IP Address's in Rule Mike McCabe
Re: Snort stall at start Matt Kettler
RE: IP Address's in Rule Slighter, Tim
RE: Acid Issues with snort Roman Danyliw
Re: IP Address's in Rule Erek Adams
Re: Query display (Resent w/ more info) Roman Danyliw
Re: IP Address's in Rule Matt Kettler
TCPDUMP Filter don't work :( counterping
Newbie questions, Snort on NT, stealth mode vs react/flexresp Dave Thornburgh
False Alerts Sean T. Ballard
Re: IP Address's in Rule Mike McCabe
Re: TCPDUMP Filter don't work :( Phil Wood
Re: TCPDUMP Filter don't work :( Jim Cliver
RE: Acid Issues with snort Slighter, Tim
Snort and port lists Sean Wheeler
Re: False Alerts Peter . VE
RE: TCPDUMP Filter don't work :( Wirth, Jeff
RE: False Alerts Hicks, John
Snort-bloat-1.9.0 Doc JOHN R BLACKMORE
snort dead but subsys locked Nathan Whitehouse
RE: snort dead but subsys locked Miller, Eoin
Snort portscan false positives? Felipe Alfaro Solana
RE: snort dead but subsys locked Ben Tetu-Pappas
Re: snort dead but subsys locked Earl D. Fife
Re: Snort portscan false positives? Erek Adams
Re: Newbie questions, Snort on NT, stealth mode vs react/flexresp Dave Thornburgh
Portscan2 filtering suggestions - Snort 1.9.0 & acid Beckett, Josh
Re: Newbie questions, Snort on NT, stealth mode vs react/flexresp Dragos Ruiu
Hardware config Wim van den Berge
RE: Portscan2 filtering suggestions - Snort 1.9.0 & acid Beckett, Josh
Attention: Win32 Users - Snort 1.9.0 "STABLE RELEASE" Binaries Available Michael Steele
How to avoid false alarms with Gnutella: Getting a lot of SHELLCODE x86 NOOP and STEALTH ACTIVITY for dest port 6346 Jose Vicente Nunez Zuleta
Re: Newbie questions, Snort on NT, stealth mode vs react/flexresp Frank Knobbe
Help with snort connection to MySQL Nathan Whitehouse
Re: Snort portscan false positives? Felipe Alfaro Solana
Session issues Toby Nelson
RE: Snort portscan false positives? Beckett, Josh
SNORT 1.9 As Service - Won't Start bunger
RE: SNORT 1.9 As Service - Won't Start Michael Steele
portscan.log file Ganu Skop
Re: Snort portscan false positives? Erek Adams
Re: portscan.log file Erek Adams

Thursday, 10 October

Migrating from 1.8.6 to 1.9.0 and updating the MySQL-DB scheme, any docs outthere? Edin Dizdarevic
how to show payload data SW
i need your help. Abimbola Abiola
(no subject) Adrienne Kotze
I need you help. Abimbola Abiola
Re: How to capture the Snort sensor ID using SnMP traps Glenn Mansfield Keeni
RE: Acid Issues with snort Cloppert, Michael
RE: simple question Robby Desmond
Snort 1.9 on Win 2000 Server Salvatore Basso
snort on windows automation
SV: Strange Acid/php error: (-upgrade to older version) Magnus.M.Glantz
Problem with Upgrading to 1.9 Linus Hindmarsh
csv output plugin problems on 1.9 w32 John York
Database Error Weber, Wes
SMTP_SERVERS error when starting snort Dirty Absu
SV: Strange Acid/php error: (-upgrade to older version) Magnus.M.Glantz
snortsnarf displays 0 alerts Dennis Gorman
Snort dropping packages. How to ? armando
Snorting with a single ethernet card Xavi Altafulla
logging when the connection to MySQL is lost Hubert Karlch
Help Req: Snort Compile Problems Chris Willis
db schema upgrade Vladimir Orlando
Re: IP Address's in Rule Robby Desmond
How to disable a particular interface Grimes, Roger
RE: WEB-IIS cmd.exe access Brown, Bobby (US - Hermitage)
RE: Interesting alerts. Jeremy Junginger
I keep getting an alert from my own SQL server Jeff Ramsey
Snort 1.9 vs 2.0 Hervé Debar
Can't connect to local MYSQL Adeel Asher
RE: Acid Issues with snort Slighter, Tim
RE: snort on windows Dennis Gorman
RE: logging when the connection to MySQL is lost Steve Halligan
Spade available via Snortenstein James Hoagland
RE: SNORT 1.9 As Service - Won't Start Michael Steele
Re: Snort 1.9 vs 2.0 Chris Green
action on packet Reinaldo Nurquez
Snort tools for detecting, and alerting based on a DOS attack. George Walford
RE: action on packet Knight, Ric
Re: Snort portscan false positives? Bob Van Cleef
Re: Can't connect to local MYSQL twig les
alerts with "[Xref => arachnids" tag bunched together in Snort alert file murcsu murcsu () mail com
RE: SNORT 1.9 As Service - Won't Start Michael Steele
Re: SMTP_SERVERS error when starting snort twig les
Re: Snort 1.9 vs 2.0 Andreas Hasenack
Acid archive error. Marc Thomas
java and ActiveX signatures? Andreas Hasenack
RE: csv output plugin problems on 1.9 w32 John York
Re: Snort 1.9 vs 2.0 Martin Roesch
barnyard configure problem Randy Bey
RE: RE: csv output plugin problems on 1.9 w32 John York
Re: how to show payload data Dragos Ruiu
Snort Implementation Guide - Redhat 7.3 / MySQL / ACID Steve Scott
Snort supports... Daniel Kobayashi Imori
Re: alerts with "[Xref => arachnids" tag bunched together in Snort alert file Lawrence Reed
Re: Snort supports... hackerwacker
Problems starting snort dhobson
Re: Problems starting snort Erek Adams
RE: Migrating from 1.8.6 to 1.9.0 and updating the MySQL-DB scheme, any docs outthere? Gene Gomez
Snort dropping packages. How to ? armando
Re: Snort dropping packages. How to ? Alberto Gonzalez
Re: Snort dropping packages. How to ? Alberto Gonzalez
Re: Migrating from 1.8.6 to 1.9.0 and updating the MySQL-DB scheme, any docs outthere? Edin Dizdarevic
Re: Snort dropping packages. How to ? Jason

Friday, 11 October

Re: SV: Strange Acid/php error: (-upgrade to older version) Lentila de Vultur
Duplicate classification, barnyard HUP Michael Scheidell
Acid Alwin Raymundo
Re: barnyard configure problem Alwin Raymundo
Re: Snort 1.9 vs 2.0 Martin Roesch
Dropping packets - how to tell? Lefevre, Steven
Re: Dropping packets - how to tell? Alberto Gonzalez
RE: logging when the connection to MySQL is lost Gene Gomez
Stumped Nathan Whitehouse
tcp port 0 rule Bob Van Cleef
Re: barnyard configure problem Andrew R. Baker
mysql & snort Кругляков Николай Владиславович
Re: Snort 1.9 vs 2.0 Hervé Debar
Sensor not logging data Andy Stein
Snort/Acid Toby Nelson
RE: Stumped Slighter, Tim
RE: barnyard configure problem Wayne T Work
RE: mysql & snort Wayne T Work
RE: Stumped Nathan Whitehouse
Re: Snort 1.9 vs 2.0 Chris Green
Re: Snort 1.9 vs 2.0 Florin Andrei
RE: Stumped Gene Gomez
ARP logging? Cade Cairns
Re: Snort and port lists Martin Roesch
Re: Dropping packets - how to tell? Erek Adams
Re: logging when the connection to MySQL is lost Erek Adams
Multiple Sensors to 1 DB Server The infoSphere
Re: Sensor not logging data Erek Adams
Re: ARP logging? matt
Re: Snort 1.9 vs 2.0 Erek Adams
RE: Stumped Erek Adams
Re: ARP logging? Cade Cairns
Re: ARP logging? Cade Cairns
Reading log packet data rkeller
Re: Reading log packet data Dragos Ruiu
RE: Multiple Sensors to 1 DB Server Kevin Brown
portscans of the broadcast address? Bob Van Cleef
Re: portscans of the broadcast address? Alberto Gonzalez
Re: portscans of the broadcast address? Erek Adams
Re: Multiple Sensors to 1 DB Server Dragos Ruiu

Saturday, 12 October

mysql_error: Access denied for user: 'snort@192.168.1.30' (Using password: YES) Sujit Pal
RE: mysql_error: Access denied for user: 'snort@192.168.1.30' (Using password: YES) Sujit Pal
Re: mysql_error: Access denied for user: 'snort@192.168.1.30' (Using password: YES) Robby Desmond
Spade 021012.1 available James Hoagland

Sunday, 13 October

Experimenting with TAG, question Rich Adamson
Using snort sensors. Sujit Pal
Re: Using snort sensors. Chris Baker

Monday, 14 October

Re: Snort 1.9 vs 2.0 Jens Krabbenhoeft
Running 2 Bridge sensors on 1 host Thijs Hodiamont
Can't set logdir in 1.9.0 Serge Leschinsky
Snort 1.9 as a Win2k Service bunger
New version of ACID John Maestrale
RE: Snort 1.9 as a Win2k Service Uhte, Russ
regex Fabio Panigatti
Re: Can't set logdir in 1.9.0 Chris Green
Re: Experimenting with TAG, question Martin Roesch
Re: New version of ACID Anton A. Chuvakin
RE: New version of ACID John Maestrale
Re: New version of ACID Roman Danyliw
Re: Using snort sensors. Pedro Tedeschi
Jpgraph Toby Nelson
(no subject) Nathan Whitehouse
Session issues Toby Nelson
snortsnarf displays 0 alerts Dennis Gorman
RE: New version of ACID Bob Dehnhardt
Re: (no subject) hackerwacker
snort license Admin-Stress
Re: snort license Chris Green
Re: New version of ACID Bradley, Paul
RE: (no subject) Bob Dehnhardt
Re: Using snort sensors. Erek Adams
Re: Running 2 Bridge sensors on 1 host Erek Adams
Re: (no subject) Erek Adams
" Problem obtaining SENSOR ID", unable to start snort/access postgres Eli Stair
Rule Testing Tools for DDOS Sean T. Ballard
Re: " Problem obtaining SENSOR ID", unable to start snort/access postgres Eli Stair
Re: " Problem obtaining SENSOR ID", unable to start snort/access postgres Eli Stair
AW: db schema upgrade Sean Wheeler
RE: New version of ACID John Maestrale
Ignore Host John Maestrale
Total Alert Count in snort_archive out of whack? Joe Christy
1.9.0 and PostgreSQL weirdness Derek Glidden
deleted.rules Sean Wheeler
Snort-1.9.0 not generating required alerts archana rao
Re: Snort-1.9.0 not generating required alerts Erek Adams
Running Snort 1.9.0 from shell script Eric Joe
Re: Running Snort 1.9.0 from shell script Michael Boman
Re: Running Snort 1.9.0 from shell script Eric Joe
MSSQL? Paul D. Shaffer
Re: MSSQL? Steve Suehring
RE: Running Snort 1.9.0 from shell script Wayne T Work
Re: Running Snort 1.9.0 from shell script Erek Adams
stream4 issues: possible EVASIVE RST detection Ben Keepper
Re: stream4 issues: possible EVASIVE RST detection Chris Reining

Tuesday, 15 October

Re: Ignore Host Alberto Gonzalez
Re: Multiple Sensors to 1 DB Server Jason Haar
Re: barnyard (Payload) Alwin Raymundo
Windows + Snort + ISA server question Chris Willis
Re: barnyard (Payload) Alwin Raymundo
Re: barnyard (Payload) Jens Krabbenhoeft
Re: barnyard (Payload) Bamm Visscher
General question Philippe Dhont (Sea-ro)
Re: snortsnarf displays 0 alerts James Hoagland
Snortsnarf 020516.1 and Snort 1.9.0 errors Eric Joe
RE: Running Snort 1.9.0 from shell script Randy Bey
please help ID payload info Randy Bey
Changing the filename format for alerts McKim, Tim
Re: please help ID payload info Matt Kettler
RE: please help ID payload info Randy Bey
RE: stream4 issues: possible EVASIVE RST detection Daniel Miessler
RE: stream4 issues: possible EVASIVE RST detection Miller, Eoin
ACID Database ERROR:Database ERROR:Unknown column 'layer4_proto' in 'order clause' David E. Gianndrea
RE: stream4 issues: possible EVASIVE RST detection Daniel Miessler
RE: please help ID payload info twig les
Re: Snort-1.9.0 not generating required alerts archana rao
Re: Snortsnarf 020516.1 and Snort 1.9.0 errors Eric Joe
Re: Snort-1.9.0 not generating required alerts Erek Adams
Re: Snortsnarf 020516.1 and Snort 1.9.0 errors Erek Adams
RE: Unknown port traffic.... Clifford Durbin
Re: Snortsnarf 020516.1 and Snort 1.9.0 errors James Hoagland
RE: Changing the filename format for alerts Matt Yackley
RE: Changing the filename format for alerts Erek Adams
RE: Changing the filename format for alerts Matt Yackley
ACID/MySQL - event count vs. acid_event count Joe Christy
RE: Changing the filename format for alerts Erek Adams
Re: Snort-1.9.0 not generating required alerts archana rao
RE: Changing the filename format for alerts Matt Yackley
Re: barnyard (Payload) Martin Roesch
Snort 1.9 as Service Help bunger
Windows SUCCESS!!! Chris Willis
Re: ACID Database ERROR:Database ERROR:Unknown column 'layer4_proto' in 'order clause' Roman Danyliw
Re: 1.9.0 and PostgreSQL weirdness Roman Danyliw
Portscan preprocessor and false positives Ben Keepper
Re: Portscan preprocessor and false positives Alberto Gonzalez
Snort + MySQL Network Operations
RE: Snort 1.9 as Service Help Michael Steele
Re: Snort-1.9.0 not generating required alerts Alberto Gonzalez
Re: Snort-1.9.0 not generating required alerts Erek Adams
Re: Snort-1.9.0 not generating required alerts Alberto Gonzalez
Re: Portscan preprocessor and false positives Erek Adams

Wednesday, 16 October

snort 1.9 doesn't raise alert for httptunneling telnet... s.wun
Re[2]: Can't set logdir in 1.9.0 Serge Leschinsky
Re: snort 1.9 doesn't raise alert for httptunneling telnet... Erek Adams
New feature wanted in snort: packet print Martin Olsson
Re[2]: Can't set logdir in 1.9.0 Erek Adams
Re: barnyard (Payload) Alwin Raymundo
Re: New feature wanted in snort: packet print Chris Green
Re: barnyard (Payload) Jens Krabbenhoeft
RE: snortsnarf displays 0 alerts Dennis Gorman
Re: Portscan preprocessor and false positives Ben Keepper
dinamic IP setting gimmi gionnini
Re: dinamic IP setting Michael Boman
Re: barnyard (Payload) Martin Roesch
Re: dinamic IP setting gimmi gionnini
Re: Portscan preprocessor and false positives Bennett Todd
Does any have this script? The infoSphere
Re: dinamic IP setting gimmi gionnini
snort and network tap Peter Erickson
Re: Does any have this script? The infoSphere
Re: snort and network tap Michael Boman
Snort 1.9.0 with MySQL Bryan H
Re: Does any have this script? Bryan H
Rule help with multiple port negation McKim, Tim
Snort 1.9 (Schema 106) and Schema 105 database Nicholas Bachmann
Re: snort and network tap Bennett Todd
SnortSam 2.x recall Frank Knobbe
Re: Snort 1.9 (Schema 106) and Schema 105 database Roman Danyliw
Re: Snort 1.9 (Schema 106) and Schema 105 database Edin Dizdarevic
Re: Snort-1.9.0 not generating required alerts archana rao
Re: Snort-1.9.0 not generating required alerts archana rao
Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
order of matching rules archana rao
Re: Snort 1.9.0 taking 100% cpu after a (unknown) while Chris Green
Re: order of matching rules Chris Green
Re: order of matching rules Matt Kettler
Re: snort and network tap Peter Erickson
Re: Snort 1.9.0 with MySQL Alberto Gonzalez
Re: Rule help with multiple port negation Alberto Gonzalez
errno: 145 in acid Max Valdez
Re: snort and network tap Scot Scot
Re: SnortSam 2.x recall Frank Knobbe
(no subject) Nanabhay Mohamed * Group (GP)
Problems starting snort Pieter Blaauw

Thursday, 17 October

RE: please help ID payload info matthew . keay
Re: Snort 1.9.0 taking 100% cpu after a (unknown) while Andrea Barisani
RE: please help ID payload info matthew . keay
Installing Snort Andrea Iacopini
Re: Installing Snort Michael Muenz
updated Multiple Snort Sensors HOWTO Andrea Barisani
barnyard payload Alwin Raymundo
RE: Installing Snort Slighter, Tim
configuring snort. Andrea Iacopini
Re: Portscan preprocessor and false positives Bennett Todd
Re: configuring snort. Michael Muenz
LogWatch Pauling
Re: errno: 145 in acid Roman Danyliw
Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
Re[2]: Can't set logdir in 1.9.0 Serge Leschinsky
snort upgrade and odd logs barry
Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
Interesting ftp traffic Michael Kopach
stream4 issues: possible EVASIVE RST detection Ben Keepper
Re: Snort 1.9 on Win 2000 Server Salvatore Basso
install with postgresql jamie
Re: Segfault on Alpha 1.9.0 Alain Fauconnet
Repeated Alert since upgrading to 1.9 Eric Joe
Re: please help ID payload info Robby Desmond
ACID Database ERROR:Database ERROR:Unknown column 'layer4_proto' in 'order clause' David E. Gianndrea
Snort + MySQL NOC
Re: Segfault on Alpha 1.9.0 Alain Fauconnet
Snort won't work??? HELP!! lists
snort-1.9.0 not detecting attacks archana rao
digitally sign event data by sensor counter . spy
Help with content-list usage - Unable to open list file: Sven_da_duder Sean Wheeler
Stopping local logging when using a database (aka alerts file) Steve Scott
Problems with mysql auth Andrea Iacopini
AW: Help with content-list usage - Unable to open list file: Sven_da_duder Sean Wheeler
Re: Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
Re: digitally sign event data by sensor Bennett Todd
RE: digitally sign event data by sensor Ben Tetu-Pappas
AW: Help with content-list usage - Unable to open list file: Sven_da_duder Sean Wheeler
Re: ACID Database ERROR:Database ERROR:Unknown column 'layer4_proto' in 'order clause' Roman Danyliw
Re: install with postgresql Roman Danyliw
Re: barnyard payload Andrew R. Baker
Port Scan Michael Kopach
Re: order of matching rules archana rao
Old posts hitting the list today? David E. Gianndrea
Re: barnyard payload Alwin Raymundo
Re: snort and network tap Jeff Nathan
Re: Snort 1.9.0 taking 100% cpu after a (unknown) while Martin Roesch
SnortSnarf version 021017.1 now available! James Hoagland
Re: Snort 1.9.0 taking 100% cpu after a (unknown) while Max Valdez
Re: digitally sign event data by sensor Oliver Bode
format of logs Serge Leschinsky
Re[3]: Can't set logdir in 1.9.0 Serge Leschinsky

Friday, 18 October

Problem with support snmp on RH-7.3 _/CaT\_
Re: Problem with support snmp on RH-7.3 Michael Muenz
RE: Problem with support snmp on RH-7.3 _/CaT\_
Re: Problem with support snmp on RH-7.3 Michael Muenz
Re: Problem with support snmp on RH-7.3 Jens Krabbenhoeft
Portscan2 & Portscan Ignorehosts Sean Wheeler
RE: Problem with support snmp on RH-7.3 _/CaT\_
Re: Detecting another sniffer Frank Edwards
Double logging with 1.8.7/1.9.0 Jan Ploski
RE: Re: Detecting another sniffer McCammon, Keith
Bug in creating AGs in ACID 0.9.6b22 Peter Banka
port 1241 MSG Joe Giles
Re: Snort 1.9 on Win 2000 Server Salvatore Basso
spp_portscan2 questions Pauling
Re: Portscan2 & Portscan Ignorehosts James Hoagland
how to run snort as a sniffer? SW
RE: port 1241 MSG Wirth, Jeff
RE: how to run snort as a sniffer? Wirth, Jeff
RE: port 1241 MSG Khera, Manish (US - San Francisco)
RE: Problem with support snmp on RH-7.3 Kevin Brown
RE: Problem with support SNMP on RH-7.3 Christopher Lyon
Re: spp_portscan2 questions Bennett Todd
Re: spp_portscan2 questions Alberto Gonzalez
Snort-1.9.0-win32.exe Tom Morgan
Re: Snort-1.9.0-win32.exe Roman Danyliw
RE: Snort-1.9.0-win32.exe Tom Morgan
Newbie "what does this mean" question Ian Hunter
Re: Newbie "what does this mean" question Alberto Gonzalez
Re: Can't set logdir in 1.9.0 Sten Kalenda home
Re: Newbie "what does this mean" question Ian Hunter
Re: how to run snort as a sniffer? Sten Kalenda home
Snort, Syslog Swatch Question Christopher Lyon
RE: port 1241 MSG Joe Giles
ACID search page problem ? Marc-Andre Hamelin
New Feature in 1.9x Joe Giles
Snort-2.0 dowload archana rao
Re: Snort-2.0 dowload Matt Kettler

Saturday, 19 October

setting up snort for the first time Bob Dixon
Re: setting up snort for the first time Mike Sweeney
Mysql 101 (ACID config) Edward W. Ray

Sunday, 20 October

SnortSnarf Helmut Schneider
RE: Mysql 101 (ACID config) Wayne T Work
RE: Mysql 101 (ACID config) Maarten Hartsuijker
Re: Mysql 101 (ACID config) Roman Danyliw
How do I stop all alerts generated by 'ssp_stream4'? (snort 1.9.0 ) Bryce Stenberg
how to edit the automated startup script renyubo

Monday, 21 October

Architecture Issue: Attack alerts not picked up on internal senso r Nanabhay Mohamed * Group (GP)
Schema on Mysql Brian Nestor
May be slightly off topic but... Taylor, Graham
snort 1.9 memory usage increase Mike Tone
Re: snort 1.9 memory usage increase Chris Green
Snort and MySQL problems -> followup Borja Marcos
RE: How do I stop all alerts generated by 'ssp_stream4'? (snort 1.9.0 ) Kreimendahl, Chad J
Mysql and payload Julien Bordet
Snort 1.9.0 on redhat 8.0 Nathan Whitehouse
Snort 1.9 problem Security Admin
RE: Snort-1.9.0-win32.exe Tom Morgan
RE: Snort-1.9.0-win32.exe Slighter, Tim
False positives Gary Verhulp
RE: Snort/Acid Cloppert, Michael
Re: Snort 1.9.0 on redhat 8.0 Alex Pinheiro Machado Rodrigues
Enterprise Snort Implementation ( used to be Snort Installation Manual) * New Version * Steven J. Scott
RE: May be slightly off topic but... Gene Gomez
Re: Re: Snort 1.9.0 on redhat 8.0 shrek-m () gmx de
Re: Re: Snort 1.9.0 on redhat 8.0 Steven J. Scott
RE: Snort 2.0 Murat Bicer
RE: How do I stop all alerts generated by 'ssp_stre am4'? (snort 1.9.0 ) Bryce Stenberg
Re: Snort 1.9 problem Alberto Gonzalez
Re: False positives Alberto Gonzalez
Re: How do I stop all alerts generated by 'ssp_stream4'? (snort 1.9.0 ) Alberto Gonzalez
Re: RE: Snort 2.0 Alberto Gonzalez
RE: RE: Snort 2.0 Wayne T Work

Tuesday, 22 October

Re: Snort 1.9.0 on redhat 8.0 Richard Ellerbrock
Swatch: cannot receive email jo cam
Barnyard Cant Find File!! Grigoris Vidakis
NetBIOS UDP 137 for reverse name resolution ? daniele.muscetta () libero it
Doubt about snort.org Javier Verdu Mula
Snort Center under Windows tazmaniak tazmaniak
Veryifing snort Andrea Iacopini
Re: Snort 1.9 problem Bennett Todd
Re: Doubt about snort.org Alberto Gonzalez
Off topic a little - usage by port? Rich Adamson
Hardware for a 2 MBit Network Traffik Alexander Bruns
Re: Hardware for a 2 MBit Network Traffik Alberto Gonzalez
RE: Off topic a little - usage by port? Miller, Eoin
RE: Off topic a little - usage by port? McCammon, Keith
RE: Off topic a little - usage by port? Knight, Ric
'SMB Name Wildcard' Murat Bicer
Hogwash on Snort box Dallas Jordan
msSQL thread? Slighter, Tim
Snort and Kazaa 2.0 Vicente
Re: order of matching rules Christopher Kruegel
Re: Off topic a little - usage by port? Chris Reining
Re: Off topic a little - usage by port? Skip Carter
Snort 1.9.0 on solaris Szymon Miotk
Snort doesn't appear to be looking at everything on our network Steve Saunders
Re: order of matching rules Christopher Kruegel
Mysql and payload Julien Bordet
Snort 2.0 Murat Bicer
Re: Snort doesn't appear to be looking at everything on our network Chris Green
Re: order of matching rules Chris Green
Snort real-time awareness tools - your opinion Shreyas Doshi
RE: Snort doesn't appear to be looking at everything on our network Wayne T Work
BayArea Snorters User Meeting TODAY... Todd Holloway
Re: False positives Gary Verhulp
Re: False positives Chris Green
Re: False positives Gary Verhulp
Re: Off topic a little - usage by port? Gene Yoo
RE: Snort doesn't appear to be looking at everythin g on our network Bob Dehnhardt
BACKDOOR BackOrifice access Max Valdez
ACID Error loading the DB Abstraction library Jessup, Justin
snort compile error richard . fuser
Re: Mysql and payload Roman Danyliw
Re: Snort and Kazaa 2.0 Sam Evans
RE: Veryifing snort R
Re: order of matching rules Chris Green
Re: Hogwash on Snort box Alberto Gonzalez
Re: Snort 1.9.0 on solaris Chris Green
RE: Schema on Mysql R
Re: snort compile error Alberto Gonzalez
Re: snort compile error richard . fuser
MSSQL errors... Steve Pearson
(no subject) Kreimendahl, Chad J
Re: Snort and Kazaa 2.0 Frank Knobbe
Re: Snort and Kazaa 2.0 Sam Evans

Wednesday, 23 October

ACID with Apache2 Helmut Schneider
Redhat 8.0 Tom Morgan
RE: Schema on Mysql Ibarra, Michael
RE: Redhat 8.0 Wayne T Work
RE: Redhat 8.0 Tom Morgan
RE: Redhat 8.0 Wayne T Work
How to centralize the logs? mario
Idea for http response code as flag. Kreimendahl, Chad J
RE: Redhat 8.0 Security Admin
pass rules Hughes, Andy
Re: pass rules Alberto Gonzalez
RE: pass rules Hughes, Andy
Re: pass rules Jens Krabbenhoeft
Swatch + Snort: SMTP HELO overflow attempt jo cam
Re: ACID with Apache2 Max Valdez
ACID error loading DB abstraction library??? Jessup, Justin
Using generalised rules to activate bulk rules Sean Wheeler
Off-Topic - Cleveland Snort User Group announcement William Mathews
Multiple Problem with support plugin snmp in snort1.9.0 roger_h
RE: Snort-users digest, Vol 1 #2401 - 11 msgs Hughes, Andy
wireless capabilities Florin Andrei
RE: wireless capabilities Ibarra, Michael
Unknown Database type specified: a DBtype of '' was specified Beno
Acid Question M T
RE: Snort doesn't appear to be looking at everythin g on our network Robby Desmond
Mysql 101b Edward W. Ray
RE: Mysql 101b Hicks, John
Grouping Portscans Derrick Lichti
RE: Mysql 101b Edward W. Ray
alert file Zachary Uram
running snort Zachary Uram
Re: alert file Alberto Gonzalez
Re: alert file Zachary Uram
Re: alert file Alberto Gonzalez
Snort logging to mysql Edward W. Ray

Thursday, 24 October

RE: Redhat 8.0 David Yip
Re: running snort James Ainslie
Re: Off topic a little - usage by port? Alberto Gonzalez
Problems running Snort 1.9 for windows MOHESOWA BYAS
exclude home_net from external_net pilsl
Re: exclude home_net from external_ larc
Re: alert file Zachary Uram
Re: exclude home_net from external_net Alberto Gonzalez
PROBLEMAS Mario Alberto Soto Cordones
Re: exclude home_net from external_net Gary Flynn
UDP packet supposedly DROPped, but seen by snort anyway Jan Ploski
RE: Redhat 8.0 Michael Steele
RE: Problems running Snort 1.9 for windows Michael Steele
dual inteface? Daniel Curry
RE: Help on this error Michael Steele
RE: UDP packet supposedly DROPped, but seen by snor t anyway Matt Yackley
RE: PROBLEMAS Kreimendahl, Chad J
RE: UDP packet supposedly DROPped, but seen by snort anyway Jan Ploski
Portscan 2 question Joe Giles
Re: dual inteface? Bennett Todd
RE: Portscan 2 question Joe Giles
RE: Portscan 2 question Soren Macbeth
Re: Portscan 2 question Joe Giles
Re: Portscan 2 question Joe Giles
Re: Portscan 2 question Joe Giles
RE: Portscan 2 question Joe Giles
RE: Portscan 2 question Soren Macbeth
Re: Snort-users digest, Vol 1 #2407 - 12 msgs Mike Cole
Re: Portscan 2 question Gary Verhulp
Re: Snort-users digest, Vol 1 #2408 - 3 msgs Mike Cole
RE: Portscan 2 question Hicks, John
Snort 1.9.0 on Windows and MSSQL Robbins, Mark
RE: Portscan 2 question Joe Giles
Is this a valid rule? Lefevre, Steven
Re: dual inteface? Phil Wood
Re: Snort-users digest, Vol 1 #2409 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2410 - 3 msgs Mike Cole
RE: Is this a valid rule? McCammon, Keith
Re: Snort-users digest, Vol 1 #2411 - 4 msgs Mike Cole
Re: Snort-users digest, Vol 1 #2412 - 1 msg Mike Cole
RE: Portscan 2 question Brian F. Vaughan
Re: Snort-users digest, Vol 1 #2414 - 2 msgs Mike Cole
Re: Snort-users digest, Vol 1 #2413 - 1 msg Mike Cole
RE: Re: Snort-users digest, Vol 1 #2413 - 1 msg darnell . poulin
Re: Snort-users digest, Vol 1 #2415 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2416 - 2 msgs Mike Cole
Snort Center - File size limit exceeded Andy Stein
Re: Snort-users digest, Vol 1 #2417 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2418 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2419 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2421 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2420 - 2 msgs Mike Cole
RE: Re: Snort-users digest, Vol 1 #2413 - 1 msg Matt Kettler
Re: Snort-users digest, Vol 1 #2423 - 1 msg Mike Cole
invalid spo plugin? Chris S.J. Peron
Re: Snort-users digest, Vol 1 #2422 - 1 msg Mike Cole
Re: dual interface? Phillip Tyre
RE: spp_portscan2 questions Gillham, Chris
Re: Portscan 2 question Robby Desmond
Re: Snort-users digest, Vol 1 #2424 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2425 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2427 - 1 msg Mike Cole
Re: Snort-users digest, Vol 1 #2426 - 2 msgs Mike Cole
Snort installation on Win 2k - MS SQL Jarret Gibson
SnortSnarf version 021024.1 available James Hoagland
Re: Re: Snort-users digest, Vol 1 #2412 - 1 msg Phil Wood
RE: Thanks Michael Steele
SnortCenter Config Trouble matt
Re: Re: Snort-users digest, Vol 1 #2427 - 1 msg Chuck Mize
Re: SnortCenter Config Trouble Larc
snort-users infinite loop mail! Zachary Uram
RE: snort-users infinite loop mail! Michael Steele
RE: Snort 1.9.0 on Windows and MSSQL Steve Pearson
Snort DB query question. larosa, vjay
Re: Snort DB query question. Michael Boman
CSV issues or one too many swigs from that bottle?? Security Dude at Digital-Magick
Re: Is this a valid rule? Alberto Gonzalez
RE: snort-users infinite loop mail! Zachary Uram
RE: Snort DB query question. larosa, vjay
RE: Snort DB query question. Kreimendahl, Chad J
Re: Snort DB query question. WTWork

Friday, 25 October

web iis attack Alwin Raymundo
Re: web iis attack doswald
Snort not seeing any alerts Dan . McNulty
Re: dual interface? Bennett Todd
logging with priority Hubert Karlch
Snortsam Slighter, Tim
One other question Slighter, Tim
RE: One other question Slighter, Tim
RE: web iis attack Alwin Raymundo
PHPlot doesn't work Andrea Iacopini
RE: web iis attack Gray . Brendan
Re: logging with priority Andrew R. Baker
RE: web iis attack Hicks, John
Re: Snortsam Frank Knobbe
Re: Is this a valid rule? Phil Wood
BIOCVERSION: inappropriate ioctl for device.... Arun Viswanathan
Re: Is this a valid rule? Phil Wood
Re: Snort 1.9.0 on Windows and MSSQL Jarret Gibson
RE: Re: Is this a valid rule? Hicks, John
Re: BIOCVERSION: inappropriate ioctl for device.... Phil Wood
getting snort via CVS? Zachary Uram
RE: getting snort via CVS? Miller, Eoin
RE: getting snort via CVS? Wayne T Work
RE: getting snort via CVS? Miller, Eoin
Snort console errors - MSSQL Jarret Gibson
Redhat 8.0 ACID and SNORT Tom Morgan
(no subject) Sean Wheeler
1.9.0 users manual download question ? Zachary Uram
Re: 1.9.0 users manual download question ? Jarret Gibson
defunct link on www.snort.org Zachary Uram
yet more defunct links on www.snort.org Zachary Uram
Legal Form Advice Jacob Redding
Re: defunct link on www.snort.org Alberto Gonzalez
What 1.9.x versions work with MSSQL? Jarret Gibson
Re: yet more defunct links on www.snort.org Alberto Gonzalez
300,000 alerts in Database from spp_asn1 Nicholas Bachmann
snort and oralce (snort 1.90) gongya
Re: snort and oralce (snort 1.90) Jarret Gibson
Snort on an 802.1q link Christopher Lyon
Re: Snort on an 802.1q link Jason
RE: Snort on an 802.1q link Christopher Lyon
Re: Snort console errors - MSSQL Chris Reid
I cannot compile libnet successfully in order to compile snort, please help me Ha Tu
Re: Legal Form Advice Michael Boman

Saturday, 26 October

Re: I cannot compile libnet successfully in order to compile snort, please help me Jeff Nathan
configure error Zachary Uram
RE: What 1.9.x versions work with MSSQL? Michael Steele
Combination of snort and argus (or ntop) Chowalit Tinnagonsutibout
Re: What 1.9.x versions work with MSSQL? Jarret Gibson
Spade version 021026.1 released! James Hoagland
question regarding snort, acid, mysql, and redhat 7.3 Bob Dixon
Re: Spade version 021026.1 released! James Hoagland

Sunday, 27 October

(no subject) Ha Tu
Re: (no subject) Erek Adams
Stealth snort with no separate sensor hardware Jan Ploski
Action Recommendations Jarret Gibson
RE: Stealth snort with no separate sensor hardware Wayne T Work
Re: Action Recommendations Steve Suehring
RE: Stealth snort with no separate sensor hardware Justin Jessup
Re: Action Recommendations Justin Jessup
RE: Stealth snort with no separate sensor hardware Jan Ploski
Re: Stealth snort with no separate sensor hardware Alberto Gonzalez

Monday, 28 October

alert log size Billy Tsui (boomhq)
AW: alert log size Poppi, Sandro
Re: alert log size Darek Milewski
Snort sensor & Windows XP Кругляков Николай Владиславович
Stealth mode Andrea Iacopini
Re: Snort sensor & Windows XP Erek Adams
RE: question regarding snort, acid, mysql, and redh at 7.3 Potts, Ross A.
Re: Stealth mode Erek Adams
Re: 300,000 alerts in Database from spp_asn1 Ian Macdonald
Re: Snort sensor & Windows XP Peter . VE
BPF Filters howto Ben Keepper
Re: BPF Filters howto Ashley Thomas
RE: BPF Filters howto Hutchinson, Andrew
RE: BPF Filters howto Ben Keepper
tracking 'legitimate' traffic John Hally
RE: BPF Filters howto Hutchinson, Andrew
RE: BPF Filters howto Little Mitty
Re: BPF Filters howto Little Mitty
Re: Redhat 8.0 ACID and SNORT David Lambert
Re: Stealth mode quentyn
newb question appreciate help - snort.conf is readonly Scott FitzPatrick
Win2K + WinGate4.4 + Snort1.9 Alexander Shumilov
Re: Stealth snort with no separate sensor hardware quentyn
Question about Alerts Joe Giles
RE: Question about Alerts Miller, Eoin
Re: newb question appreciate help - snort.conf is readonly twig les
RE: Question about Alerts Joe Giles
Re: Question about Alerts Matt Kettler
Re: Action Recommendations twig les
Grouping Portscans Derrick Lichti
Route Null Zymophideth
bad traffic tcp port 0 traffic John McCain
RE: 300,000 alerts in Database from spp_asn1 Randy Bey
RE: bad traffic tcp port 0 traffic Miller, Eoin
BPF Flters Little Mitty
RE: snort and oralce (snort 1.90) Kreimendahl, Chad J
RE: bad traffic tcp port 0 traffic John York
Snort stopping - too much traffic? Scott Williams
RE: question regarding snort, acid, mysql, and redh at 7.3 Justin Jessup
Re: Snort stopping - too much traffic? Erek Adams
how to log everything to log file? s.wun
Re: how to log everything to log file? Erek Adams
snorters in d.c Alberto Gonzalez

Tuesday, 29 October

Receiving data from sensors to a central database with Mysql Roberto Suarez Soto
Snort won't connect to Postgresql Paul . Fiero
Re: Receiving data from sensors to a central database with Mysql Matt T. Galvin
Design questions... Jeremy Finke
RE: Design questions... Randy Bey
Re: RE: Design questions... larc
Re: Design questions... Jarret Gibson
RE: Snort stopping - too much traffic? Scott Williams
RE: Receiving data from sensors to a central databa se with Mysql Security Admin
RE: Design questions... Wayne T Work
Stealth SYN FIN scans on the increase? Bob Dehnhardt
unsuscribe : how to ? Manu
RE: Snort stopping - too much traffic? Wayne T Work
RE: unsuscribe : how to ? McCammon, Keith
FW: Receiving data from sensors to a central databa se with Mysql Freeman, Wayne
Design questions... Jeremy Finke
Snort 1.9 flow keyword shadi Rostami
Ridding ourselves of flags: A+ Kreimendahl, Chad J
Re: FW: Receiving data from sensors to a central database with Mysql hwigoda
A little help with an alert Terry Carlton
SnortCenter Tim Smoljanovic
Re: Snort 1.9 flow keyword Chris Green
Barnyard + ACID + portscan.log Ron Rosson
SNort 1.9.0 with MySQL logging James Fowler
Fwd: ACID/sensor question Tika
RE: SnortCenter _/CaT\_
ICQ Rule Derrick Lichti
Fwd: ACID/sensor question Tika
RE: SNort 1.9.0 with MySQL logging Security Admin
Problem creating last_cid, snort 1.9 PGSQL 7.2, new database, correct perms. Eli Stair
RE: Snort 1.9 as Service Help Scott Phippen
Snort rules order. larosa, vjay
Re: Snort rules order. Andrew R. Baker
dsize broken in snort 2 (and possibly 1.9.x) Kreimendahl, Chad J
RE: Snort rules order. larosa, vjay
RE: SNort 1.9.0 with MySQL logging James Fowler
Re: Snort rules order. Andrew R. Baker
Re: ICQ Rule Jarret Gibson
Re: [Snort-devel] dsize broken in snort 2 (and possibly 1.9.x) Chris Green
RE: [Snort-devel] dsize broken in snort 2 (and possibly 1.9.x) Kreimendahl, Chad J
RE: [Snort-devel] dsize broken in snort 2 (and possibly 1.9.x) Kreimendahl, Chad J
RE: ICQ Rule Derrick Lichti
RE: RE: Design questions... Jeremy Finke
stream4 and min_ttl option Cloppert, Michael
Re: ICQ Rule Jarret Gibson
Re: stream4 and min_ttl option Andrew R. Baker
Mike Sands/ITS/Element K is out of the office. Mike_Sands
Re: [Snort-devel] dsize broken in snort 2 (and possibly 1.9.x) Chris Green
Fixed:BUG Re: Problem creating last_cid, snort 1.9 PGSQL 7.2, new database, correct perms. Eli Stair
Spade version 021029.1 available James Hoagland
RE: Snort 1.9 as Service Help Michael Steele
uricontent vs. content larosa, vjay
Re: FW: Receiving data from sensors to a central database with Mysql Jon Freedlander
Re: FW: Receiving data from sensors to a central database with Mysql hwigoda

Wednesday, 30 October

Alert on logical detection Laurent Juin
Re: FW: Receiving data from sensors to a central database with Mysql Michael Boman
httptunnel catched by snort s.wun
snort as IDS Anuradha Gupta
Re: snort as IDS pix
PID file Nick Kraal
error while testing SanjayR
Re: Snort 1.9.0 on solaris Szymon Miotk
Alert on digital signature of downloaded software? Jack Lyons
RE: snort as IDS Christopher Lyon
Re: PID file Nick Kraal
port 29990 and 51417 scans Dallas Jordan
Re: FW: Receiving data from sensors to a central database with Mysql hwigoda
Re: PID file Andrew R. Baker
Re: PID file Nick Kraal
Promiscuous mode Paul Enlund
RE: Design questions... Jakub Molek
Re: Promiscuous mode Derek Glidden
Re: Promiscuous mode quentyn
RE: Alert on digital signature of downloaded softwa re? Jack Lyons
Port 2301 Kevin Haslag
Re: FW: Receiving data from sensors to a central database with Mysql Jacob Redding
Re: FW: Receiving data from sensors to a central database with Mysql hwigoda
Re: Port 2301 Matt Kettler
FW: uricontent vs. content larosa, vjay
Portscan Alert and Payload Logs D'Ambrosio, Louis
Re: FW: uricontent vs. content Chris Green
RE: FW: uricontent vs. content larosa, vjay
viewing the log files Lino Avila
help Muhammad Saleem
ACID - references not work Christoph Schulze
Re: help Alberto Gonzalez
Re: help twig les

Thursday, 31 October

Re: uricontent vs. content Andreas Östling
Re: Receiving data from sensors to a central database with Mysql Roberto Suarez Soto
WINDUMP Syntax Question John Bro
no alert in http tunnel SW
RE: uricontent vs. content larosa, vjay
Bake-off Article Rochford, Paul
Bake-Off Reviews Rochford, Paul
Re: Action Recommendations Glenn Forbes Fleming Larratt
Time stamp Zolla Zimmerman
RE: uricontent vs. content larosa, vjay
RE: Bake-off Article - Sorry for duplication Rochford, Paul
Re: Promiscuous mode Eli Stair
RE: Time stamp Jeff Eager (Email)
RE: Promiscuous mode Gene Gomez
Re: uricontent vs. content Chris Green
portscan2 question Brian F. Vaughan
e100 promisc mode Peter Param
Re: e100 promisc mode twig les
RE: Snort 1.9 as Service Help Scott Phippen
Re: e100 promisc mode Ben Feinstein
Spade version 021031.1 available James Hoagland
Re: e100 promisc mode Peter Param
no logging to disk galitz
RE: Snort 1.9 as Service Help Michael Steele
Re: Snort 1.9 as Service Help Steve Suehring
Re: e100 promisc mode twig les
Re: no logging to disk Andrew R. Baker

Friday, 01 November

RE: Promiscuous mode - fix Jon Hedlund
exec script Ruben Mattioli
RE: Time stamp Zolla Zimmerman
RE: Receiving data from sensors to a central databa se with Mysql Scott, Joshua
Re: exec script Matt Kettler
Snort/Log report software Zolla Zimmerman
RE: Snort/Log report software Ibarra, Michael
ACID/SNORT Newbie Mike Koponick
RE: Snort/Log report software Matt Yackley
Re: no logging to disk Andrew R. Baker
Re: no logging to disk Geoff Galitz
RE: Snort 1.9 as Service Help Michael Steele
Snort/Mysql/ACID/MS PWS help NN C

Saturday, 02 November

Question about MSSQL Don
Re: Snort/Mysql/ACID/MS PWS help Erek Adams
Re: Question about MSSQL Erek Adams
RE: error Michael Steele

Sunday, 03 November

Forbid snort to delete alerts from a mysql database for security reasons? Edin Dizdarevic
Re: Forbid snort to delete alerts from a mysql database for security reasons? Roman Danyliw
Tell the ISP- it will create change Gregory W. Ratcliff
Clean up/Reset Logs Florian Huber
Re: Clean up/Reset Logs shrek-m () gmx de
RE: e100 promisc mode Peter Param
RE: Clean up/Reset Logs Michael Steele
RE: Snort/Log report software Michael Steele
RE: Snort/Log report software Michael Steele
New SnortSam plugins and Mail List Frank Knobbe
RE: Snort/Mysql/ACID/MS PWS help Security Admin

Monday, 04 November

RE: Question about MSSQL Robbins, Mark
Mysql cleanup script? Nathan Whitehouse
rule for detecting Raptor denial of service John McCain
Logging to Remote Syslog and ACID Console Parker, Ian
Re: Logging to Remote Syslog and ACID Console twig les
Re: Mysql cleanup script? quentyn
RE: Logging to Remote Syslog and ACID Console Wayne T Work
RE: Mysql cleanup script? Bruce Platt
RE: Logging to Remote Syslog and ACID Console Parker, Ian
Re: Promiscuous mode - fix quentyn
RE: Logging to Remote Syslog and ACID Console Frank Knobbe
RE: Mysql cleanup script? Derrick Lichti
RE: Mysql cleanup script? Mike Walter
Heavy ICMP Traffic Brian M. Diehl
RE: Heavy ICMP Traffic Hicks, John
RE: Heavy ICMP Traffic Brian M. Diehl
Re: Mysql cleanup script? gerhard
Problems starting Snort 1.9.0 on RH 8.0 Sawall, Christopher L
Re: Heavy ICMP Traffic Nicholas Bachmann
RE: Heavy ICMP Traffic Brian M. Diehl
Win2k and Packet.dll Thomas T. Evans, III
RE: Problems starting Snort 1.9.0 on RH 8.0 Scott, Joshua
Sniffing a virtual VPN interface? Laleem
RE: Win2k and Packet.dll Michael Steele
RE: Win2k and Packet.dll Miller, Eoin
RE: Logging to Remote Syslog and ACID Console Michael Steele
no modem Joecat28
Two Ethernet Interfaces? Mike Koponick
RE: Mysql cleanup script? Mike Walter
RE: Question about MSSQL Michael Steele
RE: Logging to Remote Syslog and ACID Console Parker, Ian
Re: Two Ethernet Interfaces? Peter Param
RE: Two Ethernet Interfaces? Scott, Joshua
RE: Two Ethernet Interfaces? Mike Koponick
Re: no modem Matt Kettler
RE: Forbid snort to delete alerts from a mysql database for security reasons? Michael Steele
RE: Snort/Mysql/ACID/MS PWS help Michael Steele
RE: Logging to Remote Syslog and ACID Console Michael Steele
RE: no modem Michael Steele
Snort Faulting in ntdll.dll Parker, Ian
RE: Snort Faulting in ntdll.dll Michael Steele
RE: Forbid snort to delete alerts from a mysql database for security reasons? twig les
scripting for snort/guardian interaction with ipfilter Nathan Whitehouse
RE: Forbid snort to delete alerts from a MySQL database for security reasons? Michael Steele
Re: Two Ethernet Interfaces? Justin Jessup
Re: Problems starting Snort 1.9.0 on RH 8.0 Eli Stair

Tuesday, 05 November

Block host Bradley, Paul
Re: Block host Jens Krabbenhoeft
RE: Problems starting Snort 1.9.0 on RH 8.0 Sawall, Christopher L
RE: Win2k and Packet.dll Thomas T. Evans, III
Output in quite mode Florian Huber
snort not logging alerts ! Daniel Chojecki
Re: Mysql cleanup script? Ian Macdonald
RE: Two Ethernet Interfaces? Security Admin
excluding ip's from HOME_NET quentyn
FreeBSD forwarding frames to snort box? Shane Hickey
Re: RE: Snort/Log report software tazmaniak tazmaniak
RE: Win2k and Packet.dll Michael Steele
Snort 1.9.0 - Postgresql Albert E. Whale
BarnYard output reversing IP octets Joel Healy
Re: Snort 1.9.0 - Postgresql Eli Stair
portscan2 ignore hosts Phil Wood
Re: Snort 1.9.0 - Postgresql Albert E. Whale
new install rules question - solaris Dan Gahlinger
Re: new install rules question - solaris Chris Green
Re: new install rules question - solaris Dan Gahlinger
Re: new install rules question - solaris Dan Gahlinger
Re: new install rules question - solaris Andrew R. Baker
Re: portscan2 ignore hosts Jacob Redding
Re: new install rules question - solaris Chris Green
Re: new install rules question - solaris Dan Gahlinger
Re: new install rules question - solaris Erek Adams
FW: [Barnyard-users] BarnYard output reversing IP octets in outpu t Joel Healy
Small Footprint system for sensors Scott, Joshua
Re: Small Footprint system for sensors james
RE: Small Footprint system for sensors Scott, Joshua

Wednesday, 06 November

WebDAV Yaakov Yehudi
How to define EXTERNAL_NET=internet except intranet? Ralf . Strandell
Re: How to define EXTERNAL_NET=internet except intranet? Jens Krabbenhoeft
Re: RE: Small Footprint system for larc
Graph Alert Data Atul Shrivastava
RE: RE: Small Footprint system for Tom Sevy
SNORT XML Parser Igor Delgado García
How to configure HOME_NET for less than a Class C John Lathem
RE: Two Ethernet Interfaces? Security Admin
Re: How to configure HOME_NET for less than a Class C James Ainslie
RE: How to configure HOME_NET for less than a Class C Matt Yackley
RE: How to configure HOME_NET for less than a Class C Knight, Ric
Mailman and unsubscribing Subba Rao
RE: Small Footprint system for sensors Hicks, John
Stealth sensor on SPAN port w/o tap Robert MacKinnon
RE: Stealth sensor on SPAN port w/o tap Security Admin
SID 1287 Filbert
Followup to HOME_NET and EXTERNAL_NET John Lathem
Re: SID 1287 Jens Krabbenhoeft
Snort database schema Pieter Claassen
ignore hosts aaz
Snort dies Cesar Andres Navarrete R.
RE: Followup to HOME_NET and EXTERNAL_NET Don
Re[2]: SID 1287 Filbert
Snort Archive Brett . Gillett
Re: new install rules question - solaris Dan Gahlinger
RE: new install rules question - solaris larosa, vjay
Re: How to configure HOME_NET for less than a Class C Phil Wood
RE: ignore hosts Don
RE: new install rules question - solaris Dan Gahlinger
Re: Snort Archive Steve Suehring
Re: Snort Archive Brett . Gillett
getrusage.c Nicolas Roussi
Re: Snort database schema Rafeeq Ur Rehman
icmp large packets & ASN.1 Attack Robert Young
Re: getrusage.c Chris Green
Re: WebDAV Erek Adams
rule for MSN Messaging Peter Param
Automatic E-Mail from ACID Mike Koponick
Re: A "One way" cable (aka, a R/O Cable) Erek Adams
Re[2]: SID 1287 Erek Adams
Re: Snort database schema Erek Adams
Re: ignore hosts Erek Adams
Re: new install rules question - solaris Erek Adams
Re: Snort dies Erek Adams
Re: Automatic E-Mail from ACID Erek Adams
RE: rule for MSN Messaging Michael Steele
Network & Systems Cloaking Tool Tommy
about rpc ����
RE: Automatic E-Mail from ACID Mike Koponick
Re: WebDAV Jason Haar
Re: WebDAV Jason Haar
Re: Snort dies Steven J. Scott
Snort MySQL Client traffic to MySQL database Steven J. Scott
Snort acting as a firewall?? M. Felipe
Re: Snort dies Peter Param
setting up my first snort box Rigoberto De la Portilla
Field in Snort log Robert Birkely
RE: Automatic E-Mail from ACID Semerjian, Ohanes
RE: rule for MSN Messaging Peter Param
Re: setting up my first snort box Peter Param
Problem running Snort as Service on Win2K Harme Mohamed
Re: Snort acting as a firewall?? Alberto Gonzalez

Thursday, 07 November

Re: Automatic E-Mail from ACID Federico Lombardo
SV: Automatic E-Mail from ACID Diverse.Snort.Users
SnortInline questions Grigoris Vidakis
Graph Alert Data Atul Shrivastava
RE: icmp large packets & ASN.1 Attack Grime, Richard S
Problems about snort in enterprise environment Andrea Iacopini
Update rules timeput 30 secs Atul Shrivastava
Re: Problems about snort in enterprise environment Atul Shrivastava
Re: Update rules timeput 30 secs Jens Krabbenhoeft
Copies of jpgraph-1.9.1.tar.gz available? Jyri Hovila
Re: icmp large packets & ASN.1 Attack Robby Desmond
RE: Copies of jpgraph-1.9.1.tar.gz available? Slighter, Tim
Re: SID 1287 Brian
Re: SNORT XML Parser Brian
Re: Snort 1.9 flow keyword Brian
Re: about rpc Brian
RE: Problem running Snort as Service on Win2K Michael Steele
RE: Problems about snort in enterprise environment Fraser Hugh
error: pcap_loop: recvfrom: Socket operation on non-socket Florian Huber
Re: SnortInline questions Alberto Gonzalez
Snortcenter error Kelly Marshall
log on OpenBSD3.2/Snort 1.9 Thierry
Data Reduction Brett . Gillett
Re: Snort MySQL Client traffic to MySQL database Erek Adams
Re: Snort dies Erek Adams
Snort 1.9.0 Postgresql problems and a walkaround ? Kirill Alder-Ponazdyr
Re: Problems about snort in enterprise environment Erek Adams
Re: Problems about snort in enterprise environment Brian
Re: log on OpenBSD3.2/Snort 1.9 Erek Adams
Re: Problems about snort in enterprise environment twig les
RE: Problem running Snort as Service on Win2K Harme Mohamed
Re: SnortInline questions Alberto Gonzalez
my mail address 프리티보이
SnortCenter Temporary File Access Control Bug Security Admin

Friday, 08 November

ACID v0.9.6b22 - Display alerts snorter
Portscan2 and ACID snorter
Rule update with snortcenter snorter
-N option Thierry
Re: Rule update with snortcenter Jens Krabbenhoeft
Snort acting as a firewall ????????? Atul Shrivastava
Re: Network & Systems Cloaking Tool Tommy
Re: SnortInline questions Alberto Gonzalez
Re: Field in Snort log Erek Adams
RE: setting up my first snort box Jim Herbert
Snort Stops Sending Alerts to MySQL Parker, Ian
Re: Snort acting as a firewall ????????? Alberto Gonzalez
Alternative X86 Processors Scott, Joshua
Re: Snort acting as a firewall ????????? Frank Knobbe
Re: RE: setting up my first snort box Erek Adams
Portscan2 and target limit Alan Kloster
RE: Snort Stops Sending Alerts to MySQL Michael Steele
Re: Network & Systems Cloaking Tool twig les
Re: RE: setting up my first snort box twig les
Re: Network & Systems Cloaking Tool Tommy
Re: Network & Systems Cloaking Tool Frank Knobbe
Re: Network & Systems Cloaking Tool Frank Knobbe
RE: Snort Stops Sending Alerts to MySQL Parker, Ian
3. Re: Snort acting as a firewall ????????? (Frank Knobbe) Jessup, Justin
RE: Portscan2 and target limit Steve Halligan
RE: Snort Stops Sending Alerts to MySQL Michael Steele
Re: Network & Systems Cloaking Tool Tommy
The "book" on SNORT at Amazon Gregory W. Ratcliff
Database do not grow up.. Thierry

Saturday, 09 November

Re: Rule update with snortcenter Atul Shrivastava
More than one sensor can be managed ..?????? Atul Shrivastava
Re: Rule update with snortcenter Larc
Re: Rule update with snortcenter Atul Shrivastava
Re: Re: Rule update with snortcente larc
Setting up sensor on another machine Edward W. Ray
FW: Setting up sensor on another machine Edward W. Ray
Getting Snort to run from RC3.D Lance Lloyd

Sunday, 10 November

Stealth sensor on SPAN port w/o tap Robert MacKinnon
WebDAV Yaakov Yehudi
looking for OCI clues J Irving
create_oracle.sql gongya

Monday, 11 November

Where is the $RULE_PATH been assigned value? Wang,Fei
Re: Where is the $RULE_PATH been assigned value? Jens Krabbenhoeft
Snort doesn't log on mysql DB Andrea Iacopini
Portscan traffic in ACID CC Lam
SNORT Reporting Tool ........ ??????? Atul Shrivastava
Content Inspection Rule for SMTP & POP3 ...? Atul Shrivastava
Re: FW: Setting up sensor on another machine Eli Stair
FATAL ERROR: ERROR misc-lib Line 13=> hexmode is not completed Alan Graham
snort 1.9 on AIX 4.3.2 Snort HK
Re: Content Inspection Rule for SMT larc
Need help on Snort DB Sudha karan
Re: FATAL ERROR: ERROR misc-lib Line 13=> hexmode is not completed Brian
Re: Rule update with snortcenter Michael
Re: snort 1.9 on AIX 4.3.2 larc
Re: Getting Snort to run from RC3.D Erek Adams
Re: Stealth sensor on SPAN port w/o tap Erek Adams
Re: Portscan traffic in ACID Erek Adams
Re: Re: Rule update with snortcente larc
Re: SNORT Reporting Tool ........ ??????? Erek Adams
V.1.9.0 - Postgres DB Problems Albert E. Whale
Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage Steven P. Donegan
Re: Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage Erek Adams
Re: Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage Chris Green
owssvr.dll and false positives on sid:1288 Michael Scheidell
RedHat 8.0 snmp trap install problems McEvoy, Stephen
RedHat 8.0 snmp trap install problems McEvoy, Stephen
RE: Snort 1.8.6 -vs- Snort 1.9.0 Memmory Usage Scott, Joshua
Re: Action Recommendations Margles Singleton
Re: Database do not grow up.. twig les
Re: Setting up sensor on another machine twig les
SnortSnarf 021111.1 released! James Hoagland

Tuesday, 12 November

Snort / Promiscuous Jim mc
SNORT Performance Issues !!!!!!!! Atul Shrivastava
Re: snort 1.9 on AIX 4.3.2 Snort HK
Memory Issue? Frank Reid
Rule for Troj/Dloader-BO Eric Joe
Re: Memory Issue? Chris Green
Snort Remote Sensor Tom Morgan
snort rules update notification Brian
Snort 1.9 on XP pro William Mathews
Re: Memory Issue? Phil Wood
Re: Snort 1.9 on XP pro Rich Adamson
Re: unable to run snort daemon twig les
unable to run snort daemon Mike Juarez
Why is snort "lightweight"? Jesse W. Asher
Re: Why is snort "lightweight"? twig les
Re: [Snort-sigs] snort rules update notification Chris Green
New version 1.9.0 Storment, Brandon
HP 3000 and decode issues Robby Desmond
RE: New version 1.9.0 Kreimendahl, Chad J
Re: Snort Remote Sensor twig les
Re: HP 3000 and decode issues Andrew R. Baker
RE: Snort 1.9 on XP pro Michael Steele
Re: Why is snort "lightweight"? Brian
snort and dshield etc. reports Security Dude
Re: HP 3000 and decode issues Jeff Kell
Re: snort and dshield etc. reports Erek Adams
How to disable the alert for "spp_portscan2" MOHESOWA BYAS
POP UP Alerts on the Desktop ...... Atul Shrivastava
Snort doesn't log anything! X
Re: How to disable the alert for "spp_portscan2" Jochen Erwied

Wednesday, 13 November

Content Inspection not working Atul Shrivastava
Using Snort as a signature based Firewall Denis Croombs
MAIL FROM A NOVICE -- PLEASE FORGIVE Subhasis Gupta
Difference of results when proccessing pcap files Roberto Suarez Soto
Re: [Snort-devel] SNORT Performance Issues !!!!!!!! Peter_J_Moore
help installing snort..Please! Neal Hamilton Jr.
ACID / MySQL Issue Andy McLaughlin [Akinto]
slashdot.org: Trojan Found in libpcap and tcpdump Jens Krabbenhoeft
Packets control. Boris Bar
RE: MAIL FROM A NOVICE -- PLEASE FORGIVE Matt Yackley
portscan2-ignorehosts and Snortcenter Michael
Display percentage spp_portscan2 traffic with ACID Michael
Re: portscan2-ignorehosts and Snort larc
Rgpusers Gene Gomez
Re: Why is snort "lightweight"? Bennett Todd
SNMP request UDP flood Sherry Sun
Re: Stealth sensor on SPAN port w/o tap Bennett Todd
RE: Rgpusers Hawrylkiw, Dan G
guardian type script Rodney Green
SFStats Variant of Windows Snort Compile Parker, Ian
Latest libpcap & tcpdump sources from tcpdump.org contain a trojan. hackerwacker
RE: SNMP request UDP flood Knight, Ric
RE: SNMP request UDP flood twig les
Re: SFStats Variant of Windows Snort Compile Chris Reid
Re: Display percentage spp_portscan2 traffic with ACID Phil Wood
RE: Latest libpcap & tcpdump sources from tcpdump.o rg contain a trojan. Freeman, Wayne
RE: MAIL FROM A NOVICE -- PLEASE FORGIVE Apurv Singh
RE: Latest libpcap & tcpdump sources from tcpdump.o rg contain a trojan. Christopher Lyon
Hi all :-) Mike
RE: Hi all :-) O'Flynn, Derek
Klez Incoming Jacob Redding
RE: SFStats Variant of Windows Snort Compile Michael Steele
Re: Latest libpcap & tcpdump sources from tcpdump.o rg contain a trojan. hackerwacker
RE: Klez Incoming Gene Gomez
RE: Klez Incoming Jim O'Donald
RE: Hi all :-) Gene Gomez
"OTHER" protocol packets Peter Caffin
Re: Klez Incoming Shane Williams
RE: "OTHER" protocol packets McCammon, Keith
Re: "OTHER" protocol packets Michael Anderson
Re: Klez Incoming Jacob Redding
Fw: Latest libpcap & tcpdump sources from tcpdump.org contain a trojan hackerwacker
Do not want to take the right Sensor...?? Thierry
RE: Do not want to take the right Sensor...?? O'Flynn, Derek
Backup questions Subba Rao
Barnyard and DBs Frank Knobbe
*NEWBIE* Excluding Proxy Traffic from Snort? Matthew Gavin
Distributed Snort Frank Knobbe

Thursday, 14 November

portscan destination port 137 Michael
Email Alerts through MYSQL not with syslog ..? Atul Shrivastava
Replay 0.1 Andreas Östling
Re: Backup questions Edin Dizdarevic
Public Key to verify snort sig. gcia
Re: *NEWBIE* Excluding Proxy Traffic from Snort? Erek Adams
Re: Klez Incoming Shane Williams
RE: *NEWBIE* Excluding Proxy Traffic from Snort? McCammon, Keith
RE: Klez Incoming Sean T. Ballard
RE: Fw: Latest libpcap & tcpdump sources from tcpdu mp.org contain a trojan Fallon, Benjamin
Still can't configure with snmp McEvoy, Stephen
Re: Fw: Latest libpcap & tcpdump sources from tcpdump.org contain a trojan Edin Dizdarevic
Snort Check and Rules 'Best Practice' Derrick Lichti
RE: Klez Incoming Kreimendahl, Chad J
Re: Snort Check and Rules 'Best Practice' Erek Adams
database plugin failing to start Edu Sananselmo
Mysql difficulties.. Jeremy Loukinas
RE: Why is snort "lightweight"? Scott, Joshua
HOME_NET, EXTERNAL_NET Configuration Parker, Ian
Re: database plugin failing to start Jens Krabbenhoeft
RE: Mysql difficulties.. Sawall, Christopher L
Re: database plugin failing to start Jens Krabbenhoeft
Re: portscan destination port 137 Eric Joe
Re: Mysql difficulties.. Jens Krabbenhoeft
Re: portscan destination port 137 twig les
Re: portscan destination port 137 twig les
RE: portscan destination port 137 Security Admin
RE: portscan destination port 137 Security Admin
Re: Replay 0.1 Andreas Östling
Snort 1.8.7 on Win2K L. Christopher Luther
ACID not recording attacks Al Cooper
Mysql remote logging Tom Morgan
Telnet session username kirk
Checking out Snort 2.0 and building it Jhumri Tilayia
web-misc robots.txt will not go away Charles McGraw
Re: web-misc robots.txt will not go away Alberto Gonzalez
Re: Checking out Snort 2.0 and building it Alberto Gonzalez
Re: Checking out Snort 2.0 and building it Jens Krabbenhoeft
Re: web-misc robots.txt will not go away Jens Krabbenhoeft
Re: web-misc robots.txt will not go away Matt Kettler
RE: Email Alerts through MYSQL not with syslog ..? Randy Walinga
Re: portscan destination port 137 Axel Pettinger

Friday, 15 November

Snort-inline? Carmelo Zubeldia
something funny... Thierry
Snort alerts Philippe Dhont (Sea-ro)
Obfuscation of binary logs Grime, Richard S
portscan Philippe Dhont (Sea-ro)
Re: Snort alerts Thierry
[OT] tcpdump.org mono toy
RE: Snort alerts Mark Weaver
Snort.alert log Kristof Goossens
Re: Obfuscation of binary logs Alberto Gonzalez
Re: portscan Alberto Gonzalez
ACID alert groups Edu Sananselmo
RE: Snort alerts Tom Morgan
Help! computer crashes when running Snort (Win2k Pro) Moshe Aelion
arachNIDS, CVE, bugtraq Jay Archibald
Re: arachNIDS, CVE, bugtraq Jens Krabbenhoeft
RE: arachNIDS, CVE, bugtraq L. Christopher Luther
RE: Help! computer crashes when running Snort (Win2k Pro) L. Christopher Luther
Re: Snort alerts Alfredo Pizarro
Re: Obfuscation of binary logs Phil Wood
RE: ACID not recording attacks Hicks, John
it is working... Thierry
Re: RE: Help! computer crashes when running Snort (Win2k Pro) Moshe Aelion
Acid Database Tom Morgan
Escaping "content" characters Gary Flynn
Re: Escaping "content" characters Gary Flynn
error configure --with-snmp Michael J. McCasland
Re: error configure --with-snmp Phil Wood
Re: error configure --with-snmp Michael J. McCasland
News of tcpdump and libcap hacks Gregory W. Ratcliff

Saturday, 16 November

Re: error configure --with-snmp Justin Jessup
Re: Escaping "content" characters Brian
Re: RE: arachNIDS, CVE, bugtraq Brian

Sunday, 17 November

Re: error configure --with-snmp Andrew R. Baker
Making sense of "snort -W" output Moshe Aelion
Re: error configure --with-snmp Michael J. McCasland
Re: error configure --with-snmp Justin Jessup
ACID_main.php Timesout w/Snort 1.9.0 Albert E. Whale
Re: ACID_main.php Timesout w/Snort 1.9.0 joe

Monday, 18 November

(no subject) Philippe Dhont (Sea-ro)
Re: (no subject) Xavi Altafulla
Re: ACID_main.php Timesout w/Snort 1.9.0 Albert E. Whale
Logging excessive ICMP from HOME_NET Albert E. Whale
Re: ACID_main.php Timesout w/Snort 1.9.0 Anton A. Chuvakin
RE: Making sense of "snort -W" output Knight, Ric
Extracting files from snort captures Toni Heinonen
Defining External_net Albert E. Whale
remote logging snort rules question Rob Burris
Re: ACID_main.php Timesout w/Snort 1.9.0 Albert E. Whale
Re: Defining External_net Alberto Gonzalez
Re: Defining External_net Ashley Thomas
Re: Defining External_net Jens Krabbenhoeft
Right syntax ?? $DNS_SERVER ?? Thierry
Snort logging to remote MySQL host Bradley, Paul
RE: RE: arachNIDS, CVE, bugtraq L. Christopher Luther
Re: Snort logging to remote MySQL host Joseph Gresham
Trouble with SnortCenter Agent Snort Mailing List
Re: Logging excessive ICMP from HOME_NET Erek Adams
smtp rule help ricardo () datawan net
Snortsam Cisco ACL configuration steps Gary Flynn
Re: Snortsam Cisco ACL configuration steps Gary Flynn
conversation preprocessor and byte-count-based alerts Cloppert, Michael
Re: conversation preprocessor and byte-count-based alerts Chris Green
Traffic hangs when specifiying adapter Ben
Re: Snortsam Cisco ACL configuration steps Frank Knobbe
Snort-inline vs. Hogwash? Shane Hickey
Re: [Snort-devel] Barnyard & Snort peleus

Tuesday, 19 November

chroot snort Thierry
Problems with graphs in ACID Helder Rocha
How snort processes packets. Jesse W. Asher
Strange ICMP packets from windows machines Juergen Schmidt
Snort 1.8.7 & new rules Cassani Alexio
Re: Snort 1.8.7 & new rules Michael Boman
RE: Snort 1.8.7 & new rules Cassani Alexio
Problemes with Acid Timestamp Alfredo Pizarro
RE: Strange ICMP packets from windows machines larosa, vjay
one ip want to snmp access Alireza Naderi
Re: Traffic hangs when specifiying adapter Ben
RE: Problems with graphs in ACID Joel Morgan
Re: Problemes with Acid Timestamp Bob DeBolt
Snort 1.90 and Barnyard 0.1.0-rc3 (Build 11) with Acid 0.9.6b22 I nitial Install Help. Pacheco, Michael F.
Re: Snortsam Cisco ACL configuration steps Brian
Re: Problemes with Acid Timestamp Alfredo Pizarro
Re: Snort 1.90 and Barnyard 0.1.0-rc3 (Build 11) with Acid 0.9.6b22 I nitial Install Help. Andrew R. Baker
RE: one ip want to snmp access Knight, Ric
RE: Snort 1.90 and Barnyard 0.1.0-rc3 (Build 11) wi th Acid 0.9.6b22 I nitial Install Help. Pacheco, Michael F.
SnortSam Drawings Anyone? Ibarra, Michael
spam Ted Stringer
RE: Problems with Acid Timestamp Pricher Jeffrey Contr AFCA/GCF
Re: RE: arachNIDS, CVE, bugtraq Andrew R. Baker
Undefined function: newaciddbconnection() in SnortCenter package Helder Rocha
Snort and Cisco IP Telephony nitz
RE: spam McCammon, Keith
Question about snortd vs webmin snort configuration Robb Stacy
Re: Right syntax ?? $DNS_SERVER ?? Andrew R. Baker
ACID and PHP Robby Desmond
RE: spam Ted Stringer
RE: spam McCammon, Keith
RE: spam Don
RE: spam Distribution Lists
GNUTELLA goes berserk Distribution Lists
RE: spam Chris Merkel
What are folks doing for alerting Bergeron, Jared
Re: What are folks doing for alerting hackerwacker
Re: Problems with graphs in ACID joe
Re: What are folks doing for alerting Distribution Lists
RE: What are folks doing for alerting Slighter, Tim
RE: Snort-users digest, Vol 1 #2508 - 4 msgs Jester, Allen
RE: What are folks doing for alerting Ibarra, Michael
Log both to MySQL and a log file Rodney Green
Re: What are folks doing for alerting hackerwacker
RE: What are folks doing for alerting Ibarra, Michael
Re: Log both to MySQL and a log file twig les
RE: RE: What are folks doing for alerting Slighter, Tim
Undefined function: newaciddbconnection() in SnortCenter package Helder Rocha
RE: spam Paul D. Shaffer

Wednesday, 20 November

How to identify rules in ACID that triggered an alert Pieter Claassen
Problem about snort 1.9 Di Fazio Guido
Re: Undefined function: newaciddbco larc
Postgre and snort19 Helmut Schneider
Re: How to identify rules in ACID larc
Problems with Snort ? Andrea Iacopini
Re: What are folks doing for alerting Michael J. McCasland
Re: RE: What are folks doing for alerting BCL IP Network Operations
RE: Trouble with SnortCenter Agent Steven B. Akers
RE: Trouble with SnortCenter Agent Steven B. Akers
Problem about snort 1.9 Di Fazio Guido
RE: Snort 1.90 and Barnyard 0.1.0-rc3 (Build 11) wi th Acid 0.9.6b22 I nitial Install Help. Robby Desmond
No incoming data Philippe Dhont (Sea-ro)
RE: Trouble with SnortCenter Agent Snort Mailing List
snort segfaults Federico Lombardo
Re: ACID_main.php Timesout w/Snort 1.9.0 Dhruv Chandra
Re: Problem about snort 1.9 Alberto Gonzalez
RE: No incoming data Mark Weaver
RE: RE: arachNIDS, CVE, bugtraq L. Christopher Luther
Access Permissions on New Logfiles (1.8.7/128) Edin Dizdarevic
Re: Access Permissions on New Logfiles (1.8.7/128) Andrew R. Baker
Re: Access Permissions on New Logfiles (1.8.7/128) Chris Green
Mysql DB problems Jeremy Loukinas
Too many questions Alireza Naderi
Interface in promiscuous mode Helder Rocha
Snort & portscans in a proxied environment Cloppert, Michael
Re: Snort & portscans in a proxied environment Jacob Redding
problems with make file and mysql Christopher Cook
RE: Interface in promiscuous mode Mark Weaver
Sniffing on eth0 and reseting on eth1 ¤
portscan problem spy guy
Fw: Interface in promiscuous mode Andrea Iacopini
RE: Snort & portscans in a proxied environment Hicks, John
snort center alireza
Confirmation For Alerts In ACID Needed Ibarra, Michael
Re: Sniffing on eth0 and reseting on eth1 Demetri Mouratis
RE: Confirmation For Alerts In ACID Needed Joel Colvin
Re: snort center Keith Burt
RE: Snort & portscans in a proxied environment Cloppert, Michael
spp_portscan2 modification for ignoring ports peleus
Re: Too many questions Matt Kettler
RE: Confirmation For Alerts In ACID Needed Ibarra, Michael
MSSQL2K vs MySQL?? McBurnett, Jim
XML Log parsers Sleepy
snortcenter rule update question(s) AppleAnnie331
Re: Too many questions Robby Desmond
Re: Interface in promiscuous mode Robby Desmond
Re: Problems with graphs in ACID Steven J. Scott
Re: MSSQL2K vs MySQL?? Dhruv Chandra

Thursday, 21 November

Re: XML Log parsers Sleepy
Re: Mysql DB problems Jens Krabbenhoeft
Re: MSSQL2K vs MySQL?? pix
Re: snort center larc
RE: No incoming data Philippe Dhont (Sea-ro)
Re: snortcenter rule update questio larc
Re: snort center Marcel Hauser
Re: No incoming data Steve Loughran
MySQL logs wrong IP - Addresses ( caution - NEWBIE ! ) verwiebe
RE: No incoming data Philippe Dhont (Sea-ro)
snort not logging to the database Edu Sananselmo
snort compilation problems with mysql Juan Manuel Ramón
RE: MSSQL2K vs MySQL?? Robbins, Mark
Re: XML Log parsers Sleepy
RE: snort not logging to the database Philippe Dhont (Sea-ro)
MDAC signature Slighter, Tim
Re: XML Log parsers Jacob Redding
core dump Nathaniel Fisher
RE: MDAC signature Slighter, Tim
Re: XML Log parsers pix
tcpdump filter question Bradley, Paul
Re: tcpdump filter question James Hoagland
RE: XML Log parsers L. Christopher Luther
FW: Snortcenter-agent installation problem Kelly Marshall
RE: tcpdump filter question Bradley, Paul
Re: No incoming data twig les
Re: snort not logging to the database twig les
Re: MySQL logs wrong IP - Addresses ( caution - NEWBIE ! ) twig les
Re: core dump Matt Kettler
RE: MySQL logs wrong IP - Addresses ( caution - NEW BIE ! ) Steve Halligan
Re: Sniffing on eth0 and reseting on eth1 Chris Green
Re: snort not logging to the database twig les
Re: Sniffing on eth0 and reseting on eth1 ¤
Re: MySQL logs wrong IP - Addresses ( caution - NEWBIE ! ) Roman Danyliw
Help! Just upgraded to Snort1.9-1 Sheahan, Paul (PCLN-NW)
DIAL UP NoLiMiT1961
RE: Help! Just upgraded to Snort1.9-1 Slighter, Tim
snort_stat.pl Sheahan, Paul (PCLN-NW)
Re: DIAL UP Brian
RE: Help! Just upgraded to Snort1.9-1 Sheahan, Paul (PCLN-NW)
Re: MySQL logs wrong IP - Addresses ( caution - NEWBIE ! ) Jens Krabbenhoeft
Re: DIAL UP Matt Kettler
RE: Help! Just upgraded to Snort1.9-1 Slighter, Tim
OpenSSH question McIlwee, Mark A
Re: Confirmation For Alerts In ACID Needed Joseph Gresham
Re: XML Log parsers Sleepy
Re: XML Log parsers Michael Davis
DSL NoLiMiT1961
RE: Confirmation For Alerts In ACID Needed Fraser Hugh

Friday, 22 November

Portscan traffic bar stays at 0% Philippe Dhont (Sea-ro)
Re: Interface in promiscuous mode Di Fazio Guido
Re: FW: Snortcenter-agent installat larc
Snort not logging to the database Edu Sananselmo
Still ACID Helmut Schneider
Snort 2.0 release date Pieter Claassen
Re: Still ACID Helmut Schneider
RE: Still ACID Pacheco, Michael F.
Re: Snort 2.0 release date Jens Krabbenhoeft
Re: Still ACID Helmut Schneider
SNMP Traps larosa, vjay
Acid 0.9.6.b22, Snort 1.9 and scan.log output Pacheco, Michael F.
Detecting telnet connections with TERM=xxx set Sven Huster
RE: DSL Hicks, John
RE: DSL Hicks, John
Re: No incoming data Erek Adams
Re: OpenSSH question Skip Carter
Re: OpenSSH question twig les
Re: OpenSSH question Frank Knobbe
Re: OpenSSH question Michael Boman
Re: OpenSSH question Gene
Re: Detecting telnet connections with TERM=xxx set Chris Green
Re: Detecting telnet connections with TERM=xxx set Andreas Östling
Supper Firewall setup with IPFILTER and SNORT Nathan Whitehouse
proxy ? Petre Bandac
Re: proxy ? Matt Kettler
Re: XML Log parsers Sleepy

Saturday, 23 November

Snort /SERVICE parameter (Win32) Ueli Kistler
Oinkmaster issue Lance Lloyd
Re: Oinkmaster issue Andreas Östling
FW: Oinkmaster issue Lance Lloyd

Sunday, 24 November

stealth nic command ? Tim Rodriguez
Re: Snort /SERVICE parameter (Win32) Ueli Kistler
Flexresp on W2kSrvSp3 not working Giuseppe Marullo
Re: stealth nic command ? Rafeeq Ur Rehman
Re: stealth nic command ? Alberto Gonzalez
Re: stealth nic command ? alireza
Re: stealth nic command ? Alberto Gonzalez
SnortCenter can't push to sensor Guy Marcenac
ACID/procmail/incident.pl Shane Hickey
Re: SnortCenter can't push to sensor twig les
Installation on Slackware 8.1 tiago.
Fw: Installation on Slackware 8.1 tiago.

Monday, 25 November

Re: Snort 2.0 release date Yaakov Yehudi
Re: Detecting telnet connections with TERM=xxx set Sven Huster
Re: SnortCenter can't push to senso larc
re: Installation on Slackware 8.1 Justin Jessup
re: Installation on Slackware 8.1 Justin Jessup
Re: Detecting telnet connections with TERM=xxx set Brian
Re: Detecting telnet connections with TERM=xxx set Alberto Gonzalez
Re: Detecting telnet connections with TERM=xxx set Chris Green
Re: Snort 2.0 release date Chris Green
Using syslogd more efficiently Pauling
Cleaning Snort DB Andrea Iacopini
Re: Using syslogd more efficiently Erek Adams
Re: Using syslogd more efficiently Alberto Gonzalez
Autoreply: Re: Snort 2.0 release date rolandomorales
postgresql support in barnyard Edu Sananselmo
Re: Using syslogd more efficiently Demetri Mouratis
Re: Supper Firewall setup with IPFILTER and SNORT jabbott
Re: Supper Firewall setup with IPFILTER and SNORT Phil Dibowitz
Nothing logged in Daemon mode plex
Better regex expression ($ of "end of string") Vincent Corriveau
Re: Supper Firewall setup with IPFILTER and SNORT Jim Sandoz
Re: Supper Firewall setup with IPFILTER and SNORT Phil Dibowitz
Hmmm, events with sig_id=1 Steven P. Donegan
Re: Oinkmaster issue Jacob Redding
MySQL Configuration for Snort L. Christopher Luther
MySQL on Another Server L. Christopher Luther
Re: Nothing logged in Daemon mode Alberto Gonzalez
Help with SMTP Rule Ricardo Londoño
RE: Help with SMTP Rule Hicks, John
RE: SnortCenter can't push to senso Schroeder, Eric
RE: MySQL Configuration for Snort L. Christopher Luther
RE: MySQL Configuration for Snort Schroeder, Eric
RE: MySQL Configuration for Snort Hicks, John
Re: Sniffing on eth0 and reseting on eth1 Dave Thornburgh
rules set Don
Alerting and Reporting tools Scott, Joshua
Network Failure and DB Output plugin Scott, Joshua
MySQL on Another Server (#2) L. Christopher Luther
Re: Network Failure and DB Output plugin Erek Adams
Re: rules set Erek Adams
Re: Better regex expression ($ of "end of string") Brian
Re: Help with SMTP Rule Brian
Re: Help with SMTP Rule Ricardo Londoño
RE: Help with SMTP Rule Don

Tuesday, 26 November

Snort doesn't detect W32/Opaserv.worm attack jo cam
Rules archive empty? Edin Dizdarevic
ACID trouble Andrea Iacopini
why no alert for netbus backdoor ? Wang,Fei
Re: why no alert for netbus backdoor ? Jens Krabbenhoeft
Re: Alerting and Reporting tools Scott Nursten
Re: Rules archive empty? Scott Nursten
Re: Snort doesn't detect W32/Opaserv.worm attack Scott Nursten
Barnyard and Mudpit Edu Sananselmo
Constructing Rules Michael Lougee
WEB-CLIENT javascript URL host spoofing attempt Shane Hickey
SHUN Mike Koponick
Re: SHUN Alberto Gonzalez
Re: Constructing Rules Matt Kettler
Re: Rules archive empty? Matt Kettler
RE: SHUN Mike Koponick
Re: SHUN Matt Kettler
Re: SHUN Frank Knobbe
Re: libpcap on Linux, FOR LINUX USERS ONLY Phil Wood
Re: SnortCenter can't push to senso Guy Marcenac
RedHat 8.0 snort 1.9 snmp McEvoy, Stephen
ACID Login Failed configured on Red Hat 8.0 Zeke Brinsfield
Re: Constructing Rules Brian
Re: Rules archive empty? Brian
negated port ranges (was Re: Constructing Rules) Bennett Todd
RE: ACID Login Failed configured on Red Hat 8.0 Slighter, Tim
criticism of snort in articles that I can not remember being explained or rebutted on this list. Device Discovery slash manually configuring snort. Jacob, Raymond A Jr
Pass Rule Joseph Nuara
Re: Pass Rule Frank Knobbe
Re: SHUN Frank Knobbe
Re: Pass Rule Frank Knobbe
Re: Pass Rule Joseph Nuara
Re: Pass Rule Joseph Nuara
Re: SHUN Matt Kettler
Re: Pass Rule Matt Kettler
Re: Pass Rule Joseph Nuara
Re: criticism of snort in articles that I can not remember being explained or rebutted on this list. Device Discovery slash manually configuring snort. Erek Adams
Re: Pass Rule Erek Adams
Re: criticism of snort in articles that I can not remember being explained or rebutted on this list. Device Discovery slash manually configuring snort. James-lists
Newbie Q on making it work Faber Fedor
Re: criticism of snort in articles twig les
Re: Newbie Q on making it work Matt Kettler
problem in login SnortCenter sam
RE: Alerting and Reporting tools Scott, Joshua
[ANN] HenWen 1.3.1 Nick Zitzmann
Re: Newbie Q on making it work twig les

Wednesday, 27 November

Re: problem in login SnortCenter Marcel Hauser
RE: Newbie Q on making it work Slighter, Tim
Snortcenter Problem Jose_Fundora
Re: Snortcenter Problem Marcel Hauser
Re: Newbie Q on making it work Faber Fedor
RE: MySQL on Another Server (#2) Hicks, John
snort 1.9.0 memleaking ? pilsl
swatch error Petriz, Pablo
Re: Snortcenter Problem larc
Re: swatch error Todd Holloway
ACID-XML v1.0 released Sleepy
false alarm? do I have preprocessor right? Michael Scheidell
Easy move to Linux platform Nick Elliott
RE: Newbie Q on making it work Tom Sevy
RE: Easy move to Linux platform Hicks, John
RE: Easy move to Linux platform Scott, Joshua
RE: snort 1.9.0 memleaking ? Bill Karwisch
RE: ACID Login Failed configured on Red Hat 8.0 Scott, Joshua
RE: MySQL on Another Server (#2) L. Christopher Luther
Re: snort 1.9.0 memleaking ? Erek Adams
Database Plugin - Alert vs. Log L. Christopher Luther
Request For Comments/Suggestions Erek Adams
Re: Database Plugin - Alert vs. Log Erek Adams
RE: RE: MySQL on Another Server (#2) Michael Steele
RE: Database Plugin - Alert vs. Log L. Christopher Luther
RE: RE: MySQL on Another Server (#2) L. Christopher Luther
Re: false alarm? do I have preprocessor right? Matt Kettler
snort logs start/stop not to syslog Security Dude
Re: snort 1.9.0 memleaking ? pilsl
RE: Database Plugin - Alert vs. Log Frank Knobbe
Snort 1.9.0 output file format default on Win2k Pro Charles McCollister
Cisco Sensor to Snort Front End Jim Terry
Re: snort 1.9.0 memleaking ? Erek Adams
Re: Cisco Sensor to Snort Front End aaron g
Re: snort logs start/stop not to syslog aaron g
Re: Cisco Sensor to Snort Front End twig les
Re: snort 1.9.0 memleaking ? twig les
RE: snort 1.9.0 memleaking ? Paul D. Shaffer

Thursday, 28 November

How to use flexresp function in snort 2.0 sunbow
Re: How to use flexresp function in snort 2.0 Giuseppe Marullo
OT: Happy Turkey Day! Erek Adams
Hogwash anyone? Rochford, Paul
Re: Hogwash anyone? Alberto Gonzalez
Testing techniques Faber Fedor
SQL scripts for snort DBs Faber Fedor
RE: swatch error Petriz, Pablo
Re: SQL scripts for snort DBs Jens Krabbenhoeft
RE: Testing techniques Fraser Hugh
Re: Testing techniques twig les
Re: snort 1.9.0 memleaking ? Jason
Re: Testing techniques Rafeeq Ur Rehman
RE: OT: Happy Turkey Day! Donofrio, Lewis
snort 1.9 keeping fds open after SIGHUP Michael Scheidell
Re: Hogwash anyone? Michael Boman

Friday, 29 November

snort 1.9 settings of spp_portscan2 Patrice . Arnal
Re: snort 1.9 settings of spp_portscan2 Jens Krabbenhoeft
RE: Hogwash anyone? Rochford, Paul
How to use flexresp function in snort 2.0 王 鸿鹏
Re: How to use flexresp function in snort 2.0 王 鸿鹏
ACID-XML released D
sensor representation in database Martina Podesser
Re: libpcap on Linux, FOR LINUX USERS ONLY Lionel CONS
alert_full won't create subdirectories for ip addresses when mysql logging is enabled Peter Schobel
RE: criticism of snort in articles that I can not r emember being explained or rebutted on this list. Device Discovery slash manually configuring snort. Cloppert, Michael
Snort creating corrupt binary data logs? Cloppert, Michael
snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting Hanasaki JiJi
Re: snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting Erek Adams
Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Andrew R. Baker
Re: snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting James Hoagland
Re: snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting James Hoagland
Snort stops logging Mike Bradford
Please help me understand this alert output Hanasaki JiJi
ACID SQL error Faber Fedor
Management of Packet-Scrubbers Henning Pfeiffer
RE: Please help me understand this alert output Hicks, John
Re: SNMP Traps Andrew R. Baker
Re: Please help me understand this alert output Hanasaki JiJi
Gigabit IDS report Bob Walder
Re: Snort creating corrupt binary data logs? Phil Wood
Warning with Snortrules-current sam

Saturday, 30 November

Re: Warning with Snortrules-current Jens Krabbenhoeft
RE: Snort error ... Erek Adams
All alerts have src/dest as 0.0.0.0 Jason Algol
SnortCenter updating rules JRybarczyk
snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting Hanasaki JiJi
Re: All alerts have src/dest as 0.0.0.0 Erek Adams
Re: All alerts have src/dest as 0.0.0.0 twig les
Whoopie! A new FreeBSD guide twig les
Re: Gigabit IDS report aaron g
Re: Gigabit IDS report twig les
Re: Gigabit IDS report Frank Knobbe

Sunday, 01 December

RE: Gigabit IDS report Bob Walder
Re: Gigabit IDS report [RANT WARNING] Michael Boman
How to use flexresp function in snort x.y Giuseppe Marullo
is acid 0.9.6b22 missing refrence for url sigs? Michael Scheidell
NMAP portscan detection alireza
RE: Gigabit IDS report Paul D. Shaffer
RE: Gigabit IDS report Frank Knobbe
RE: Gigabit IDS report aaron g
Fix for acid 0.96b22 Adds url refrence back in Michael Scheidell

Monday, 02 December

"preprocessor portscan2-ignorehosts" ignored Helmut Schneider
Rules for version1.8.6 David Stubblefield
Re: Rules for version1.8.6 Erek Adams
Re: Rules for version1.8.6 Matt Kettler
massive scans Steve Moran
Re: Rules for version1.8.6 Frank Knobbe
RE: Database Plugin - Alert vs. Log Frank Knobbe
RE: Database Plugin - Alert vs. Log L. Christopher Luther
Mail Relay Alerts Sean T. Ballard
RE: massive scans Miller, Eoin
portscan2-ignorehosts & portscan-ignorehosts Distribution Lists
Request for help in changing packet capture filenames under Snort 1.9 Matt Yackley
Re: "preprocessor portscan2-ignorehosts" ignored Helmut Schneider
Re: portscan2-ignorehosts & portscan-ignorehosts Alberto Gonzalez
Re: portscan2-ignorehosts & portscan-ignorehosts Distribution Lists
Re: Request for help in changing packet capture filenames under Snort 1.9 Frank Knobbe
Re: portscan2-ignorehosts & portscan-ignorehosts Robby Desmond
ACID Signature Links problem KyleGinney
RE: alert_full won't create subdirectories for ip addresses when mysql logging is enabled L. Christopher Luther
RE: is acid 0.9.6b22 missing reference for url sigs ? jay . archibald
Re: Rules for version1.8.6 Chris Green
Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Andrew R. Baker
snort Luo, Philip
MSN Chat Rule Help Ricardo Londoño
Re: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Chris Green
RE: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled L. Christopher Luther
RE: MSN Chat Rule Help Derrick Lichti
Re: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Andrew R. Baker
RE: Request for help in changing packet capture fil enames under Snort 1.9 Matt Yackley
Re: MSN Chat Rule Help Brian
RE: SHUN ams67
Re: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Frank Knobbe
RE: SHUN Frank Knobbe
RE: SHUN ams67
Re: MSN Chat Rule Help Ricardo Londoño
Problem with postgresql and snort 1.9 m0use
Re: SHUN Alberto Gonzalez
GET /.hash= Jacques
Re: SHUN Frank Knobbe
RE: SHUN ams67

Tuesday, 03 December

FlexResp Motoki Yokoyama
Re: GET /.hash= Jeff Kell
Re: "preprocessor portscan2-ignorehosts" ignored Jens Krabbenhoeft
Re: GET /.hash= Jens Krabbenhoeft
Re: SHUN Alberto Gonzalez
Re: SHUN Alberto Gonzalez
RE: is acid 0.9.6b22 missing reference for url sigs ? Robby Desmond
RE: Snort creating corrupt binary data logs? Cloppert, Michael
error in creation of mysql table Wilson A. Galafassi Jr.
RE: SHUN Frank Knobbe
RE: error in creation of mysql table Sawall, Christopher L
Re: error in creation of mysql table Jens Krabbenhoeft
Output Plugin - log_ascii L. Christopher Luther
Re: error in creation of mysql table twig les
pop3 PASs overflow rule Shane Hickey
RE: Output Plugin - log_ascii Hicks, John
Re: Output Plugin - log_ascii Frank Knobbe
RE: SHUN ams67
RE: SHUN Frank Knobbe
snort 1.9 freebsd port with Spade? Shane Hickey
Re: snort 1.9 freebsd port with Spade? aaron g
Re: snort 1.9 freebsd port with Spade? twig les
content rule Aditya
Question about FlexResp Sandra Estrada Moreno
Re: content rule Matt Kettler
Another Snort Reporting Question Christopher Lyon

Wednesday, 04 December

I find it odd that this product would not be supported for SMP win2k machines Tal
Snort for Broadcast Detection counts only Tim Olson
RE: Another Snort Reporting Question Slighter, Tim
Re: Another Snort Reporting Question Jacques
snort NT install question Pat Browne
Re: Snort for Broadcast Detection counts only Phil Wood
RE: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Hicks, John
Re: snort NT install question Andrew R. Baker
FW: Re: alert_full won't create subdirectories for ip addresses when mysql logging is enabled Frank Knobbe
Access Denied when logging to MySQL database Zymophideth
mysql problem Luo, Philip
Re: Access Denied when logging to MySQL database twig les
RE: snort NT install question Michael Steele
Snort for Pocket PC Scott Olihovik
Re: mysql problem Jeremy Loukinas
Re: I find it odd that this product would not be supported for SMP win2k machines Matt Kettler
Re: Access Denied when logging to MySQL database Steve Suehring
Re: Re: I find it odd that this product would not be supported for SMP win2k machines Jeremy Loukinas
Re: mysql problem Steve Suehring
Snort and Solaris 8? Daniel Curry
Problem with SnortCenter Cesar Andres Navarrete R.
Re: Snort for Pocket PC Bennett Todd
Re: Access Denied when logging to MySQL database Robby Desmond
Availability of an output plugin that would corelate attacks with security alerts Yann Dirson
ACID Problems Cory Helmrich
RE: snort NT install question Tobias Rice
RE: mysql problem L. Christopher Luther
Re: Access Denied when logging to MySQL database Steve Suehring
RE: Snort for Pocket PC Don
Re: ACID Problems download (Jim Prewett)
RE: Problem with SnortCenter ElbTec GmbH
Re: Problem with SnortCenter Cesar Andres Navarrete R.
Re: Access Denied when logging to MySQL database shrek-m () gmx de
RE: I find it odd that this product would not be supported for SMP win2k machines Paul D. Shaffer
spo_log_tcpdump plugin Joel Healy
RE: I find it odd that this product would not be supported for SMP win2k machines Eric Joe
RE: I find it odd that this product would not be supported for SMP win2k machines aaron g
RE: Snort and Solaris 8? Kreimendahl, Chad J
RE: I find it odd that this product would not be supported for SMP win2k machines Paul D. Shaffer
RE: I find it odd that this product would not be supported for SMP win2k machines twig les
Norman Internet Protection - Malware Warning! rice

Thursday, 05 December

Re: Re: Problem with SnortCenter larc
to block intruders Coelho, Wagner
Re: to block intruders Alberto Gonzalez
Alert OR syslog? Weiss, Jeffrey H.
Snort rule triggered an alert, but why? C . Prickaerts
Content list 2 Aditya
Re: Snort rule triggered an alert, but why? Chris Green
RE: Snort rule triggered an alert, but why? C . Prickaerts
Re: Alert OR syslog? Alberto Gonzalez
sensor name in ACID Fairbank, Graham P.
RE: Alert OR syslog? Weiss, Jeffrey H.
RE: Alert OR syslog? Steve Halligan
Snort Alert [1:1411:0] ) (etc) alerts Michael Boman
RE: Alert OR syslog? Weiss, Jeffrey H.
Re: Content list 2 Matt Kettler
Re: Alert OR syslog? Alberto Gonzalez
RE: Alert OR syslog? Weiss, Jeffrey H.
RE: Alert OR syslog? Don
Understanding how to setup snort... Andy Monroe
Snortcenter: cant connect localhost:2525 Guy Marcenac
Re: Snort rule triggered an alert, but why? Chris Green
RE: Alert OR syslog? Don
Re: Snortcenter: cant connect localhost:2525 Guy Marcenac
Home_net & external_net Jeremy Finke
Question about FlexResp Sandra Estrada Moreno
RE: Home_net & external_net Don
Re: Home_net & external_net Erek Adams
Problem with Snort 1.9.0 and PostgreSQL Johan Sunnerstig
RE: I find it odd that this product would not be supported for SMP win2k machines aaron g

Friday, 06 December

RE: Snort rule triggered an alert, but why? C . Prickaerts
pcap_loop Svein Erik Søberg
snort + logsurfer Wilson A. Galafassi Jr.
SnortCenter sensor "cloning" scp
RE: Home_net & external_net Jeremy Finke
acid don't show upd traffic Wilson A. Galafassi Jr.
RE: Home_net & external_net Erek Adams
Re: snort + logsurfer Erik Fichtner
Re: ACID Problems Cory Helmrich
Re: pcap_loop Erek Adams
RE: Home_net & external_net Jeremy Finke
Re: SnortCenter sensor "cloning" larc
RE: Home_net & external_net Don
Remote Syslogging. Patrick Williams
RE: Home_net & external_net Jeremy Finke
snort log time error Wilson A. Galafassi Jr.
Re: Remote Syslogging. Demetri Mouratis
RE: Alert OR syslog? L. Christopher Luther
Re: snort log time error Ralf Hildebrandt
Re: snort log time error Chris Baker
Re: snort log time error Wilson A. Galafassi Jr.
RE: Home_net & external_net Don
RE: Home_net & external_net Erek Adams
RE: Home_net & external_net Erek Adams
Re: Remote Syslogging. Erek Adams
Re: snort log time error Ralf Hildebrandt
Re: snort log time error Ralf Hildebrandt
ml troble Benny Pedersen
Re: RE: Alert OR syslog? Erek Adams
additional patch for acid 6b22 (nessus refrences) Michael Scheidell
Re: ml troble Matt Kettler
Re: ml troble Benny Pedersen

Saturday, 07 December

Block Conncection Atul Shrivastava
How to use the Various Outplugins present in the SnortCenter Atul Shrivastava
Re: How to use the Various Outplugins present in the SnortCenter Alberto Gonzalez
Re: Block Conncection Alberto Gonzalez
Snort Powered Logos Qx

Sunday, 08 December

Fw: [Snort-sigs] Please Help me Hany Tawakkol
SNMP???? Sh J
RE: Snort rule triggered an alert, but why? C . Prickaerts
snort 1.8.6 + OpenBSD 3.2-stable Darren
Problems with make (flexresp). VALUENETUK
Re: Problems with make (flexresp). James-lists
Snort IDScenter 1.09 beta 2.2 released! Ueli Kistler
RE: Problem with Snort 1.9.0 and PostgreSQL Semerjian, Ohanes

Monday, 09 December

Re: Home_net & external_net Jens Krabbenhoeft
Hi TFH
am i scanning other ip's? Alfredo D
Anyone got a updated version of snort-inline? Michael Boman
Re: snort 1.8.6 + OpenBSD 3.2-stabl larc
Re: Problems with make (flexresp). John D. Caine
Re[2]: snort 1.9 + OpenBSD 3.2-stable Darren
Updating rules... Tobias Rice
SnortCenter sensor "cloning" scp
understanding how to use snort Andy Monroe
Help me friends skaushik
HOW TO archive alerts using ACID on a different DB??? Bruno Sicchieri
RE: I find it odd that this product would not be supported for SMP win2k machines Jacob Redding
Portscan2... Tobias Rice
Snort 1.9 alert log problem Schuler, Jeff
EXTERNAL_NET != HOME_NET ? Benjamin Hippler
Re: [Snort-sigs] Snort Alert [1:1411:0] ) (etc) alerts Jens Krabbenhoeft
Problem with Snort/PostgreSQL Johan Sunnerstig
Re: Content list 2 larc
Addendum to ACID issues Robby Desmond
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
Snort IDScenter beta testing Ueli Kistler
Re: Problem with Snort/PostgreSQL Eduard San Anselmo Mateu
RE: Problem with Snort 1.9.0 and PostgreSQL Demetri Mouratis
Re: am i scanning other ip's? Adrian Peters
Re: EXTERNAL_NET != HOME_NET ? Adrian Peters
Re: Help me friends Adrian Peters
Re: Updating rules... Adrian Peters
Re: EXTERNAL_NET != HOME_NET ? Erek Adams
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
Re: Re[2]: snort 1.9 + OpenBSD 3.2-stable twig les
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
RE: Problem with Snort 1.9.0 and PostgreSQL Erek Adams
Re: am i scanning other ip's? James Hoagland
RE: Snort IDScenter 1.09 beta 2.2 released! (OT) L. Christopher Luther
RE: Problem with Snort 1.9.0 and PostgreSQL Demetri Mouratis
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
Re: Hi Leonard Miller
Re: Hi Matt Kettler
Re: Re[4]: snort 1.9 + OpenBSD 3.2-stable twig les
Re[6]: snort 1.9 + OpenBSD 3.2-stable Darren
Re: am i scanning other ip's? Matt Kettler
Re: RE: Snort IDScenter 1.09 beta 2.2 released! (OT) Ueli Kistler
RE: RE: Snort IDScenter 1.09 beta 2.2 released! (OT ) L. Christopher Luther
Re: Snort 1.9 alert log problem Bennett Todd
RE: Problem with Snort 1.9.0 and PostgreSQL Semerjian, Ohanes
RE: Help me friends Semerjian, Ohanes
RE: Problem with Snort 1.9.0 and PostgreSQL m0use
Construction success of Snort1.9.0 with FlexResp Motoki Yokoyama
Re: Problem with Snort 1.9.0 and PostgreSQL Peter Erickson
Norman Internet Protection - Malware Warning! yokoyama

Tuesday, 10 December

Re: Updating rules... Edin Dizdarevic
mysql rotation script for alert storms markmormartin
(no subject) counterping
Logging Issue John D. Caine
Setting up Snort Salloum, Camile
Re: Logging Issue John D. Caine
Re: Setting up Snort Ueli Kistler
Re: mysql rotation script for alert storms Steve Suehring
Re: (no subject) Erick Mechler
Re: Updating rules... Edin Dizdarevic
Error using the -T option Mike Koponick
Re: Error using the -T option Erick Mechler
RE: Error using the -T option Mike Koponick
help with logsurfer Wilson A. Galafassi Jr.
Snort 1.9.0 Support for MySQL DB L. Christopher Luther
Re: Snort 1.9.0 Support for MySQL DB Erick Mechler
Re: Snort 1.9.0 Support for MySQL DB twig les
MySQL-Rights for Snort Michael Brandstetter
Re: Snort 1.9.0 Support for MySQL DB Chris Reid
Snort 1.8.7 as a Win2K Service L. Christopher Luther
RE: Snort 1.9.0 Support for MySQL DB L. Christopher Luther
Re: Snort 1.9.0 Support for MySQL DB Frank Knobbe
Re: MySQL-Rights for Snort Erick Mechler
RE: Snort 1.9.0 Support for MySQL DB L. Christopher Luther
How can I configue the outplugin for SMB Alerts Atul Shrivastava
Re: How can I configue the outplugin for SMB Alerts Alberto Gonzalez
How can I view the packet payload if the packet is SMTP Atul Shrivastava

Wednesday, 11 December

rule for Linksys router proximity detection? Yaakov Yehudi
mark packets for further processing via iptables/tc ? Gerd Feiner
any output plugin to resolve DNS address ? Fabio TEK
RE: Problem with Snort 1.9.0 and PostgreSQL Roman Danyliw
ACID Portscan Traffic (0%) Gary Borgeson
Re: How can I view the packet payload if the packet is SMTP Frank Knobbe
RE: ACID Portscan Traffic (0%) Slighter, Tim
RE: ACID Portscan Traffic (0%) Hicks, John
RE: How can I view the packet payload if the packetis SMTP Miller, Eoin
RE: How can I view the packet payload if the packetis SMTP Frank Knobbe
RE: How can I view the packet payload if thepacketis SMTP Miller, Eoin
Classification snort/barnyard Phil Wood
FTP command overflow attempt help Tyler Owen
RE: FTP command overflow attempt help Hicks, John
W2K snort launch & halt Serge Jorgensen
RE: Understanding how to setup snort... Hicks, John
RE: W2K snort launch & halt Scott Olihovik
packet overlap triggering alerts? Kevin Peuhkurinen
Problems with display, new installation of ACID and SnortCenter not rendering properly Eli Stair
Where is $portscan_file log file ???? Dhruv Chandra
RE: ACID Portscan Traffic (0%) Luo, Philip
Recall: W2K snort launch & halt Hicks, John
CIS Scanner Salloum, Camile
RE: W2K snort launch & halt Hicks, John
RE: W2K snort launch & halt Serge Jorgensen
regarding snort's nmap sig. Ashley Thomas
RE: ACID Portscan Traffic (0%) Pacheco, Michael F.
RE: W2K snort launch & halt L. Christopher Luther
RE: ACID Portscan Traffic (0%) Chris Eidem
rh8.0 and snort??? Rigoberto De la Portilla
Re: CIS Scanner Matt Kettler

Thursday, 12 December

Re: rh8.0 and snort??? Alessandro Fiorenzi
Re: Problems with display, new inst larc
RE: Problem with Snort 1.9.0 and PostgreSQL Johan Sunnerstig
Possible Memory Overlap/Bug? Help! Kevin Peuhkurinen
Acid_Main.php browser using IIS version 5.0 Salloum, Camile
Re: Possible Memory Overlap/Bug? Help! Chris Green
RE: ACID Portscan Traffic (0%) Slighter, Tim
Re: Possible Memory Overlap/Bug? Help! Lawrence Reed
Re: DB ERROR twig les
DB ERROR Luo, Philip
Re: DB ERROR Jens Krabbenhoeft
Using Snort with TIS Firewall Software Chris Shepherd
RE: Re: Possible Memory Overlap/Bug? Help! Kevin P
Display Problems with 0.9.6.b22 Ed Kasky
Snort 1.8.7 as a Win2K Service (bump) L. Christopher Luther
Re: Possible Memory Overlap/Bug? Help! Chris Green
Re: How can I view the packet payload if the packet is SMTP Erek Adams
Logging without alerting JBFRYE
SID 376 Axness, Bob
Re: SID 376 Erek Adams
(no subject) Jim Terry
Re: (no subject) James-lists
Re: Problems with display, new inst Eli Stair

Friday, 13 December

RE: DB ERROR Luo, Philip
Re: DB ERROR Steve Suehring
Snort and Acid with MySql 4.0 Alessandro Fiorenzi
New Trend: Intrusion Prevention Sheahan, Paul (PCLN-NW)
Re: DB ERROR twig les
Re: New Trend: Intrusion Prevention Alberto Gonzalez
RE: New Trend: Intrusion Prevention Steve Halligan
RE: New Trend: Intrusion Prevention Ibarra, Michael
RE: Acid_Main.php browser using IIS version 5.0 Hicks, John
RE: Logging without alerting L. Christopher Luther
RE: Snort 1.8.7 as a Win2K Service (bump) Salman Siddiqui
RE: New Trend: Intrusion Prevention SecurityAdmin
stopping snort Don
RE: New Trend: Intrusion Prevention Bob Dehnhardt
RE: Snort 1.8.7 as a Win2K Service (bump) L. Christopher Luther
Graph Alert Data Mogren, Jack L.
Re: stopping snort Erick Mechler
RE: Logging without alerting JBFRYE
RE: New Trend: Intrusion Prevention Nathan Whitehouse
RE: New Trend: Intrusion Prevention twig les
Re: stopping snort Bennett Todd
Re: New Trend: Intrusion Prevention Alberto Gonzalez
Re: stopping snort Alberto Gonzalez
No Traffic stats showing in my acid main php browser Salloum, Camile
Re: New Trend: Intrusion Prevention Erick Mechler
RE: New Trend: Intrusion Prevention Chris Eidem
RE: No Traffic stats showing in my acid main php br owser Axness, Bob
Huge Amount of Port 1433 Scans From Asian IP's Ibarra, Michael
Re: New Trend: Intrusion Prevention Martin Roesch
YASG :-) - yet another setup guide for snort (switched, Debian, MySQL, etc) Anton A. Chuvakin
snorting SSL/TLS traffic? Todd Holloway
Step by Step GUIDE Part I released S.

Saturday, 14 December

RE: New Trend: Intrusion Prevention Ofir Arkin
ntpdx overflow attempt sig triggered by ntpdc query James-lists
Re: (no subject) Jim Terry
SNMP TRAP??? Sh J

Sunday, 15 December

Re: SNMP TRAP??? Rich Adamson
Snort 1.9 alert_fast output plugin problem Ueli Kistler
ACID Portsacan Trafic Alireza Naderi
Exclude IP addresses for all rules Filbert
Re: Snort 1.9 alert_fast output plugin problem Martin Roesch
Re: New Trend: Intrusion Prevention Kevin Black
unsubscribe me from this mailing list John Huynh
Re: Exclude IP addresses for all rules James-lists
Re: New Trend: Intrusion Prevention Frank Knobbe
Re: New Trend: Intrusion Prevention Kevin Black
RE: unsubscribe me from this mailing list L. Christopher Luther
redirect host Semerjian, Ohanes
Re: New Trend: Intrusion Prevention Frank Knobbe
Re: Exclude IP addresses for all rules James-lists
Warning unkonwn output plugin : 'trap_snmp' ????? Sh J

Monday, 16 December

Re: Exclude IP addresses for all rules Jens Krabbenhoeft
writing to DB (only!) Eduard San Anselmo Mateu
RE: DB ERROR Luo, Philip
Ignorehosts, once again Marc Quibell
Newbie Shafer, Troy
Update Luiz Alberto Cataldo Jr
Re: Snort-users digest, Vol 1 #2581 - 7 msgs Robert Young
RE: New Trend: Intrusion Prevention Sheahan, Paul (PCLN-NW)
Begginer .. David Alonso De La Vega Tapage
RE: Newbie ams67
RE: Newbie Don
RE: Begginer .. Axness, Bob
A rule for telnet commands posts
another question Shafer, Troy
Re: another question twig les
RE: Snort-users digest, Vol 1 #2589 - 3 msgs L. Christopher Luther
Snort IDScenter 1.09 beta 2.3 released! Ueli Kistler
Re: A rule for telnet commands Matt Kettler
Re: Update Erick Mechler
Re: Warning unkonwn output plugin : 'trap_snmp' ????? Erick Mechler
just curious Ronneil Camara

Tuesday, 17 December

Re: Writing to DB (only!) Eduard San Anselmo Mateu
RE: A rule for telnet commands Steve Halligan
mysql db create for win32 version Paul Began
Error Line => Unknown rule type Gordon Olson
snort appliance Luo, Philip
snort-1.9.0.tar.gz Armando José Martins de Oliveira
Re: Ignorehosts, once again Yonah Russ
(no subject) netexpress
extracting urls from the alerts Mahdi Kefaiati
Analysis packets headers Marlene Guimarães Costa
ntpdx overflow attempt sig triggered by ntpdc query james
some signature that displat on ACID hedieh eghbali
Re: New Trend: Intrusion Prevention Robby Desmond
IP address filtering ANTONIO GUTIERREZ
RE: ACID Portscan Traffic (0%) Robby Desmond
Analysis packets headers Marlene Guimarães Costa
Snort and email. Marco Sciarrone
Graph Alert Data jlmanatee1
simple output request Fabio TEK
thanks S. Kaushik
Re: SNORT FAQ Darin . MARAIS
ignore_host doesn't work ? Brandis Jaroslav
RE: Ignorehosts, once again Brandis Jaroslav
Graph Alert Data jlmanatee1
Re: Snort 1.9.0 Support for MySQL DB Steve Suehring
Ignorehosts, once again Marc Quibell
A rule for telnet commands Neal Werner
W2K snort launch & halt Serge D. Jorgensen
RE: ACID Portscan Traffic (0%) Morgan, Joel (Macon State College)
Re: extracting urls from the alerts Shane Williams
AW: Snort and email. Freddie Soerensen
Re: extracting urls from the alerts twig les
RES: ACID Portscan Traffic (0%) Coelho
RE: mysql db create for win32 version L. Christopher Luther
RE: Snort IDScenter 1.09 beta 2.3 released! L. Christopher Luther
Re: mysql db create for win32 version Scot Scot
Barnyard and Oracle AWDELASH
IDScenter 1.09 beta 2.3 setup update -- www.packx.net Ueli Kistler
Re: just curious Matt Kettler
RE: Snort and email. Petriz, Pablo
RE: W2K snort launch & halt Michael Steele
Barnyard Howto? Fairbank, Graham P.
snortcenter problem josh
Re: extracting urls from the alerts Gene
Re: IDScenter 1.09 beta 2.3 setup update -- www.pac kx.net Ueli Kistler
Re: Error Line => Unknown rule type Matt Kettler
Re: snort-1.9.0.tar.gz Erick Mechler
RE: snortcenter problem josh
IDS Policy Center ? - Uploading rule files Claude Bailey
Any HOWTO for merging separate snort IDS's into central DB? Jason Haar
Script to move alerts from snort db to snort_archive db Christopher Lyon
Re: some signature that displat on ACID Erick Mechler
Re: Script to move alerts from snort db to snort_archive db Erick Mechler
Re: some signature that displat on ACID twig les
Graph Alert Data Link is not working properly (ACID) Atul Shrivastava
Re: extracting urls from the alerts J. Craig Woods

Wednesday, 18 December

how to read logs Anuradha Gupta
snort & iptables Eduard San Anselmo Mateu
snort-current autoconf problem. Fabrizio Tivano
OT Re: how to read logs Geoff
email out from acid Luo, Philip
Re: OT Re: how to read logs John McCain
RE: email out from acid Hicks, John
seeing whol subnet David Bear
Clueless in Toronto Rich Stryker
RE: Help me friends Rich Stryker
RE: seeing whol subnet Matt Yackley
Re: snort-1.9.0.tar.gz Chris Keladis
Efficiency of acid_event Michael T. Babcock
Understanding IDS & TAPS Carleton, Sam (SCI TW)
Graph Alert Data Eduard San Anselmo Mateu
Re: Understanding IDS & TAPS twig les
RE: Clueless in Toronto Rich Stryker
RE: Understanding IDS & TAPS Carleton, Sam (SCI TW)
RE: Understanding IDS & TAPS Carleton, Sam (SCI TW)
Barnyard/acid reconfigure question Henning, David
Re: snort & iptables twig les
Re: snort appliance aaron g
Re: [prelude-user] prelude is not working on openbsd ?? Thierry
Re: how to read logs Matt Kettler
Re: Understanding IDS & TAPS Matt Kettler

Thursday, 19 December

Re: how to read logs mcmurry jim
Re: Barnyard/acid reconfigure question Jens Krabbenhoeft
One question Carmelo Zubeldia
Re: [prelude-user] prelude is not working on openbsd ?? Yoann Vandoorselaere
RE: Barnyard/acid reconfigure question Henning, David
Ignorehosts still not working... Marc Quibell
ACID Graph Page Gary Borgeson
RE: ACID Graph Page Steve Halligan
RE: DB ERROR Luo, Philip
RE: Ignorehosts still not working... Hicks, John
Re: One question Matt Kettler
Redhat 8.0 and Snort...playing nice? Madziarczyk, Jonathan
RE: Clueless in Toronto Rich Stryker
RE: Redhat 8.0 and Snort...playing nice? Pacheco, Michael F.
Re: Ignorehosts still not working... Christopher Robert Cook
RE: Redhat 8.0 and Snort...playing nice? Madziarczyk, Jonathan
To TAP or HUB? Carleton, Sam (SCI TW)
Re: Ignorehosts still not working... Marc Quibell
RE: To TAP or HUB? Henning, David
RE: To TAP or HUB? Madziarczyk, Jonathan
RE: To TAP or HUB? Shane Hickey
RE: To TAP or HUB? Eric Joe
RE: To TAP or HUB? Shane Hickey
RE: Clueless in Toronto Rich Stryker
Re: DB ERROR Steve Suehring
RE: DB ERROR Luo, Philip
Re: DB ERROR 'Steve Suehring'
RE: To TAP or HUB? Matt Kettler
Re: Redhat 8.0 and Snort...playing nice? ascannel
Barnyard Options Help Needed! Kevin Peuhkurinen
Re: snort & iptables Jacob Redding
RE: Understanding IDS & TAPS Nigel Clarke
RE: Exchange 2000 Richard Lyons
Re: One question Shane Williams
Snortsnarf problem solved Rich Stryker
Re: snort & iptables Michael Boman
L3 Retriever Ping False Alarms Parker, Ian
RE: To TAP or HUB? Frank Knobbe
Re: RE: Exchange 2000 twig les
RE: Ignorehosts still not working... Don
Re: FAQ Suggestion: snort & iptables Matt Kettler
Re: mark packets for further processing via iptables/tc ? Matt Kettler
Re: RE: Exchange 2000 aaron g

Friday, 20 December

RE: Barnyard Options Help Needed! Chris Eidem
Proxy Scanner? Sylar, John
Re: FAQ Suggestion: snort & iptables Phil Wood
Re: Proxy Scanner? John McCain
Re: Proxy Scanner? Nigel Houghton
Snort, Windows 2000 - running external program/script on alert. Brian Strickland
Snort, Windows 2000 - running external program on alert. Brian Strickland
RE: Snort, Windows 2000 - running external program on alert. Hicks, John
MS Terminal Server Requests Parker, Ian
How do I change the output log name format Charles McCollister
Re: L3 Retriever Ping False Alarms netsec novice
RE: MS Terminal Server Requests Knight, Ric
RE: Proxy Scanner? Sylar, John
Re: Snort, Windows 2000 - running external program/script on alert. Matt Kettler
Re: Snort, Windows 2000 - running external program on alert. Ueli Kistler
RE: Snort, Windows 2000 - running external program on alert. Hicks, John
RE: MS Terminal Server Requests Hicks, John
PHP RPMs Gary Borgeson
RE: Snort, Windows 2000 - running external program on alert. Don
Re: PHP RPMs Alberto Gonzalez
RE: Snort, Windows 2000 - running external program on alert. Sylar, John
RE: Snort, Windows 2000 - running external program on alert. Tom Sevy
RE: Snort, Windows 2000 - running external program on alert. Don
RE: Any HOWTO for merging separate snort IDS's into central DB? Cloppert, Michael
Re: Script to move alerts from snort db to snort_archive db Guy Marcenac
Re: PHP RPMs Eli Stair
Snort 1.9 Hinds, Brandon IT3
tweak ANTONIO GUTIERREZ
Re: PHP RPMs J. Craig Woods
snortd error Incidents

Saturday, 21 December

_PATH_VARRUN Florin Andrei
RE: Any HOWTO for merging separate snort IDS's into central DB? Benjamin Hippler
Re: Any HOWTO for merging separate snort IDS's into central DB? Jason Haar
Re: Any HOWTO for merging separate snort IDS's into central DB? Andrea Barisani
Extracting URLS Mahdi Kefaiati
Re: _PATH_VARRUN Olaf Schreck
RE: seeing whol subnet Semerjian, Ohanes
Re: snortd error Erick Mechler
SnortCenter not displaying buttons/options, only sensor.php Eli Stair
Re: snortd error Guy Marcenac

Sunday, 22 December

arachnids ids updater script Kevin Brown
RE: Script to move alerts from snort db to snort_archive db Christopher Lyon
Where can I find documents explain the log formats of snort? Xiaogang Liu
RE: Where can I find documents explain the log form ats of snort? Hicks, John
Re: snortd error Incidents
Re: snortd error Erick Mechler

Monday, 23 December

RE: snortd error McBee, Rob
Snort GUI Luo, Philip
Re: Snort GUI Saad Kadhi
Re: snortd error Erick Mechler
Will new rules require upgrade to snort 2.0 David Stubblefield
RE: Will new rules require upgrade to snort 2.0 O'Flynn, Derek
Re: Snort GUI Nick Zitzmann
licensing on rules quentyn
Re: RE: Snort and email. Jacques

Tuesday, 24 December

Httpodbc.dll Robert Reid
RE: Httpodbc.dll Gray . Brendan
RE: Httpodbc.dll Hicks, John
Barnyard 0.1.0 released Andrew R. Baker
ACID Graph Alert Page Mogren, Jack L.
RE: Any HOWTO for merging separate snort IDS's into central DB? Cloppert, Michael
Snort WIN32 2.0.0B (B45) Problems (& Solutions) Nicole Nicholson

Wednesday, 25 December

FlexResp+React+Custom page Qx

Thursday, 26 December

Upgrade smoothwall to 1.9 Kevin Brown
RE: Upgrade smoothwall to 1.9 Donofrio, Lewis
Web servers scanning clients!!! Farzin
Re: Web servers scanning clients!!! Matt Kettler
Re: Web servers scanning clients!!! Jason
Re: Web servers scanning clients!!! Alberto Gonzalez
Re: Web servers scanning clients!!! Matt Kettler
Re: Web servers scanning clients!!! Alberto Gonzalez
Alert log entry bluetooth995
Re: Alert log entry Matt Kettler
Re: Web servers scanning clients!!! Jason
Re: Web servers scanning clients!!! Matt Kettler

Friday, 27 December

Snort + MySql David Alonso De La Vega Tapage
libcap,libnet Denis A. Kirin
Snort GUI Luo, Philip
Re: libcap,libnet Matt Kettler
Re: Snort GUI J Irving
Lost local.rules in Snortcenter Gary Borgeson
HTTP_SERVERS variable length Steven Rudolph
Re: Snort + MySql Incidents
Local.Rules in SnortCenter Gary Borgeson
Re: HTTP_SERVERS variable length Matt Kettler
RE: Snort + MySql Slighter, Tim
RE: HTTP_SERVERS variable length Steven Rudolph
Nmap Scanning Detection with Snort Friday Akpan
Re: Snort GUI Ueli Kistler
Re: HTTP_SERVERS variable length Andrew R. Baker
Re: Snort GUI Nick Zitzmann
RE: Snort + MySql Incidents

Saturday, 28 December

Extracting URL's from alerts Mahdi Kefaiati
sbort_db file Nick Harris
Extracting URL's from alerts Mahdi Kefaiati

Sunday, 29 December

snort, mysql and acid on redhat 7.3 ... htpassword issue Rigoberto De la Portilla
Re: snort, mysql and acid on redhat 7.3 ... htpassword issue Bruno Saverio Delbono
Swatch/Snort.log Mike Koponick

Monday, 30 December

Double Logging? Bradley, Paul
Snort logging Sasa Jusic
RE: Snort + MySql Slighter, Tim
RE: Snort logging Slighter, Tim
snort,mysql, with acid problem Rigoberto De la Portilla
Re: Snort logging Bamm Visscher
UPNP scan Luo, Philip
Re: UPNP scan Bamm Visscher
ACID Sensor Name Issue Anthony Lorimer
Running Snort in Windows XP George Sakatzoglou
React & Resp keyword working Atul Shrivastava
Snort-inline question Amit Kumar Gupta
Re: Snort-inline question Alberto Gonzalez
RE: Snort-inline question Amit Kumar Gupta

Tuesday, 31 December

Land Attack Ashley Thomas
Re: React & Resp keyword working Atul Shrivastava
Re: React & Resp keyword working Alberto Gonzalez
Re: React & Resp keyword working Atul Shrivastava
Help חואן
snort doesn't work after while Azary Hossain
Re: Land Attack Phil Wood
Re: Land Attack Ashley Thomas
extracting tcpdump data rmulyadi
Error : OPEN PCap ( ) David Alonso De La Vega Tapage
Snort Inline Bob McDowell
A quick Question Steve Knoch
Install and config guide? Stephen Jonnotti
RE: Snort Inline Bob McDowell
Snort and acidcenter Joseph Turley
RE: Snort and acidcenter Paul D. Shaffer
Snort Report Chris Garringer

Previous period

Next period