Snort mailing list archives

Re: Unsubscribe


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 24 May 2011 18:09:25 -0400

You are now unsubscribed.

On Thu, May 19, 2011 at 1:04 AM, go95 <go95 () aol com> wrote:

Unsubscribe

Thank You,
Gregg Olsen
(646) 688-4435

On May 18, 2011, at 6:58 PM, snort-sigs-request@lists.sourceforge.netwrote:

Send Snort-sigs mailing list submissions to
   snort-sigs () lists sourceforge net

To subscribe or unsubscribe via the World Wide Web, visit
   https://lists.sourceforge.net/lists/listinfo/snort-sigs
or, via email, send a message with subject or body 'help' to
   snort-sigs-request () lists sourceforge net

You can reach the person managing the list at
   snort-sigs-owner () lists sourceforge net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-sigs digest..."


Today's Topics:

  1. Re: performance criteria (Jamie Riden)
  2. Re: performance criteria (evilghost () packetmail net)
  3. Sourcefire VRT Certified Snort Rules Update 2011-05-18 (Research)
  4. Your Webinar Invitation: Join us for "Snort Webinar --    Proper
     implementation of Multiconfig -- John Gay" (Joel Esler)


----------------------------------------------------------------------

Message: 1
Date: Mon, 16 May 2011 21:27:46 +0100
From: Jamie Riden <jamie.riden () gmail com>
Subject: Re: [Snort-sigs] performance criteria
To: "evilghost () packetmail net" <evilghost () packetmail net>
Cc: "snort-sigs () lists sourceforge net"
   <snort-sigs () lists sourceforge net>
Message-ID: <BANLkTik6Jyi5_eSU4mAyijK1stj4UykdRw () mail gmail com>
Content-Type: text/plain; charset=ISO-8859-1

Yes, heaven forbid we should discuss IDS performance metrics on an IDS
sigs list.

On 16 May 2011 04:07, evilghost () packetmail net <evilghost () packetmail net>
wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This question was also posed in a different form, via thread hi-jacking,
on
Emerging-Threats as well. ?Obvious troll is obvious; do not respond.

Jules you need to work on your troll-craft and I'm willing to offer up
some
after hour tutoring if you want to better hone your skills.

Here is your scoring breakdown for this attempt:

1) Subtle controversial topic; +10 points
2) Thread hi-jacking a proposed signature ET thread; -5 points.
3) Dual-posting to both Snort-Sigs and ET; -5 points
4) Poorly structured question; -5 points
5) Weakly structured veiled question to incite conflict; -5 points.

Total score: -5 points. ?Feel free to follow up with me on tutoring.



On 05/15/11 08:20, Jules Pagna Disso wrote:
hi,

I know this is not directly related to rules but I think you would be
the
best to help me with the criteria/parameters that need considering when
evaluating and IDS performance or when comparing two IDS.

thanks,
Jules

--
Jamie Riden / jamie () honeynet org / jamie.riden () gmail com
http://uk.linkedin.com/in/jamieriden



------------------------------

Message: 2
Date: Mon, 16 May 2011 15:33:20 -0500
From: "evilghost () packetmail net" <evilghost () packetmail net>
Subject: Re: [Snort-sigs] performance criteria
To: Jamie Riden <jamie.riden () gmail com>
Cc: "snort-sigs () lists sourceforge net"
   <snort-sigs () lists sourceforge net>
Message-ID: <4DD18A10.6010402 () packetmail net>
Content-Type: text/plain; charset="us-ascii"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/16/11 15:27, Jamie Riden wrote:
Yes, heaven forbid we should discuss IDS performance metrics on an IDS
sigs list.

My thoughts exactly...

- --

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJN0YoQAAoJENgimYXu6xOHJEMP/igVOTfAcS4UTu0Y+8MaYnEw
E1lrrhjCjw0/FuemAKp34IvczQmGV0gaTYoqV3uFoFe5OeDW6wKKjbS4uwKD0gAf
tNbzJsPffKStUIs+Fd1+d9j23P3WV8vs2s8p5HrYm7B9k30+o6fBRvigTORwXxlM
m07ODGes8UvWAlb6mxdROHdz2IXF90cpW91HM6TvzKAzcRz2ieIi2g0bY43XT5En
29VQlMbpb5c6UTqnvLhGw8mZjK++osDLdm8wJlXhQlHm+u2fPiEfIDO6czIoLYpv
AJ//sskImrvut5sPWl2bYhGWzD5OzX8bx/giu7KA0LDgI9r98ajztVPdvOn/yr10
NLc2K0CRYO73w1iD6yMMNvOPo3XxQ5PJ2F/+uXvrmT1QiaFEbyHOFBDzKg4M5cfB
5qxY5CXEMpW29K62NBW44o4oXYc/DaMbFrYqqOzUa879OiVsP2EYX7cdA9PphFeZ
skWDL+MfEjcX4qoGoBe6p53H9hrOpTfb5Ajoz0y6uFvRlqrwix7UCjcNU0Nilui+
hYt/aMVsIYj6xhpWbae8mAkvQM0mdj71QLU6Zeh/cunD7TUTzQjz02OL7Lsx6WJb
IsdS29O1oHIHchmaYCYKOTRhDw9oaaynjRLjY4CwGXAs4TDKi/j7ipkvRelzCS8z
pJj9blKY/GhU8Mr/F/X9
=I+kp
-----END PGP SIGNATURE-----




------------------------------

Message: 3
Date: Wed, 18 May 2011 13:14:35 -0400 (EDT)
From: Research <research () sourcefire com>
Subject: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update
   2011-05-18
To: snort-sigs () lists sourceforge net
Message-ID: <20110518171435.B5B846CC12D () sourcefire com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
The Sourcefire VRT has added and modified multiple rules in the
backdoor, blacklist, botnet-cnc, exploit, oracle, policy,
specific-threats, web-activex and web-misc rule sets to provide
coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2011-05-18.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFN0/4saBoqZBVJfwMRAjIbAKCCHWdAfY99fNv2I5KhvmQHqb2S9QCglZ8B
9ggBgJ4KiGf2RNwLa82kbio=
=Gpec
-----END PGP SIGNATURE-----




------------------------------

Message: 4
Date: Wed, 18 May 2011 18:57:58 -0400
From: Joel Esler <jesler () sourcefire com>
Subject: [Snort-sigs] Your Webinar Invitation: Join us for "Snort
   Webinar --    Proper implementation of Multiconfig -- John Gay"
To: snort-users <snort-users () lists sourceforge net>,
   snort-sigs () lists sourceforge net, snortsigs () googlegroups com,
   snortusers () googlegroups com
Message-ID: <29404FF6-0D11-4CE9-B1BB-76F280A18558 () sourcefire com>
Content-Type: text/plain; charset="iso-8859-1"






Snort Webinar -- Proper implementation of Multiconfig -- John Gay
Join us for a Webinar on May 25

Space is limited.
Reserve your Webinar seat now at:
https://www3.gotomeeting.com/register/146516590
John Gay, Instructor and Courseware Developer for Sourcefire explains
the proper implementation of multiple Snort configuration
Title:    Snort Webinar -- Proper implementation of Multiconfig -- John
Gay
Date:    Wednesday, May 25, 2011
Time:    12:00 PM - 1:00 AM EDT
After registering you will receive a confirmation email containing
information about joining the Webinar.
System Requirements
PC-based attendees
Required: Windows? 7, Vista, XP or 2003 Server
Macintosh?-based attendees
Required: Mac OS? X 10.4.11 (Tiger?) or newer



-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------


------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
http://p.sf.net/sfu/intel-dev2devmay

------------------------------

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


End of Snort-sigs Digest, Vol 60, Issue 3
*****************************************


------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org

Current thread: