Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

3113 messages starting Dec 31 02 and ending Mar 31 03
Date index | Thread index | Author index

• Re:Extracting URLS from snort logs S. (Dec 31)
  • Re: Re:Extracting URLS from snort logs Mahdi Kefaiati (Dec 31)
    • Re: Re:Extracting URLS from snort logs S. (Jan 01)
• RE: Snort Inline Amit Kumar Gupta (Dec 31)
  • <Possible follow-ups>
  • RE: Snort Inline Amit Kumar Gupta (Dec 31)
  • RE: Snort Inline Bob McDowell (Jan 02)
  • RE: Snort Inline Bob McDowell (Jan 02)
    • Re: Snort Inline Jihoon Chung (Jan 03)
  • RE: Snort Inline Kevin Pietersma (Jan 02)
  • RE: Snort Inline Bob McDowell (Jan 03)
    • RE: Snort Inline Bob McDowell (Jan 03)
  • Snort Inline Joe Giles (Feb 27)
  • Snort Inline Joe Giles (Feb 28)
  • RE: Snort Inline Slighter, Tim (Feb 28)
    • RE: Snort Inline Joe Giles (Feb 28)
      • Snort Inline Bridge webcatalog (Mar 01)
      • Snort Inline Bridge webcatalog (Mar 03)
  • RE: Snort Inline Slighter, Tim (Mar 03)
• RE: Snort and acidcenter Rigoberto De la Portilla (Jan 01)
  • RE: Snort and acidcenter Rich Adamson (Jan 01)
    • Re: Snort and acidcenter Allan Dover (Jan 01)
      • Re: Snort and acidcenter Rich Adamson (Jan 01)
• RE: A quick Question Michael Esposito (Jan 01)
  • <Possible follow-ups>
  • RE: A quick Question Chris Eidem (Jan 02)
• RE: Install and config guide? Michael Esposito (Jan 01)
• OS Saul Bosquez (Jan 01)
• Nmap Scanning with Snort Detection Friday Akpan (Jan 01)
• Help!!! George Sakatzoglou (Jan 01)
• Snortcenter issues Bradley S. Jonas (Jan 01)
• sorry Saul Bosquez (Jan 01)
• installation problem Noraini Mariam Binti Mustafa (Jan 01)
  • <Possible follow-ups>
  • RE: installation problem Rich Stryker (Jan 02)
• CANT VIEW DATA in ACID! Pathmenanthan Ramakrishna (Jan 02)
  • Re: CANT VIEW DATA in ACID! Rafeeq Ur Rehman (Jan 02)
  • <Possible follow-ups>
  • RE: CANT VIEW DATA in ACID! Rigoberto De la Portilla (Jan 02)
  • RE: CANT VIEW DATA in ACID! Slighter, Tim (Jan 02)
• SnortAgent Sensor Problem! Pathmenanthan Ramakrishna (Jan 02)
  • Re: SnortAgent Sensor Problem! Hauser Marcel (Jan 02)
• Re: RE: Snort + MySql Thierry (Jan 02)
• IP Traffic Rick (Jan 02)
  • Re: IP Traffic Michael Boman (Jan 02)
    • Re: IP Traffic Rick (Jan 02)
  • Re: IP Traffic Rich Adamson (Jan 02)
  • <Possible follow-ups>
  • RE: IP Traffic Benjamin Hippler (Jan 02)
  • Re: IP Traffic Nicole Nicholson (Jan 02)
• Flexresp Issue with sort 1.9? Chris N (Jan 02)
  • Re: Flexresp Issue with sort 1.9? Dirk Geschke (Jan 03)
    • RE: Flexresp Issue with sort 1.9? Chris N (Jan 03)
  • <Possible follow-ups>
  • RE: Flexresp Issue with sort 1.9? Bob McDowell (Jan 03)
    • Re: Flexresp Issue with sort 1.9? Fabrizio Tivano (Jan 24)
• Snort Inline Iptables Queue Bob McDowell (Jan 02)
• Snortcenter conf file naming problem. Paul Clements (Jan 02)
• Re: snort doesn't work after while Azary Hossain (Jan 02)
• Still having no luck getting stats when running CIS Scanner Salloum, Camile (Jan 02)
  • Snort Test Error Mike Koponick (Jan 02)
    • RE: Snort Test Error Michael Steele (Jan 02)
      • RE: Snort Test Error Mike Koponick (Jan 02)
      • RE: Snort Test Error Mike Koponick (Jan 02)
• PureSecure + IP Options Blake Frantz (Jan 02)
• Snort binaries Saul Bosquez (Jan 02)
  • <Possible follow-ups>
  • snort binaries Saúl Bósquez (Jan 02)
    • Re: snort binaries Saad Kadhi (Jan 02)
• Unknow rule type: host=localhost David Alonso De La Vega Tapage (Jan 02)
  • Re: Unknow rule type: host=localhost Rafeeq Ur Rehman (Jan 03)
• snort email notification based on type of alert Matt Chabot (Jan 02)
• SNORT generate trap events Doan Nguyen (Jan 02)
• email notification scripts Ryan Ordway (Jan 02)
  • Snort2html.pl Mike Koponick (Jan 02)
  • Re: email notification scripts Edin Dizdarevic (Jan 07)
  • <Possible follow-ups>
  • RE: email notification scripts larosa, vjay (Jan 03)
    • RE: email notification scripts Ryan Ordway (Jan 03)
  • RE: email notification scripts larosa, vjay (Jan 03)
  • RE: email notification scripts larosa, vjay (Jan 03)
    • RE: email notification scripts Mike Koponick (Jan 03)
• send reset packet Anthony Liberty (Jan 02)
  • Re: send reset packet Saad Kadhi (Jan 02)
• Snort ---- Not Blocking Connection Atul Shrivastava (Jan 02)
  • <Possible follow-ups>
  • RE: Snort ---- Not Blocking Connection Rich Stryker (Jan 03)
  • RE: Snort ---- Not Blocking Connection Rich Stryker (Jan 03)
• Flexible Response not working Atul Shrivastava (Jan 03)
• Snort to Oracle Steven Rudolph (Jan 03)
  • Re: Snort to Oracle Nicholas Bachmann (Jan 03)
    • Re: Snort to Oracle Steve Suehring (Jan 03)
  • <Possible follow-ups>
  • RE: Snort to Oracle O'Flynn, Derek (Jan 03)
  • RE: Snort to Oracle Steven Rudolph (Jan 03)
  • RE: Snort to Oracle Kreimendahl, Chad J (Jan 03)
  • RE: Snort to Oracle Kreimendahl, Chad J (Jan 03)
• Snort Runing David Alonso De La Vega Tapage (Jan 03)
  • Re: Snort Runing Erick Mechler (Jan 03)
  • <Possible follow-ups>
  • Re: Snort Runing Michael Lougee (Jan 03)
• Script to transition rules from 1.8 to 1.9 Crow, Owen (Jan 03)
• Snort 1.9.0 configuration Saúl Bósquez (Jan 03)
  • <Possible follow-ups>
  • RE: Snort 1.9.0 configuration Lance Lloyd (Jan 03)
• Start Snort "snort -D -s $" mike (Jan 03)
• Norman Internet Protection - Malware Warning! Owen_Crow (Jan 03)
• Snort and ipchains Kevin Brown (Jan 03)
  • Re: Snort and ipchains Matt Kettler (Jan 07)
  • <Possible follow-ups>
  • RE: Snort and ipchains Bob McDowell (Jan 07)
    • RE: Snort and ipchains Matt Kettler (Jan 08)
  • RE: Snort and ipchains Bob McDowell (Jan 08)
• Snort and DHCP Request Leonard Miller (Jan 03)
  • RE: new user Don Weber (Jan 03)
• new user lee (Jan 03)
  • <Possible follow-ups>
  • RE: new user Lance Lloyd (Jan 03)
• snort expression (ip broadcast) Papa Mike (Jan 03)
• Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 03)
  • <Possible follow-ups>
  • RE: Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 03)
    • RE: Snort Syslog Alerts on Win32 Don Weber (Jan 03)
  • RE: Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 04)
    • RE: Snort Syslog Alerts on Win32 Rich Adamson (Jan 04)
    • RE: Snort Syslog Alerts on Win32 Frank Knobbe (Jan 04)
  • RE: Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 04)
  • RE: Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 04)
  • RE: Snort Syslog Alerts on Win32 L. Christopher Luther (Jan 04)
    • RE: Snort Syslog Alerts on Win32 Don Weber (Jan 05)
• flexresp and libnet Hauser Marcel (Jan 03)
  • Re: flexresp and libnet James-lists (Jan 04)
    • Snort not logging.... Mike Koponick (Jan 04)
      • Re: Snort not logging.... Andrew R. Baker (Jan 04)
      • RE: Snort not logging.... Mike Koponick (Jan 05)
      • Bad Protocol? Mike Koponick (Jan 05)
      • Re: Bad Protocol? J Irving (Jan 05)
• Snort as URL logger ? Uffe Jakobsen (Jan 03)
  • Re: Snort as URL logger ? Andrew R. Baker (Jan 04)
• Syntax question Dustin Decker (Jan 04)
  • Re: Syntax question Papa Mike (Jan 05)
    • Re: Syntax question Martin Roesch (Jan 06)
• db question William Bradd (Jan 04)
  • Re: db question Martin Roesch (Jan 06)
• Snort v1.9.0 on Win2k: resp error Rich Adamson (Jan 04)
  • Re: Snort v1.9.0 on Win2k: resp error Rich Adamson (Jan 04)
• RE: Copper Tapping Daniel Ng (Jan 04)
• SNORT & ACID PROBLEMS!!! Pathmenanthan Ramakrishna (Jan 05)
  • Deprecated Plugin API Frank Reid (Jan 05)
    • Re: Deprecated Plugin API Andrew R. Baker (Jan 05)
      • RE: Deprecated Plugin API Frank Reid (Jan 05)
• RE: [Fwd: RE: Log to remote syslog server and MySql Database] L. Christopher Luther (Jan 05)
  • RE: [Fwd: RE: Log to remote syslog server and MySql Database] Frank Knobbe (Jan 05)
• Snort+POstgresql Laurent Mesuré (Jan 05)
  • Re: Snort+POstgresql Nicholas Bachmann (Jan 05)
• problems starting snort Greg (Jan 05)
  • Re: problems starting snort Alberto Gonzalez (Jan 05)
• hepl !cant start snort חואן (Jan 06)
  • Re: hepl !cant start snort Erek Adams (Jan 06)
• Disable Snort logging to /var/log/snort Sam Ng (Jan 06)
  • Re: Disable Snort logging to /var/log/snort Dirk Geschke (Jan 06)
    • Re: Disable Snort logging to /var/log/snort Andrew R. Baker (Jan 06)
• Csv not logging Sh J (Jan 06)
• RE: Bad Protocol? Cloppert, Michael (Jan 06)
  • Re: Bad Protocol? Martin Roesch (Jan 06)
    • Re: Bad Protocol? Mark Schaefer (Jan 06)
  • <Possible follow-ups>
  • RE: Bad Protocol? Cloppert, Michael (Jan 06)
• Snort daemon stops jsauer (Jan 06)
  • Re: Snort daemon stops Erek Adams (Jan 06)
• Snort v1.9.0 Saúl Bósquez (Jan 06)
• woohoo finally snort is up !!!!!! Rigoberto De la Portilla (Jan 06)
• sensors and mysql database Saúl Bósquez (Jan 06)
  • Re: sensors and mysql database Aaron The Young (Jan 06)
  • Re: sensors and mysql database Erick Mechler (Jan 06)
• There are no Alert Groups ??? Rigoberto De la Portilla (Jan 06)
• Port Scan traffic not showing linuxnews (Jan 06)
  • Re: Port Scan traffic not showing Paul Hrolenok (Jan 06)
  • Re: Port Scan traffic not showing Dustin Decker (Jan 06)
• To hub or not to hub Anthony Scott (Jan 06)
  • Re: To hub or not to hub Matt Kettler (Jan 06)
  • Re: To hub or not to hub Javier Liendo (Jan 06)
  • <Possible follow-ups>
  • RE: To hub or not to hub Semerjian, Ohanes (Jan 06)
  • Re: To hub or not to hub Anthony Scott (Jan 07)
    • Re: To hub or not to hub Bob Staaf (Jan 07)
    • Re: To hub or not to hub Scot Scot (Jan 07)
• Using snort to process a TCPDump file John Cherbini (Jan 06)
  • Re: Using snort to process a TCPDump file Ashley Thomas (Jan 06)
  • Re: Using snort to process a TCPDump file Matt Kettler (Jan 06)
  • Re: Using snort to process a TCPDump file Bennett Todd (Jan 07)
• Snort 1.8.6 Win32 Build Errors L. Christopher Luther (Jan 06)
  • <Possible follow-ups>
  • RE: Snort 1.8.6 Win32 Build Errors L. Christopher Luther (Jan 06)
    • Re: Snort 1.8.6 Win32 Build Errors Chris Reid (Jan 06)
      • RE: Snort 1.8.6 Win32 Build Errors Michael Steele (Jan 06)
  • RE: Snort 1.8.6 Win32 Build Errors L. Christopher Luther (Jan 07)
• Error message Saul Bosquez (Jan 06)
  • RE: Error message John Cherbini (Jan 06)
  • Re: Error message Saad Kadhi (Jan 06)
• RE: Snort Syslog Alerts on Win32On Sun, 5 Jan 2003, L. Christopher Luther wrote: Erek Adams (Jan 06)
• Question about alerts and Windows environment Mark Scott (Jan 06)
  • <Possible follow-ups>
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 07)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 08)
    • RE: Question about alerts and Windows environment Don Weber (Jan 09)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 09)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 09)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 09)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 09)
  • RE: Question about alerts and Windows environment L. Christopher Luther (Jan 10)
• SnortCenter: Problems with Init Script and SSL Cert dr . kaos (Jan 06)
• Snort-inline toohs (Jan 06)
  • <Possible follow-ups>
  • Snort-inline Slighter, Tim (Jan 16)
  • snort-inline Slighter, Tim (Jan 21)
  • Snort-inline Slighter, Tim (Mar 11)
  • Snort-inline Slighter, Tim (Mar 14)
  • snort-inline Ales Stibal (Mar 18)
• Snort Rule modification... Benjamin Wall (Jan 06)
  • Re: Snort Rule modification... Rafeeq Rehman (Jan 07)
    • Re: Snort Rule modification... Scott Fringer (Jan 07)
      • Re: Snort Rule modification... Erek Adams (Jan 07)
• snort current, freebsd 4.7 compile woes.... Geri F. (Jan 06)
• DSL NoLiMiT1961 (Jan 06)
  • Re: DSL Matt Kettler (Jan 06)
  • Re: DSL Rich Adamson (Jan 07)
  • <Possible follow-ups>
  • RE: DSL Bob McDowell (Jan 07)
• Slapper signature ?? Ashley Thomas (Jan 06)
  • Re: [Snort-sigs] Slapper signature ?? Jukka Juslin (Jan 09)
    • Re: [Snort-sigs] Slapper signature ?? Ashley Thomas (Jan 08)
• Cant start snort חואן (Jan 07)
• RE: Snort-users digest, Vol 1 #2641 - 15 msgs חואן (Jan 07)
• Re: SnortCenter: Problems with Init Script and SSL larc (Jan 07)
• Snort-inline issue Amit Kumar Gupta (Jan 07)
  • <Possible follow-ups>
  • RE: Snort-inline issue Amit Kumar Gupta (Jan 07)
• Snort compilation Laurent Mesuré (Jan 07)
• Snort Issue Amit Kumar Gupta (Jan 07)
• ACID with 2 archive databases? Michael (Jan 07)
  • RE: ACID with 2 archive databases? Matías Bevilacqua (Jan 07)
  • <Possible follow-ups>
  • RE: ACID with 2 archive databases? Slighter, Tim (Jan 07)
  • RE: ACID with 2 archive databases? Chris Eidem (Jan 07)
  • RE: ACID with 2 archive databases? Michael (Jan 08)
• (no subject) counterping (Jan 07)
  • <Possible follow-ups>
  • (no subject) counterping (Jan 07)
  • (no subject) Jim Schwin (Jan 09)
    • Re: (no subject) Erek Adams (Jan 09)
  • (no subject) Michael Weiser (Jan 18)
  • (no subject) Luiz Alberto Cataldo Jr (Jan 30)
  • (no subject) Carmit Partoush (Feb 11)
  • (no subject) Carmit Partoush (Feb 13)
    • Re: (no subject) Erek Adams (Feb 13)
  • (no subject) abhi naik (Feb 14)
    • Re: (no subject) Charles Darwin (Feb 16)
    • RE: (no subject) Michael Steele (Feb 16)
  • (no subject) jcosta (Feb 27)
    • Re: (no subject) Erek Adams (Feb 27)
    • Re: (no subject) Erick Mechler (Feb 27)
  • (no subject) Comcast (Mar 02)
    • Re: (no subject) Erek Adams (Mar 03)
  • (no subject) Motif (Mar 07)
  • (no subject) ryan stangl (Mar 17)
    • Re: (no subject) Alberto Gonzalez (Mar 18)
  • (no subject) aalbert (Mar 25)
  • (no subject) Ken Bell (Mar 27)
    • Adobe's Ducky Adam Shephard (Mar 27)
• Debian 3.0 and Snort 1.9 - any problems? spy guy (Jan 07)
  • Re: Debian 3.0 and Snort 1.9 - any problems? Scott Fringer (Jan 07)
• Initialization Error Saul Bosquez (Jan 07)
  • <Possible follow-ups>
  • Initialization Error Saul Bosquez (Jan 07)
    • Re: Initialization Error Erick Mechler (Jan 07)
    • Re: Initialization Error Nigel Houghton (Jan 08)
• Sort alert notification Marc Quibell (Jan 07)
  • <Possible follow-ups>
  • RE: Sort alert notification L. Christopher Luther (Jan 08)
• Snort syslog message format Douglas Corner (Jan 07)
  • Re: Snort syslog message format Erek Adams (Jan 08)
• Snort replay into ACID - Sensor Identification Dustin Decker (Jan 07)
  • Re: Snort replay into ACID - Sensor Identification Erek Adams (Jan 08)
• Best chipset to use? Spoofy (Jan 07)
  • Re: Best chipset to use? Saad Kadhi (Jan 08)
  • Re: Best chipset to use? Erek Adams (Jan 08)
  • <Possible follow-ups>
  • Re: Best chipset to use? M M (Jan 08)
• Snort Core Dump issue Amit Kumar Gupta (Jan 07)
• Snort and Win32 Incidents (Jan 08)
  • Re: Snort and Win32 Erek Adams (Jan 08)
    • RE: Snort and Win32 Incidents (Jan 08)
      • RE: Snort and Win32 Erek Adams (Jan 08)
      • RE: Snort and Win32 Michael Steele (Jan 08)
    • RE: Snort and Win32 Don Weber (Jan 08)
  • <Possible follow-ups>
  • RE: Snort and Win32 L. Christopher Luther (Jan 08)
  • RE: Snort and Win32 L. Christopher Luther (Jan 09)
• Enable Snort To Detect NIDS Pathmenanthan Ramakrishna (Jan 08)
  • Re: Enable Snort To Detect NIDS Erek Adams (Jan 08)
  • Re: Enable Snort To Detect NIDS Benjamin Wall (Jan 09)
• Big MySQL-Database Kraus, Thorsten (Jan 08)
  • RE: Big MySQL-Database Patrice Boulanger (Jan 08)
• snort-inline question Roanne Tang (Jan 08)
• SnortCenter 1.0 beta released larc (Jan 08)
  • <Possible follow-ups>
  • RE: SnortCenter 1.0 beta released Slighter, Tim (Jan 09)
• ACID/MySQL multiple database performance question Crow, Owen (Jan 08)
• rules keyword Patrice Boulanger (Jan 08)
  • Re: rules keyword Erek Adams (Jan 08)
  • Re: rules keyword James Hoagland (Jan 08)
    • RE: rules keyword Patrice Boulanger (Jan 08)
• WinPCap Archives L. Christopher Luther (Jan 08)
  • Re: WinPCap Archives Chris Reid (Jan 08)
    • RE: WinPCap Archives Michael Steele (Jan 08)
  • <Possible follow-ups>
  • RE: WinPCap Archives L. Christopher Luther (Jan 08)
  • RE: WinPCap Archives L. Christopher Luther (Jan 08)
• Linux Snort-Inline Toolkit (fwd) Erek Adams (Jan 08)
• ACID time profile - where's 2003? Cloppert, Michael (Jan 08)
  • Re: ACID time profile - where's 2003? John Bradberry (Jan 09)
  • <Possible follow-ups>
  • Re: ACID time profile - where's 2003? Roman Danyliw (Jan 08)
• Fwd: snort is not sending traps Christian Bock (Jan 09)
  • <Possible follow-ups>
  • snort is not sending traps Christian Bock (Jan 09)
    • Re: snort is not sending traps twig les (Jan 09)
  • RE: snort is not sending traps Metz, Tim (Jan 10)
• OT:Libpcap / Tcpdump Ashley Thomas (Jan 09)
  • RE: OT:Libpcap / Tcpdump mono toy (Jan 09)
• ethereal 0.9.8 can't read tcpdump.log.XXXX Christian Bock (Jan 09)
  • Re: ethereal 0.9.8 can't read tcpdump.log.XXXX Erek Adams (Jan 09)
    • Re: ethereal 0.9.8 can't read tcpdump.log.XXXX Christian Bock (Jan 10)
  • Re: ethereal 0.9.8 can't read tcpdump.log.XXXX Olaf Schreck (Jan 09)
• Data Not Shown In ACID Console Pathmenanthan Ramakrishna (Jan 09)
• Redhat updates and patches Saúl Bósquez (Jan 09)
  • Re: Redhat updates and patches Matt Kettler (Jan 09)
  • RE: Redhat updates and patches John Cherbini (Jan 09)
  • RE: Redhat updates and patches Lance Worthington (Jan 09)
  • Re: Redhat updates and patches Florin Andrei (Jan 14)
  • <Possible follow-ups>
  • RE: Redhat updates and patches Bob McDowell (Jan 09)
  • RE: Redhat updates and patches Gonzalez, Albert (Jan 09)
• large icmp packets with embedded jpegs cmcauley (Jan 09)
• Snort reports/graphs Marc Quibell (Jan 09)
  • Re: Snort reports/graphs Dustin Decker (Jan 09)
• 2GB limit? Sammy X (Jan 09)
  • Re: 2GB limit? Erick Mechler (Jan 09)
  • Re: 2GB limit? Steve Suehring (Jan 09)
    • Re: 2GB limit? Sammy X (Jan 09)
    • Re: 2GB limit? Geoff (Jan 09)
  • Re: 2GB limit? Javier Liendo (Jan 09)
    • Re: 2GB limit? Shane Williams (Jan 09)
      • Re: 2GB limit? Sammy (Jan 09)
      • Re: 2GB limit? Shane Williams (Jan 09)
      • Re: 2GB limit? Phil Wood (Jan 09)
  • Re: 2GB limit? Florin Andrei (Jan 14)
  • <Possible follow-ups>
  • RE: 2GB limit? Henning, David (Jan 09)
    • Re: 2GB limit? DataShark (Jan 10)
• Error opening adapter Chris Liechty (Jan 09)
  • <Possible follow-ups>
  • RE: Error opening adapter L. Christopher Luther (Jan 09)
• removing sensor number Rigoberto De la Portilla (Jan 09)
• snort/demarc; Unknown config: reference Scott Kapel (Jan 09)
• ACID Query Date Selection - Where is 2003? Alan Kloster (Jan 09)
  • Re: ACID Query Date Selection - Where is 2003? Dustin Decker (Jan 09)
  • <Possible follow-ups>
  • Re: ACID Query Date Selection - Where is 2003? Roman Danyliw (Jan 09)
• unix time appended to snort log Steven Wo (Jan 09)
  • <Possible follow-ups>
  • RE: unix time appended to snort log Gonzalez, Albert (Jan 09)
    • RE: unix time appended to snort log Steven Wo (Jan 10)
• Linux Snort-Inline Toolkit Lance Spitzner (Jan 09)
• Alpha Snort and Postgres Michael J. McCasland (Jan 09)
• Re: [SAtalk] Razor down - Works for me Matt Kettler (Jan 09)
  • Re: OT: Re: [SAtalk] Razor down - Works for me Matt Kettler (Jan 09)
• Windows SMP SnortCenter troubleshooting Cilin (Jan 09)
• Quick poll: favorite snort config? Benjamin Feen (Jan 09)
  • Re: Quick poll: favorite snort config? Shane Hickey (Jan 14)
  • <Possible follow-ups>
  • RE: Quick poll: favorite snort config? Petriz, Pablo (Jan 10)
  • RE: Quick poll: favorite snort config? Petriz, Pablo (Jan 15)
• Updates & patches Saúl Bósquez (Jan 09)
• IDS Topology Saul Bosquez (Jan 09)
  • Re: IDS Topology Demetri Mouratis (Jan 09)
    • Re: IDS Topology Saad Kadhi (Jan 09)
      • Re: IDS Topology Demetri Mouratis (Jan 10)
  • <Possible follow-ups>
  • IDS Topology Saul Bosquez (Jan 09)
    • Re: IDS Topology Erek Adams (Jan 09)
    • Re: IDS Topology Bennett Todd (Jan 10)
  • RE: IDS Topology James R. Hendrick (Jan 10)
  • IDS Topology Saul Bosquez (Jan 10)
• AW: IDS Topology Poppi, Sandro (Jan 09)
• Re: RE: SnortCenter 1.0 beta releas larc (Jan 10)
  • <Possible follow-ups>
  • RE: RE: SnortCenter 1.0 beta releas Slighter, Tim (Jan 10)
• Win users - HELP Sh J (Jan 10)
  • <Possible follow-ups>
  • RE: Win users - HELP L. Christopher Luther (Jan 10)
  • RE: Win users - HELP L. Christopher Luther (Jan 13)
• 1.8.7 vs 1.9.0 Saul Bosquez (Jan 10)
  • Re: 1.8.7 vs 1.9.0 Bennett Todd (Jan 10)
• Smoothwall - Please, help me. gbarreiro (Jan 10)
  • Re: Smoothwall - Please, help me. Peter Robb (Jan 11)
  • <Possible follow-ups>
  • RE: Smoothwall - Please, help me. Gonzalez, Albert (Jan 10)
  • RE: Smoothwall - Please, help me. gbarreiro (Jan 10)
    • RE: Smoothwall - Please, help me. --CROSSPOST twig les (Jan 10)
    • RE: Smoothwall - Please, help me. twig les (Jan 10)
• [OT] interface-mirroring on a server Detmar Liesen (Jan 10)
• OpenPcap again .. David Alonso De La Vega Tapage (Jan 10)
• running snort Saúl Bósquez (Jan 10)
  • <Possible follow-ups>
  • RE: running snort Matt Yackley (Jan 10)
    • Re: running snort Saúl Bósquez (Jan 10)
• script file Saúl Bósquez (Jan 10)
  • Re: script file Erek Adams (Jan 10)
  • <Possible follow-ups>
  • script file Saúl Bósquez (Jan 14)
    • Re: script file Javier Liendo (Jan 14)
    • Re: script file Erick Mechler (Jan 14)
    • Re: script file Cesar Andres Navarrete R. (Jan 15)
      • Re: script file Saúl Bósquez (Jan 15)
• Sending mail Schliff (Jan 11)
  • RE: Sending mail Alberto Gonzalez (Jan 11)
  • Re: Sending mail Erek Adams (Jan 11)
  • <Possible follow-ups>
  • Re: Sending mail Michael J. McCasland (Jan 12)
• SID 1156 Apurv Singh (Jan 11)
  • RE: SID 1156 Alberto Gonzalez (Jan 11)
• Whoops. Alberto Gonzalez (Jan 11)
• How to get an answer to your question. Erek Adams (Jan 11)
  • <Possible follow-ups>
  • RE: How to get an answer to your question. Brian Topping (Jan 11)
• re: invalid timestamp with time zone error Michael J. McCasland (Jan 11)
• Mysql, log and portscan.. Marco A. mateos (Jan 11)
  • <Possible follow-ups>
  • RE: Mysql, log and portscan.. L. Christopher Luther (Jan 13)
• snort probs don (Jan 11)
  • RE: snort probs Michael Steele (Jan 11)
  • Re: snort probs Erek Adams (Jan 11)
• IPv6 Jan Hugo Prins (Jan 11)
  • RE: IPv6 Alberto Gonzalez (Jan 11)
    • Re: IPv6 Jan Hugo Prins (Jan 12)
    • Re: IPv6 Jan Hugo Prins (Jan 13)
  • <Possible follow-ups>
  • Re: IPv6 Jan Hugo Prins (Jan 13)
• How can you classify portscans in ACID uniqe alert screen... James MacKinnon (Jan 11)
• Mysql starting or not? Jeremy Loukinas (Jan 12)
  • Re: Mysql starting or not? Erick Mechler (Jan 12)
  • <Possible follow-ups>
  • Re: Mysql starting or not? Justin Jessup (Jan 12)
• Problem when adding snort sensor on snortcenter Anthony Liberty (Jan 13)
  • <Possible follow-ups>
  • RE: Problem when adding snort sensor on snortcenter Anthony Liberty (Jan 13)
  • RE: Problem when adding snort sensor on snortcenter Anthony Liberty (Jan 13)
    • RE: Problem when adding snort sensor on snortcenter Erek Adams (Jan 13)
• Re: Problem when adding snort sensor larc (Jan 13)
  • <Possible follow-ups>
  • RE: Problem when adding snort sensor Anthony Liberty (Jan 13)
• Snort Enterprise Implementation Greg Adams (Jan 13)
  • Re: Snort Enterprise Implementation Jens Krabbenhoeft (Jan 13)
  • Re: Snort Enterprise Implementation Dustin Decker (Jan 13)
  • <Possible follow-ups>
  • Re: Snort Enterprise Implementation larc (Jan 13)
  • RE: Snort Enterprise Implementation Hicks, John (Jan 13)
• unable to wash traffic through rules files don (Jan 13)
  • Re: unable to wash traffic through rules files Erek Adams (Jan 13)
  • <Possible follow-ups>
  • RE: unable to wash traffic through rules files Hicks, John (Jan 13)
  • RE: unable to wash traffic through rules files Gonzalez, Albert (Jan 13)
• I want certain IP adresses not to be logged Jeroen Diederen (Jan 13)
  • Re: I want certain IP adresses not to be logged Erek Adams (Jan 13)
  • <Possible follow-ups>
  • RE: I want certain IP adresses not to be logged Gonzalez, Albert (Jan 13)
• snort kill -HUP error openpcap Sébastien Desse (Jan 13)
  • Re: snort kill -HUP error openpcap Andrew R. Baker (Jan 13)
  • <Possible follow-ups>
  • RE: snort kill -HUP error openpcap Gonzalez, Albert (Jan 13)
• Snort LogHog Steve Knoch (Jan 13)
• Portscan preprocessors dropping packets on a simple nmap-scan Edin Dizdarevic (Jan 13)
  • Re: Portscan preprocessors dropping packets on a simple nmap-scan Ashley Thomas (Jan 13)
    • Re: Portscan preprocessors dropping packets on a simple nmap-scan Edin Dizdarevic (Jan 13)
• RE: Portscan preprocessors dropping packets on a si mple nmap-scan Gonzalez, Albert (Jan 13)
  • Re: Portscan preprocessors dropping packets on a si mple nmap-scan Edin Dizdarevic (Jan 14)
    • Re: Portscan preprocessors dropping packets on a si mple nmap-scan Erek Adams (Jan 14)
      • Re: Portscan preprocessors dropping packets on a si mple nmap-scan Edin Dizdarevic (Jan 14)
      • Re: Portscan preprocessors dropping packets on a si mple nmap-scan Erek Adams (Jan 14)
      • Re: Portscan preprocessors dropping packets on a si mple nmap-scan Edin Dizdarevic (Jan 15)
• spp_portscan2 proxy alerts gr8dane2 (Jan 13)
  • RE: spp_portscan2 proxy alerts Dane Howard (Jan 13)
  • Re: spp_portscan2 proxy alerts Erek Adams (Jan 13)
    • DNS on Log Messsages? Mike Koponick (Jan 14)
      • Re: DNS on Log Messsages? Erek Adams (Jan 14)
      • Re: DNS on Log Messsages? spy guy (Jan 15)
• Tcl/tk Analysis Interface for Snort Bamm Visscher (Jan 13)
• error output Saúl Bósquez (Jan 13)
  • Re: error output Erick Mechler (Jan 13)
• Bug in 1.9.0 - or am I reading the rule wrong? Jason Haar (Jan 13)
  • Re: Bug in 1.9.0 - or am I reading the rule wrong? Chris Green (Jan 14)
    • Re: Bug in 1.9.0 - or am I reading the rule wrong? Jason Haar (Jan 15)
      • Re: Bug in 1.9.0 - or am I reading the rule wrong? Chris Green (Jan 16)
      • Re: Bug in 1.9.0 - or am I reading the rule wrong? Chris Green (Jan 16)
  • <Possible follow-ups>
  • RE: Bug in 1.9.0 - or am I reading the rule wrong? Kreimendahl, Chad J (Jan 14)
    • Re: Bug in 1.9.0 - or am I reading the rule wrong? Chris Green (Jan 14)
  • RE: Bug in 1.9.0 - or am I reading the rule wrong? Kreimendahl, Chad J (Jan 14)
    • Re: Bug in 1.9.0 - or am I reading the rule wrong? Chris Green (Jan 14)
  • RE: Bug in 1.9.0 - or am I reading the rule wrong? Kreimendahl, Chad J (Jan 14)
• snort doesnt configure Gustavo Panizza (Jan 13)
  • Re: snort doesnt configure Matt Kettler (Jan 13)
• snort-acid timestamp problem...anyone ever fix this? Brian J. Smith-Sweeney (Jan 13)
  • <Possible follow-ups>
  • snort-acid timestamp problem...anyone ever fix this? Brian J. Smith-Sweeney (Jan 13)
    • Re: snort-acid timestamp problem...anyone ever fix this? Jens Krabbenhoeft (Jan 14)
      • Re: snort-acid timestamp problem...anyone ever fix this? Brian J. Smith-Sweeney (Jan 14)
• Rules for Snort-Inline mike (Jan 13)
• RE: RE: Problem when adding snort s Anthony Liberty (Jan 13)
  • RE: RE: Problem when adding snort s ardi (Jan 20)
  • <Possible follow-ups>
  • RE: RE: Problem when adding snort s Anthony Liberty (Jan 15)
  • RE: RE: Problem when adding snort s Anthony Liberty (Jan 21)
• PHP version 4.2.3 rpm not there on redhat site Atul Shrivastava (Jan 13)
  • Re: PHP version 4.2.3 rpm not there on redhat site Saad Kadhi (Jan 13)
• Snort..conf?!?!? Please help! Paul Clements (Jan 14)
  • <Possible follow-ups>
  • Re: Snort..conf?!?!? Please help! larc (Jan 14)
• PHP 4.3 Installation Error Atul Shrivastava (Jan 14)
• snort installation Anthony Banez (Jan 14)
  • Re: snort installation Erek Adams (Jan 14)
  • Re: snort installation Brian J. Smith-Sweeney (Jan 14)
    • Re: snort installation twig les (Jan 14)
  • <Possible follow-ups>
  • RE: snort installation James R. Hendrick (Jan 14)
  • snort installation Ronan Horgan (Mar 03)
  • RE: snort installation Mohamed Baher (Mar 03)
  • RE: snort installation Mohamed Baher (Mar 05)
• Snort URL logging ALMEIDA Antonio Jose (Jan 14)
  • Re: Snort URL logging Jens Krabbenhoeft (Jan 14)
  • <Possible follow-ups>
  • RE: Snort URL logging ALMEIDA Antonio Jose (Jan 14)
    • RE: Snort URL logging Erek Adams (Jan 14)
    • Re: Snort URL logging Jens Krabbenhoeft (Jan 14)
  • RE: Snort URL logging Rich Stryker (Jan 14)
    • RE: Snort URL logging Erek Adams (Jan 14)
  • RE: Snort URL logging L. Christopher Luther (Jan 14)
  • RE: Snort URL logging ALMEIDA Antonio Jose (Jan 14)
  • RE: Snort URL logging Rich Stryker (Jan 15)
    • RE: Snort URL logging Erek Adams (Jan 15)
• Attack: Datum length ? Jim Greco (Jan 14)
  • Re: Attack: Datum length ? Chris Green (Jan 14)
• Pass rule sometimes does not work Hess, Ben (Jan 14)
  • Re: Pass rule sometimes does not work Erick Mechler (Jan 14)
  • Re: Pass rule sometimes does not work Edin Dizdarevic (Jan 14)
  • <Possible follow-ups>
  • RE: Pass rule sometimes does not work Hess, Ben (Jan 14)
  • RE: Pass rule sometimes does not work Hess, Ben (Jan 14)
    • Re: Pass rule sometimes does not work Edin Dizdarevic (Jan 14)
• SMTP Relaying bug Pauling (Jan 14)
  • <Possible follow-ups>
  • RE: SMTP Relaying bug L. Christopher Luther (Jan 14)
    • RE: SMTP Relaying bug Pauling (Jan 14)
  • RE: SMTP Relaying bug L. Christopher Luther (Jan 14)
• output alert_syslog Giovanni P. Tirloni (Jan 14)
  • Re: output alert_syslog Matt Kettler (Jan 14)
  • <Possible follow-ups>
  • RE: output alert_syslog Steve Halligan (Jan 14)
• Snort 2.0 IPv6 Beta. Jan Hugo Prins (Jan 14)
  • Re: Snort 2.0 IPv6 Beta. Chris Green (Jan 14)
    • Re: Snort 2.0 IPv6 Beta. Jan Hugo Prins (Jan 14)
• Log Analysis and Clusters Subba Rao (Jan 14)
• snmp traps going to 161, snmp plugin syntax? twig les (Jan 14)
  • Re: snmp traps going to 161, snmp plugin syntax? Erick Mechler (Jan 14)
    • Re: snmp traps going to 161, snmp plugin syntax? twig les (Jan 14)
• Snort Steven Williams (Jan 14)
  • Re: Snort Scot Wiedenfeld (Jan 15)
  • Re: Snort Erek Adams (Jan 15)
  • <Possible follow-ups>
  • Snort Christopher Biddle (Jan 16)
  • RE: Snort Morgan R. Elmore (Jan 16)
  • Snort ryan stangl (Mar 24)
    • Re: Snort Erek Adams (Mar 25)
• Cant connect mysql server Saul Bosquez (Jan 14)
  • <Possible follow-ups>
  • Cant connect mysql server Saul Bosquez (Jan 15)
  • RE: Cant connect mysql server Slighter, Tim (Jan 15)
  • RE: Cant connect mysql server Saul Bosquez (Jan 15)
    • Re: Cant connect mysql server Saad Kadhi (Jan 15)
• Methodology Verification John Cherbini (Jan 14)
  • Re: Methodology Verification seclists (Jan 15)
  • Re: Methodology Verification Erek Adams (Jan 15)
    • RE: Methodology Verification John Cherbini (Jan 15)
  • <Possible follow-ups>
  • RE: Methodology Verification John Cherbini (Jan 14)
• Snort on a 486 ? Hilton De Meillon (Jan 15)
  • Re: Snort on a 486 ? Erek Adams (Jan 15)
  • Re: Snort on a 486 ? Bennett Todd (Jan 15)
    • Re: Snort on a 486 ? Saad Kadhi (Jan 15)
  • <Possible follow-ups>
  • RE: Snort on a 486 ? Hicks, John (Jan 15)
• Snort Sensors + logging to MSSQL shreerang vaidya (Jan 15)
  • Re: Snort Sensors + logging to MSSQL Erick Mechler (Jan 15)
  • RE: Snort Sensors + logging to MSSQL Paulo Filipe Mira (Jan 16)
  • <Possible follow-ups>
  • RE: Snort Sensors + logging to MSSQL shreerang vaidya (Jan 16)
  • Re: Snort Sensors + logging to MSSQL shreerang vaidya (Jan 16)
    • RE: Snort Sensors + logging to MSSQL Michael Steele (Jan 16)
• W32.Opaserv.Worm john (Jan 15)
  • <Possible follow-ups>
  • RE: W32.Opaserv.Worm Hicks, John (Jan 15)
• suggestion? Slighter, Tim (Jan 15)
  • <Possible follow-ups>
  • RE: suggestion? Steve Halligan (Jan 15)
• Disk space on sensor spy guy (Jan 15)
  • <Possible follow-ups>
  • RE: Disk space on sensor Hicks, John (Jan 20)
• Snort not connecting to MySQL Michael J. Ayers (Jan 15)
  • Re: Snort not connecting to MySQL twig les (Jan 15)
  • Re: Snort not connecting to MySQL Bamm Visscher (Jan 15)
    • Re: Snort not connecting to MySQL Michael J. Ayers (Jan 15)
      • Re: Snort not connecting to MySQL Bamm Visscher (Jan 15)
      • Re: Snort not connecting to MySQL Demetri Mouratis (Jan 15)
      • Re: Snort not connecting to MySQL Michael J. Ayers (Jan 15)
  • <Possible follow-ups>
  • RE: Snort not connecting to MySQL Hicks, John (Jan 15)
    • RE: Snort not connecting to MySQL Michael J. Ayers (Jan 15)
  • RE: Snort not connecting to MySQL Michael J. Ayers (Jan 15)
  • RE: Snort not connecting to MySQL L. Christopher Luther (Jan 15)
• double role box Saúl Bósquez (Jan 15)
  • Re: double role box Erick Mechler (Jan 15)
  • <Possible follow-ups>
  • RE: double role box Morgan R. Elmore (Jan 15)
• alert file, database output?!?! Federico Lombardo (Jan 15)
  • <Possible follow-ups>
  • Re: alert file, database output?!?! Federico Lombardo (Jan 16)
    • Re: alert file, database output?!?! Erek Adams (Jan 16)
• Snort log previewing with Acid. Anthony Liberty (Jan 15)
  • Re: Snort log previewing with Acid. Erek Adams (Jan 16)
  • Re: Snort log previewing with Acid. Joseph Gresham (Jan 17)
  • <Possible follow-ups>
  • RE: Snort log previewing with Acid. Hicks, John (Jan 16)
• snort on win2000 prof. Ricardo Garin Jr. (Jan 16)
  • <Possible follow-ups>
  • RE: snort on win2000 prof. Morgan R. Elmore (Jan 16)
    • RE: snort on win2000 prof. Michael Steele (Jan 16)
    • Re: snort on win2000 prof. Ricardo Garin Jr. (Jan 16)
      • RE: snort on win2000 prof. Michael Steele (Jan 16)
      • Re: snort on win2000 prof. Chris Reid (Jan 16)
      • Re: snort on win2000 prof. Ricardo Garin Jr. (Jan 17)
      • Re: snort on win2000 prof. Erek Adams (Jan 20)
  • RE: snort on win2000 prof. L. Christopher Luther (Jan 16)
  • RE: snort on win2000 prof. John York (Jan 16)
  • RE: snort on win2000 prof. Morgan R. Elmore (Jan 17)
  • RE: snort on win2000 prof. Hicks, John (Jan 20)
    • RE: snort on win2000 prof. Georges J. Jahchan, Eng. (Jan 21)
• Problems in phplot Quick Start Augustinho Catto (Jan 16)
• preprocessor not logging into DB Federico Lombardo (Jan 16)
  • Re: preprocessor not logging into DB [SOLVED] Federico Lombardo (Jan 16)
• Converting from 1.8.6 to 1.9 - Flow statements vs. Flags Pacheco, Michael F. (Jan 16)
• Changing a Classification Graham, Robert (Jan 16)
  • <Possible follow-ups>
  • Changing a Classification Graham, Robert (Jan 18)
  • Changing a Classification Graham, Robert (Jan 23)
  • RE: Changing a Classification Graham, Robert (Jan 24)
• Cisco switch configuration for sensor gr8dane2 (Jan 16)
  • Re: Cisco switch configuration for sensor twig les (Jan 16)
    • RE: Cisco switch configuration for sensor Paul D. Shaffer (Jan 16)
  • <Possible follow-ups>
  • Re: Re: FW: Cisco switch configuration for sensor gr8dane2 (Jan 16)
  • Re: FW: Cisco switch configuration for sensor kevin reynolds (Jan 18)
• win-ce 4 Arley Carter (Jan 16)
  • Re: win-ce 4 Jacob Redding (Jan 18)
    • Re: win-ce 4 Arley Carter (Jan 16)
      • Re: win-ce 4 twig les (Jan 16)
    • Re: win-ce 4 Gene Yoo (Jan 18)
  • <Possible follow-ups>
  • RE: win-ce 4 Miller, Eoin (Jan 16)
    • Re: win-ce 4 Arley Carter (Jan 16)
• Fw: Snort for Pocket PC Arley Carter (Jan 16)
  • RE: Snort for Pocket PC Michael Steele (Jan 16)
• Windows 1.9.0 install doesn't recognize Gordon Cunningham (Jan 16)
  • Re: Windows 1.9.0 install doesn't recognize Erek Adams (Jan 16)
• Snort outputing like tcpdump Christopher Lyon (Jan 16)
  • Re: Snort outputing like tcpdump Erek Adams (Jan 17)
  • <Possible follow-ups>
  • RE: Snort outputing like tcpdump Gonzalez, Albert (Jan 17)
  • RE: Snort outputing like tcpdump Christopher Lyon (Jan 17)
    • RE: Snort outputing like tcpdump Erek Adams (Jan 17)
    • IM Logging - How to? Angel Gabriel (Jan 17)
      • RE: IM Logging - How to? Kevin Pietersma (Jan 17)
• Which GIDS to use? Snort-inlie, snortsam or hogwash? Jason Silverglate (Jan 16)
  • RE: Which GIDS to use? Snort-inlie, snortsam or hogwash? Alberto Gonzalez (Jan 16)
• HI ANTONIO GUTIERREZ (Jan 17)
  • Re: HI twig les (Jan 17)
• Snort 1.9 "within:" option broken? Carl Gibbons (Jan 17)
• Memory leak in 1.9.0? David Wilkinson (Jan 17)
  • Re: Memory leak in 1.9.0? Bennett Todd (Jan 17)
  • <Possible follow-ups>
  • RE: Memory leak in 1.9.0? L. Christopher Luther (Jan 17)
  • RE: Memory leak in 1.9.0? L. Christopher Luther (Jan 17)
• snort & 8e6 Content Filter Ricardo Londoño (Jan 17)
• Win2k sensor on a linux db Saul Bosquez (Jan 17)
  • Re: Win2k sensor on a linux db Joseph Gresham (Jan 17)
  • <Possible follow-ups>
  • Win2k sensor on a linux db Saul Bosquez (Jan 18)
  • Re: Re: Win2k sensor on a linux db larc (Jan 20)
• RE: IM Logging - How to? Matt Yackley (Jan 17)
  • RE: IM Logging - How to? Mike Shaw (Jan 17)
    • Re: IM Logging - How to? Ricardo Londoño (Jan 17)
  • <Possible follow-ups>
  • RE: IM Logging - How to? Gonzalez, Albert (Jan 17)
  • RE: IM Logging - How to? Khera, Manish (US - New York) (Jan 17)
• Help with SnortCenter Matt T. Galvin (Jan 17)
  • Re: Help with SnortCenter Erick Mechler (Jan 17)
  • <Possible follow-ups>
  • RE: Help with SnortCenter Counselman, Chris Contractor/Sverdrup (Jan 18)
    • Re: Help with SnortCenter Erick Mechler (Jan 17)
  • RE: Help with SnortCenter Morgan R. Elmore (Jan 20)
• Snort 1.9 --with-postgresql Demetri Mouratis (Jan 17)
  • <Possible follow-ups>
  • Snort 1.9 --with-postgresql Michael J. McCasland (Jan 18)
• [snort] (snort_decoder) Unknown Datagram decoding problem! Petreski, Samuel (Jan 17)
  • Re: [snort] (snort_decoder) Unknown Datagram decoding problem! Erick Mechler (Jan 17)
• corrupted packet traces? Sheahan, Paul (PCLN-NW) (Jan 17)
• Spade version 030117.1 available James Hoagland (Jan 17)
  • <Possible follow-ups>
  • Spade version 030117.1 available James Hoagland (Jan 21)
• Flex Resp and Libnet Routing Christopher Lyon (Jan 17)
  • Re: Flex Resp and Libnet Routing Jeff Nathan (Feb 11)
• acid console issue Saúl Bósquez (Jan 17)
  • RE: acid console issue Dane Howard (Jan 19)
    • RE: acid console issue Michael Steele (Jan 20)
  • <Possible follow-ups>
  • RE: acid console issue Anthony Liberty (Jan 20)
• snort_stat.pl Sheahan, Paul (PCLN-NW) (Jan 17)
  • <Possible follow-ups>
  • RE: snort_stat.pl Sheahan, Paul (PCLN-NW) (Jan 20)
• Classifications Peter VE (Jan 19)
  • Re: Classifications Peter VE (Jan 20)
  • <Possible follow-ups>
  • Classifications Peter VE (Jan 22)
    • Re: Classifications Chris Green (Jan 22)
    • Re: Classifications Kenneth G. Arnold (Jan 22)
      • Re: Classifications Peter VE (Jan 22)
• RE: Snort outputting like tcpdump Christopher Lyon (Jan 19)
  • RE: Snort outputting like tcpdump Erek Adams (Jan 19)
• Solaris Snort Users Erek Adams (Jan 19)
• ACID time stamp doesnt seem right. Rigoberto De la Portilla (Jan 19)
• feedback regd snort books vicky Mair (Jan 19)
• Re: Which GIDS to use? Snort-inlie, snortsam or hogwash? Frank Knobbe (Jan 19)
• Snort in a H.A. environment. Federico Lombardo (Jan 20)
  • Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)
  • Re: Snort in a H.A. environment. Glenn Forbes Fleming Larratt (Jan 20)
  • Re: Snort in a H.A. environment. Erek Adams (Jan 20)
  • Re: Snort in a H.A. environment. Bennett Todd (Jan 21)
  • <Possible follow-ups>
  • Re: Snort in a H.A. environment. Federico Lombardo (Jan 20)
    • Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)
  • Re: Snort in a H.A. environment. Federico Lombardo (Jan 20)
    • Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)
• Regarding Snort Inline tanmay ganacharya (Jan 20)
  • Re: Regarding Snort Inline Erek Adams (Jan 20)
• loading snort 1.9.0 jbaird (Jan 20)
  • Re: loading snort 1.9.0 Erek Adams (Jan 20)
  • <Possible follow-ups>
  • RE: loading snort 1.9.0 SecurityAdmin (Jan 20)
    • RE: loading snort 1.9.0 Erek Adams (Jan 20)
• Error in acid on Win2K server with IIS and MySQL Patrick S. Harper - CISSP (Jan 20)
  • Re: Error in acid on Win2K server with IIS and MySQL Jens Krabbenhoeft (Jan 20)
  • <Possible follow-ups>
  • Error in acid on Win2K server with IIS and MySQL Patrick S. Harper (Jan 21)
    • RE: Error in acid on Win2K server with IIS and MySQL Michael Steele (Jan 21)
      • RE: Error in acid on Win2K server with IIS and MySQL Tobias Rice (Jan 21)
      • RE: Error in acid on Win2K server with IIS and MySQL Michael Steele (Jan 21)
• RE: Error in acid on Win2K server with IIS and MySQ L Hicks, John (Jan 20)
  • RE: Error in acid on Win2K server with IIS and MySQL Patrick S. Harper - CISSP (Jan 20)
• Acid won't send e-mail Federico Lombardo (Jan 20)
  • Re: Acid won't send e-mail Jon (Jan 20)
• LogSurfer and Snort Steve Knoch (Jan 20)
• Daily Snort Report is empty, but snort logs and MySQL are full? Aaron The Young (Jan 20)
• MySQL/ACID TimeStamps ???? Tim Rodriguez (Jan 20)
• Test Michael (Jan 21)
  • Re: Test twig les (Jan 21)
  • <Possible follow-ups>
  • test svezi (Jan 23)
  • test svezi (Jan 23)
• Flexible Response: Heads up Bob McDowell (Jan 21)
  • RE: Flexible Response: Heads up Abe L. Getchell (Jan 21)
• ACID-0.9.6b23 Slighter, Tim (Jan 21)
• New Snort-Users Searchable Archive Scott Shinberg (Jan 21)
• content options in Snort rule Sonia K. Tsui (Jan 21)
  • Re: content options in Snort rule Chris Green (Jan 21)
• Estimated Snort 2.0 GA ? KD Rajkumar (Jan 21)
  • Re: Estimated Snort 2.0 GA ? Chris Green (Jan 21)
• Help Guru Cumarasamy (Jan 21)
  • Re: Help Matt Kettler (Jan 21)
  • <Possible follow-ups>
  • RE: Help Semerjian, Ohanes (Jan 21)
    • RE: Help twig les (Jan 21)
    • RE: Help Erek Adams (Jan 21)
  • HELP tanis () knology net (Jan 29)
    • Re: HELP Erick Mechler (Jan 29)
  • Re: HELP larc (Jan 29)
  • RE: HELP Ben Swaby (Jan 29)
  • Help Keith Weinberger (Feb 17)
    • Re: Help Adam Shephard (Feb 17)
• General Snort Help! Lorraine Cannavale (Jan 21)
  • RE: General Snort Help! Patrice Boulanger (Jan 21)
  • Re: General Snort Help! Erek Adams (Jan 21)
    • RE: General Snort Help! Good Book List Gregory W. Ratcliff (Jan 21)
      • Re: General Snort Help! Good Book List Edin Dizdarevic (Jan 22)
    • snort.org recommended reading? (was Re: General Snort Help!) twig les (Jan 21)
      • Re: snort.org recommended reading? (was Re: General Snort Help!) Steve Jones (Jan 22)
    • Re: General Snort Help! Saad Kadhi (Jan 21)
  • <Possible follow-ups>
  • RE: General Snort Help! Sheahan, Paul (PCLN-NW) (Jan 21)
  • RE: General Snort Help! Yaakov Yehudi (Jan 21)
  • Re: General Snort Help! larc (Jan 22)
• Attention Windows Users : Install Complete IDS Solution on Windows - Major Update! Michael Steele (Jan 21)
  • Re: Attention Windows Users : Install Complete IDS Solution on Windows - Major Update! Michael Davis (Jan 21)
• Re: [Spade-users] snort 1.9 freebsd port with Spade? James Hoagland (Jan 21)
• need speaker for BayArea Snorters in San Jose Todd Holloway (Jan 21)
• html mail jcrowe (Jan 21)
  • Re: html mail Matt Kettler (Jan 21)
• Portscans in enterprise environment Bob Dehnhardt (Jan 21)
  • Re: Portscans in enterprise environment Erek Adams (Jan 21)
• Snort 1.9.0 b209 for Windows NT Server / 2000 / XP... i gotz an error. Rigoberto De la Portilla (Jan 21)
  • RE: Snort 1.9.0 b209 for Windows NT Server / 2000 / XP... i gotz an error. Michael Steele (Jan 21)
• Can ACID console and snort sensor run on same box? Gordon Cunningham (Jan 21)
  • RE: Can ACID console and snort sensor run on same box? Michael Steele (Jan 21)
  • <Possible follow-ups>
  • RE: Can ACID console and snort sensor run on same box? Gordon Cunningham (Jan 22)
• snortrules related vicky Mair (Jan 21)
  • Re: snortrules related Erek Adams (Jan 21)
    • RE: snortrules related vicky Mair (Jan 21)
• FlexResp (Not working?) Carlos Kumbak (Jan 21)
• ACID -- no alerts being detected but.... vicky Mair (Jan 21)
• Helpme Please hi (Jan 22)
  • <Possible follow-ups>
  • RE: Helpme Please Hicks, John (Jan 24)
• snort/acid and mysql.sock revisited raft na (Jan 22)
  • Re: snort/acid and mysql.sock revisited Scott Fringer (Jan 22)
• Snort Rules for LOKI Daemon kevin reynolds (Jan 22)
  • Re: Snort Rules for LOKI Daemon Matt Kettler (Jan 22)
    • Re: Snort Rules for LOKI Daemon twig les (Jan 22)
    • Re: Snort Rules for LOKI Daemon Andreas Östling (Jan 23)
  • <Possible follow-ups>
  • Re: Snort Rules for LOKI Daemon kevin reynolds (Jan 23)
• CodeRed infection / Possible bug in 1.9 DB calls? bthaler (Jan 22)
• Re: snort.org recommended reading? (was Re: General Snort Help!) twig les (Jan 22)
• P2P Gnutella GET question again acid (Jan 22)
• For anyone looking for employment... Michael B. Easter (Jan 22)
• Re: [Snort-sigs] Snort on FTP server Matt Kettler (Jan 22)
• Problems with local host .. David Alonso De La Vega Tapage (Jan 22)
  • Re: Problems with local host .. Matt Kettler (Jan 22)
  • Re: Problems with local host .. Eli Stair (Jan 22)
  • Re: Problems with local host .. Erick Mechler (Jan 22)
• $HOME_NET question Ralph Churchill (Jan 22)
  • Re: $HOME_NET question Matt Kettler (Jan 22)
  • Re: $HOME_NET question Erek Adams (Jan 22)
  • Re: $HOME_NET question twig les (Jan 22)
  • RE: $HOME_NET question Michael Steele (Jan 22)
• Attention ALL Windows Users : Install Complete IDS Solution on Windows - Major Update v2! Michael Steele (Jan 22)
• Hogwash Compile JOHN R BLACKMORE (Jan 22)
• mysql_error Darrin Powell (Jan 22)
• Error after trying to configure with mysql Souza, Chris (Jan 22)
  • <Possible follow-ups>
  • RE: Error after trying to configure with mysql Gonzalez, Albert (Jan 22)
• Rule header variables Jim Schwin (Jan 22)
  • Re: Rule header variables Erick Mechler (Jan 22)
  • <Possible follow-ups>
  • Re: Rule header variables Matt Kettler (Jan 22)
    • Re: Rule header variables Erick Mechler (Jan 22)
      • Re: Rule header variables Matt Kettler (Jan 22)
      • HTML E-Mail Rule Mike Koponick (Jan 22)
      • Re: HTML E-Mail Rule Matt Kettler (Jan 22)
      • RE: HTML E-Mail Rule Gordon Cunningham (Jan 22)
• Snort Win32 Process Stalling Steven Williams (Jan 22)
  • RE: Snort Win32 Process Stalling Michael Steele (Jan 22)
  • <Possible follow-ups>
  • Re: Snort Win32 Process Stalling Bryce Stenberg (Jan 23)
    • Re: Snort Win32 Process Stalling Erek Adams (Jan 24)
• Snort Reporting and Capture Michael (Jan 23)
  • <Possible follow-ups>
  • Re: Snort Reporting and Capture larc (Jan 23)
• SRI Emerlad Project/ACID-XML Status Update S. (Jan 23)
• Pass rule not working... -=Quequero=- (Jan 23)
  • Re: Pass rule not working... Erek Adams (Jan 23)
    • Re: Pass rule not working... Matt Kettler (Jan 23)
      • Re: Pass rule not working... Erek Adams (Jan 24)
• Archive Database in ACID Counselman, Chris Contractor/Sverdrup (Jan 23)
  • Re: Archive Database in ACID Lawrence Reed (Jan 23)
  • Re: Archive Database in ACID Herve Debar (Jan 24)
• OT- Can some confirm a TOS bit setting for me. David E. Gianndrea (Jan 23)
  • Re: OT- Can some confirm a TOS bit setting for me. Ashley Thomas (Jan 23)
    • Re: OT- Can some confirm a TOS bit setting for me. David E. Gianndrea (Jan 23)
  • Re: OT- Can some confirm a TOS bit setting for me. Matt Kettler (Jan 23)
    • Re: OT- Can some confirm a TOS bit setting for me. David E. Gianndrea (Jan 23)
• Advice tanis () knology net (Jan 23)
  • Re: Advice Erek Adams (Jan 24)
  • <Possible follow-ups>
  • Advice EXT-fuller, christopher W (Jan 24)
• Reset Counters Bob McDowell (Jan 23)
  • Re: Reset Counters Matt Kettler (Jan 23)
  • Re: Reset Counters Erek Adams (Jan 24)
• logging alerts to syslog Rob Burris (Jan 23)
  • Re: logging alerts to syslog Erek Adams (Jan 24)
• Now with ACID .. David Alonso De La Vega Tapage (Jan 23)
  • <Possible follow-ups>
  • RE: Now with ACID .. Hicks, John (Jan 24)
• SNMP bug for SNORT v 1.9 ??? Doan Nguyen (Jan 23)
  • Re: SNMP bug for SNORT v 1.9 ??? twig les (Jan 23)
    • Re: SNMP bug for SNORT v 1.9 ??? Doan Nguyen (Jan 24)
      • Re: SNMP bug for SNORT v 1.9 ??? Erek Adams (Jan 24)
      • Re: SNMP bug for SNORT v 1.9 ??? twig les (Jan 24)
• Anyone written a CGI/PHP frontend to swatch? Jason Haar (Jan 23)
• Double-Free Bug in CVS Server vicky Mair (Jan 23)
• How to test snort and acid - help Scott (Jan 24)
  • Re: How to test snort and acid - help Erek Adams (Jan 24)
  • RE: How to test snort and acid - help Paul D. Shaffer (Jan 24)
    • a *nix based traffic generator / receiver package. David E. Gianndrea (Jan 24)
      • Re: a *nix based traffic generator / receiver package. Erek Adams (Jan 24)
      • Re: a *nix based traffic generator / receiver package. twig les (Jan 24)
      • Re: a *nix based traffic generator / receiver package. Paul Poh (Jan 24)
  • <Possible follow-ups>
  • RE: How to test snort and acid - help Keith Pachulski (Jan 24)
• Anyone run ACIS if so - how do I email alerts Scott (Jan 24)
  • Re: Anyone run ACIS if so - how do I email alerts Erek Adams (Jan 24)
  • <Possible follow-ups>
  • RE: Anyone run ACIS if so - how do I email alerts Scott, Joshua (Jan 28)
• ACID cache problems Counselman, Chris Contractor/Sverdrup (Jan 24)
• help with "disable_decode_alerts" in the config file AppleAnnie331 (Jan 24)
  • Re: help with "disable_decode_alerts" in the config file Erek Adams (Jan 24)
• Unknown idmef plugin error mkanignt (Jan 24)
  • Re: Unknown idmef plugin error Joe McAlerney (Jan 24)
• Sensor Message Abdul Rahman Bin Abu Bakar NCS (Jan 24)
  • Re: Sensor Message Erek Adams (Jan 24)
  • <Possible follow-ups>
  • Re: Sensor Message larc (Jan 24)
• New Snort 2.0 Detection Papers on snort.org Daniel Roelker (Jan 24)
• RE: snort.org recommended reading? (was Re: General Snort Help!) Hicks, John (Jan 24)
• RE: help with "disable_decode_alerts" in the config file Slighter, Tim (Jan 24)
• RE: a *nix based traffic generator / receiver packa ge. Hicks, John (Jan 24)
• AIM Sniffing Erek Adams (Jan 24)
• ACID Error ?? Database ERROR:Database ERROR:The statement has been terminated Dhruv Chandra (Jan 24)
• Snortsam as daemon Horta, Benny (Jan 24)
  • Re: Snortsam as daemon Frank Knobbe (Jan 25)
  • <Possible follow-ups>
  • RE: Snortsam as daemon Horta, Benny (Jan 27)
    • Re: Snortsam as daemon Bob McClure Jr (Jan 27)
    • RE: Snortsam as daemon Frank Knobbe (Jan 27)
• Signature for Netbios login attempts Horta, Benny (Jan 24)
• Snort, SNMP, and Redhat 8.0 Friesz, Ross (Jan 24)
• How many IP addresses can a variable hold? spy guy (Jan 24)
  • Re: How many IP addresses can a variable hold? Erek Adams (Jan 24)
  • Re: How many IP addresses can a variable hold? Matt Kettler (Jan 24)
• Snort create_mysql error Cilin (Jan 24)
• ALERT: New worm { port 1434} -- MS SQL related Vicky Mair (Jan 25)
  • Re: ALERT: New worm { port 1434} -- MS SQL related Markus Weber (Jan 25)
• UDP 1434 jai (Jan 25)
  • Re: UDP 1434 -=Quequero=- (Jan 25)
  • Message not available
    • Re: UDP 1434 jai (Jan 25)
      • Re: UDP 1434 - worm spoofing or not? Glenn Forbes Fleming Larratt (Jan 25)
      • Re: UDP 1434 - worm spoofing or not? Gianluca Marcari (Jan 25)
      • Re: UDP 1434 - worm spoofing or not? kris carlier (Jan 27)
  • <Possible follow-ups>
  • RE: UDP 1434 Steven Rudolph (Jan 25)
  • Fw: UDP 1434 jai (Jan 25)
  • RE: UDP 1434 Counselman, Chris Contractor/Sverdrup (Jan 27)
• FW: Currently MS UDP/1434 attacks Rich Adamson (Jan 25)
• Spade version 030125.1 available! James Hoagland (Jan 25)
• MS-SQL Worm Signature -=Quequero=- (Jan 25)
  • RE: MS-SQL Worm Signature Frank Reid (Jan 25)
    • RE: MS-SQL Worm Signature Jim Laverty (Jan 25)
      • RE: MS-SQL Worm Signature Rich Adamson (Jan 25)
    • RE: MS-SQL Worm Signature Rich Adamson (Jan 25)
      • RE: MS-SQL Worm Signature Frank Reid (Jan 25)
      • Re: MS-SQL Worm Signature Martin Roesch (Jan 25)
  • RE: MS-SQL Worm Signature Frank Reid (Jan 27)
    • Re: MS-SQL Worm Signature Erick Mechler (Jan 27)
    • RE: MS-SQL Worm Signature Gordon Cunningham (Jan 27)
    • Re: MS-SQL Worm Signature Martin Roesch (Jan 27)
  • <Possible follow-ups>
  • RE: MS-SQL Worm Signature Frank Reid (Jan 25)
  • Re: MS-SQL Worm Signature -=Quequero=- (Jan 25)
  • RE: MS-SQL Worm Signature O'Flynn, Derek (Jan 27)
• anyone ever post a fix to the timestamp issue? Rigoberto De la Portilla (Jan 25)
• MS SQL activity Rich Adamson (Jan 25)
• no more "unicode attack detected" alerts Gary Merrick (Jan 25)
• Winpcap and cheap NICs... Tobias Rice (Jan 25)
  • <Possible follow-ups>
  • RE: Winpcap and cheap NICs... Tobias Rice (Jan 25)
    • RE: Winpcap and cheap NICs... Tobias Rice (Jan 25)
• SQL Slammer worm rule available at snort.org Martin Roesch (Jan 25)
• catching traffic spikes Richard Chmura (Jan 25)
  • Re: catching traffic spikes Kenneth G. Arnold (Jan 26)
  • <Possible follow-ups>
  • RE: catching traffic spikes Fraser Hugh (Jan 27)
    • Re: catching traffic spikes W. Salet (Jan 27)
      • Re: catching traffic spikes Kenneth G. Arnold (Jan 27)
      • Re: catching traffic spikes twig les (Jan 27)
      • Re: catching traffic spikes James-lists (Jan 27)
  • RE: catching traffic spikes O'Flynn, Derek (Jan 27)
• Thoughts on Snort-flex rule? Rich Adamson (Jan 26)
  • Re: Thoughts on Snort-flex rule? Erek Adams (Jan 26)
    • SNMP - SNORT Mike Koponick (Jan 26)
      • RH 8.0 & SNMP Mike Koponick (Jan 26)
      • Rule help Gordon Cunningham (Jan 27)
      • Re: Rule help Erick Mechler (Jan 27)
      • RE: Rule help Gordon Cunningham (Jan 27)
      • Re: Rule help Erek Adams (Jan 27)
• Authenticating acid with Apache... Tobias Rice (Jan 26)
  • Re: Authenticating acid with Apache... Jason Haar (Jan 26)
    • RE: Authenticating acid with Apache... Frank Reid (Jan 26)
  • <Possible follow-ups>
  • Authenticating acid with Apache... Tobias Rice (Jan 27)
• configure php ext for apache ( windows) Ray (Jan 26)
• Database clean up Sasa Jusic (Jan 27)
• Howto post a message? W. Salet (Jan 27)
  • Re: Howto post a message? Matt Kettler (Jan 27)
• Anti Virus on Linux? Bob McDowell (Jan 27)
  • Re: Anti Virus on Linux? Bob McClure Jr (Jan 27)
  • Re: Anti Virus on Linux? Matt Kettler (Jan 27)
  • <Possible follow-ups>
  • RE: Anti Virus on Linux? Darden, Patrick S. (Jan 27)
    • Re: Anti Virus on Linux? Michael Anderson (Jan 29)
  • RE: Anti Virus on Linux? Slighter, Tim (Jan 27)
  • RE: Anti Virus on Linux? Schmehl, Paul L (Jan 27)
  • RE: Anti Virus on Linux? Sean T. Ballard (Jan 27)
    • Re: Anti Virus on Linux? Paul Greene (Jan 27)
      • Re: Anti Virus on Linux? Bob McClure Jr (Jan 27)
      • Re: Anti Virus on Linux? twig les (Jan 27)
      • Re: [OT] Anti Virus on Linux? Matt Kettler (Jan 27)
    • RE: Anti Virus on Linux? Gordon Cunningham (Jan 27)
• ACID and SnortCenter tanis () knology net (Jan 27)
• 2 instance of snort on windows Boisvert, Mario (Jan 27)
  • <Possible follow-ups>
  • RE: 2 instance of snort on windows Michael Steele (Jan 29)
• German Book covering Snort Ralf Spenneberg (Jan 27)
• Fw: snort on a alpha James-lists (Jan 27)
  • Re: Fw: snort on a alpha santiago (Jan 28)
  • <Possible follow-ups>
  • RE: Fw: snort on a alpha Ricardo, Gerson (Jan 27)
  • Fw: snort on a alpha james (Jan 27)
    • Re: Fw: snort on a alpha twig les (Jan 27)
    • RE: Fw: snort on a alpha Chris N (Jan 28)
• Snort 1.9.0 "Payload mixup". Nils Ulltveit-Moe (Jan 27)
  • Re: Snort 1.9.0 "Payload mixup". Chris Green (Jan 27)
• MS-SQL Slammer Signature soc.sql (Jan 27)
• Predefined graph in ACID Stefan Asp (Jan 27)
• Question on FTP rules Chris Garringer (Jan 27)
• question on obfuscating addresses James R. Hendrick (Jan 27)
  • Re: question on obfuscating addresses Matt Kettler (Jan 27)
  • <Possible follow-ups>
  • RE: question on obfuscating addresses James R. Hendrick (Jan 31)
• Newbie Install on OpenBSD Question Siobahn Hotaling (Jan 27)
  • Re: Newbie Install on OpenBSD Question twig les (Jan 27)
  • <Possible follow-ups>
  • Newbie Install on OpenBSD Question Siobahn Hotaling (Jan 28)
• sending alerts by email / active response Win2K system [RMC-J7FLJI4] Romulo M. Cholewa (Jan 27)
  • RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Mike Koponick (Jan 28)
  • RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Michael Steele (Jan 28)
  • <Possible follow-ups>
  • Re: sending alerts by email / active response Win2K system [RMC-J7FLJI4] ICB1981 (Jan 28)
• Re:Newbie install on OpenBSD 3.2 S. (Jan 27)
  • <Possible follow-ups>
  • Re:Newbie install on OpenBSD 3.2 Jobs (Jan 28)
• Windows 2K Problem Lok Ying Chung (Jan 27)
  • Re: Windows 2K Problem Ueli Kistler (Jan 28)
• Snort-1.9 on OBSD-3.2 bthaler (Jan 28)
  • <Possible follow-ups>
  • RE: Snort-1.9 on OBSD-3.2 Gonzalez, Albert (Jan 28)
    • Re: Snort-1.9 on OBSD-3.2 bthaler (Jan 28)
      • Re: Snort-1.9 on OBSD-3.2 Erek Adams (Jan 28)
      • Re: Snort-1.9 on OBSD-3.2 bthaler (Jan 28)
  • RE: Snort-1.9 on OBSD-3.2 Eric Bonner (Jan 28)
• SQL Slapper Worm rule for 1.8.7 Dhruv Chandra (Jan 28)
  • <Possible follow-ups>
  • RE: SQL Slapper Worm rule for 1.8.7 L. Christopher Luther (Jan 28)
• Does any one know how to archive Mysql database? ANTONIO GUTIERREZ (Jan 28)
  • Re: Does any one know how to archive Mysql database? Dragos Ruiu (Jan 28)
  • <Possible follow-ups>
  • RE: Does any one know how to archive Mysql database? Deyoung, Richard E. - Raleigh, NC (Jan 28)
• RE: Sensor Message [snort-users-admin@lists.sourcef orge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-use rs' in Pass-Through List] Abdul Rahman Bin Abu Bakar NCS (Jan 28)
• RE: Does any one know how to archive Mysql databas e? Slighter, Tim (Jan 28)
  • RE: Does any one know how to archive Mysql database? Saša Jušic (Jan 29)
    • RE: Does any one know how to archive Mysql database? mono toy (Jan 29)
    • RE: Does any one know how to archive Mysql database? Kenneth G. Arnold (Jan 29)
      • Re: Does any one know how to archive Mysql database? Erick Mechler (Jan 29)
• spp_portscan2 and UDP Kenton Smith (Jan 28)
  • <Possible follow-ups>
  • RE: spp_portscan2 and UDP Kenton Smith (Jan 28)
  • RE: spp_portscan2 and UDP Miller, Eoin (Jan 28)
    • RE: spp_portscan2 and UDP Kenton Smith (Jan 28)
  • Re: spp_portscan2 and UDP Kenton Smith (Jan 28)
• RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] L. Christopher Luther (Jan 28)
  • RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Michael Steele (Jan 28)
  • <Possible follow-ups>
  • RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] L. Christopher Luther (Jan 28)
  • RE: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Semerjian, Ohanes (Jan 28)
• multiple instances of snort Schroeder, Eric (Jan 28)
  • RE: multiple instances of snort Chris N (Jan 28)
  • <Possible follow-ups>
  • RE: multiple instances of snort Kreimendahl, Chad J (Jan 28)
• RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Romulo M. Cholewa (Jan 28)
  • Re: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Lok Ying Chung (Jan 28)
  • <Possible follow-ups>
  • RE: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Michael Steele (Jan 28)
    • RE: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Erek Adams (Jan 28)
• YOONG Choen Hin/Engr - Sys/iSTT/ST Group is out of the office. yoong . choen . hin (Jan 28)
  • <Possible follow-ups>
  • YOONG Choen Hin/Engr - Sys/iSTT/ST Group is out of the office. yoong . choen . hin (Jan 28)
  • YOONG Choen Hin/Engr - Sys/iSTT/ST Group is out of the office. yoong . choen . hin (Jan 29)
• Database connection "Established" or Not? Chris N (Jan 28)
  • Re: Database connection "Established" or Not? Erek Adams (Jan 28)
  • <Possible follow-ups>
  • RE: Database connection "Established" or Not? Kreimendahl, Chad J (Jan 28)
• ACID 0.9.6b23 Search page issue McGuire, Dennis (Jan 28)
  • Re: ACID 0.9.6b23 Search page issue Erick Mechler (Jan 28)
  • <Possible follow-ups>
  • Re: ACID 0.9.6b23 Search page issue JASON_VANKEUREN (Jan 28)
  • RE: ACID 0.9.6b23 Search page issue McGuire, Dennis (Jan 28)
    • Re: ACID 0.9.6b23 Search page issue Erick Mechler (Jan 28)
  • RE: ACID 0.9.6b23 Search page issue McGuire, Dennis (Jan 28)
  • RE: ACID 0.9.6b23 Search page issue McGuire, Dennis (Jan 29)
  • Re: Re: ACID 0.9.6b23 Search page issue Scheidell (Jan 29)
    • Re: Re: ACID 0.9.6b23 Search page issue Robby Desmond (Jan 29)
  • Re: Re: ACID 0.9.6b23 Search page issue JASON_VANKEUREN (Jan 29)
  • RE: ACID 0.9.6b23 Search page issue McGuire, Dennis (Jan 30)
  • Re: ACID 0.9.6b23 Search page issue JASON_VANKEUREN (Jan 30)
  • Re: ACID 0.9.6b23 Search page issue JASON_VANKEUREN (Jan 30)
• RE: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Bradley, Kenneth TSgt - Fis 33 (Jan 28)
  • RE: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] Michael Steele (Jan 28)
• 1.9.0 upgrade Jim Williams (Jan 28)
  • Re: 1.9.0 upgrade twig les (Jan 28)
  • Re: 1.9.0 upgrade Erek Adams (Jan 28)
• FWD: Slapper/Sapphire Vulnerable non-Microsoft products (fwd) Erek Adams (Jan 28)
• ICMP Destination ... (Port Unreachable) Help Brian Blake (Jan 28)
  • Re: ICMP Destination ... (Port Unreachable) Help Erek Adams (Jan 28)
  • <Possible follow-ups>
  • RE: ICMP Destination ... (Port Unreachable) Help Semerjian, Ohanes (Feb 02)
• RE: i have verison 3.23 of NT, and that command does not work. anyother ideas. Deyoung, Richard E. - Raleigh, NC (Jan 28)
• RES: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] [Snort-users] Romulo M. Cholewa (Jan 28)
  • Re: RES: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] [Snort-users] Erek Adams (Jan 28)
  • <Possible follow-ups>
  • RES: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] [Snort-users] Romulo M. Cholewa (Jan 28)
    • Re: RES: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] [Snort-users] Lok Ying Chung (Jan 28)
• REGLAS DE SNORT Mario Alberto Soto Cordones (Jan 28)
  • Re: REGLAS DE SNORT twig les (Jan 29)
  • <Possible follow-ups>
  • REGLAS DE SNORT Mario Alberto Soto Cordones (Jan 28)
  • RE: REGLAS DE SNORT Petriz, Pablo (Jan 29)
• RES: RES: RES: sending alerts by email / active response Win2K system [RMC-J7FLJI4] [Snort-users] Romulo M. Cholewa (Jan 28)
• Snort and ISA2000 Steven Williams (Jan 28)
• 1434 UDP SLAMMER 이 준 (Jan 29)
  • <Possible follow-ups>
  • Re: 1434 UDP SLAMMER Vadim Pushkin (Jan 30)
    • Re: 1434 UDP SLAMMER Michael Anderson (Jan 31)
• how to integrate ucd-snmp with snort (both win32 ports) rajat khatri (Jan 29)
• More help for a newbie tanis () knology net (Jan 29)
• AW: More help for a newbie Poppi, Sandro (Jan 29)
• Re: Snort-users digest, Vol 1 #2729 - 10 msgs Marc Quibell (Jan 29)
  • Re: Snort-users digest, Vol 1 #2729 - 10 msgs Stein B. Sylvarnes (Jan 29)
  • <Possible follow-ups>
  • RE: Re: Snort-users digest, Vol 1 #2729 - 10 msgs Schmehl, Paul L (Jan 29)
• ACID: back and event list problems Michael Anderson (Jan 29)
• Alert Leak? joseph . warner (Jan 29)
• Easy web-server protection? velbloud (Jan 29)
  • Re: Easy web-server protection? twig les (Jan 29)
  • Re: Easy web-server protection? Javier Liendo (Jan 29)
  • <Possible follow-ups>
  • Re:Easy web-server protection? Shaiful (Jan 29)
    • Re: Re:Easy web-server protection? Eduardo Kita (Jan 30)
  • RE: Re:Easy web-server protection? Bob McDowell (Jan 30)
• rule+snort updates? Rigoberto De la Portilla (Jan 29)
  • Re: rule+snort updates? Eduardo Kita (Jan 30)
    • Re: rule+snort updates? twig les (Jan 30)
      • Re: rule+snort updates? Eduardo Kita (Jan 30)
  • <Possible follow-ups>
  • Re: Re: rule+snort updates? larc (Jan 30)
  • Re: rule+snort updates? Rigoberto De la Portilla (Jan 30)
    • Re: rule+snort updates? twig les (Jan 30)
    • Re: rule+snort updates? Eduardo Kita (Jan 30)
  • RE: rule+snort updates? Gonzalez, Albert (Jan 30)
• Acid Question... Saguturu, Suresh (Jan 29)
  • RE: Acid Question... Chris N (Jan 29)
• Barnyard, sid-msg.map, gen-msg.map Andy Dales (Jan 29)
  • Re: Barnyard, sid-msg.map, gen-msg.map Andrew R. Baker (Jan 29)
• Re: OpenBSD 3.2 with multiple logging methods dreamwvr () dreamwvr com (Jan 29)
• Can't make second snort sensor talk to my MySQL DB. Aaron The Young (Jan 29)
• Script to delete old alerts from MySQL db? Benjamin Feen (Jan 29)
• Logging to file and to event log [RMC-7D9HBQ4] Romulo M. Cholewa (Jan 29)
• FW: sending alerts by email Mark Scott (Jan 29)
• Snort upgrades in vendor-provided packages/installs (e.g. mdk) stefmit (Jan 30)
  • Re: Snort upgrades in vendor-provided packages/installs (e.g. mdk) Erek Adams (Jan 30)
• resp in rule JR (Jan 30)
  • <Possible follow-ups>
  • RE: resp in rule Gonzalez, Albert (Jan 30)
  • RE: resp in rule Slighter, Tim (Jan 30)
  • RE: resp in rule Bob McDowell (Jan 30)
• single IP icmp alert rule error ids (Jan 30)
  • Re: single IP icmp alert rule error Erick Mechler (Jan 30)
• RES: rule+snort updates? [Snort-users] Romulo M. Cholewa (Jan 30)
  • <Possible follow-ups>
  • RES: rule+snort updates? [Snort-users] Romulo M. Cholewa (Jan 30)
• Snortcenter Error sh: curl: not found kristina . zelko (Jan 30)
  • Re: Snortcenter Error sh: curl: not found Erek Adams (Jan 30)
  • <Possible follow-ups>
  • Re: Snortcenter Error sh: curl: not found kristina . zelko (Jan 31)
    • Portscans noted Gordon Cunningham (Jan 31)
      • Re: Portscans noted Scott Fringer (Jan 31)
• Antivirus on Linux gbarreiro (Jan 30)
  • Re: [OT] Antivirus on Linux Matt Kettler (Jan 30)
• Tap question Mike Shaw (Jan 30)
  • Re: Tap question Erek Adams (Jan 30)
  • Re: Tap question Erek Adams (Jan 30)
• Pass Rules Questions Demetri Mouratis (Jan 30)
  • <Possible follow-ups>
  • Re: Pass Rules Questions Matt Kettler (Jan 30)
    • Re: Pass Rules Questions Demetri Mouratis (Jan 30)
• New to the lists and snort Snow Jacob C KPWA (Jan 30)
  • <Possible follow-ups>
  • RE: New to the lists and snort Ricardo, Gerson (Jan 30)
• portscans from 255.255.255.255? twig les (Jan 30)
  • Re: portscans from 255.255.255.255? Sam Evans (Jan 30)
  • Re: portscans from 255.255.255.255? Gary Flynn (Jan 30)
  • Re: portscans from 255.255.255.255? Matt Kettler (Jan 30)
  • <Possible follow-ups>
  • RE: portscans from 255.255.255.255? larosa, vjay (Jan 30)
• [ Snort-users] Deyoung, Richard E. - Raleigh, NC (Jan 30)
• decoding captured packets Jeremy Bartels (Jan 30)
• A Couple of Questions Lars Borland (Jan 30)
  • <Possible follow-ups>
  • RE: A Couple of Questions Morgan R. Elmore (Jan 30)
  • RE: A Couple of Questions Lars Borland (Jan 31)
    • Re: A Couple of Questions Eli Stair (Jan 31)
    • RE: A Couple of Questions twig les (Jan 31)
  • RE: A Couple of Questions Lars Borland (Jan 31)
• sun4u-smp and snort John Wall (Jan 30)
• Handling of a 1 or 2 GB pipe? Travis S. (Jan 30)
  • Re: Handling of a 1 or 2 GB pipe? twig les (Jan 30)
  • Re: Handling of a 1 or 2 GB pipe? Edin Dizdarevic (Jan 31)
    • Re: Handling of a 1 or 2 GB pipe? Yaakov Yehudi (Feb 04)
  • Re: Handling of a 1 or 2 GB pipe? Erek Adams (Jan 31)
  • Re: Handling of a 1 or 2 GB pipe? Bennett Todd (Feb 01)
  • <Possible follow-ups>
  • RE: Handling of a 1 or 2 GB pipe? Scott, Joshua (Jan 30)
  • RE: Handling of a 1 or 2 GB pipe? Morgan R. Elmore (Jan 31)
  • RE: Handling of a 1 or 2 GB pipe? Ricardo, Gerson (Jan 31)
• Port Mirroring Bruno Benchimol a.k.a. Misty MSt (Jan 30)
  • Re: Port Mirroring Rich Adamson (Jan 30)
    • Re: Port Mirroring Glenn Forbes Fleming Larratt (Jan 30)
• RE: Portscans noted Ricardo, Gerson (Jan 31)
• Snort slurps memory Maarten de Vries (Jan 31)
  • Re: Snort slurps memory Erek Adams (Jan 31)
  • Re: Snort slurps memory Matt Kettler (Jan 31)
• Snort&MySQL tanis () knology net (Jan 31)
  • Re: Snort&MySQL Kenneth G. Arnold (Jan 31)
  • <Possible follow-ups>
  • RE: Snort&MySQL Hicks, John (Jan 31)
• SnortCenter and existing init scripts on sensors McGuire, Dennis (Jan 31)
• ACID & MSSQL Redouane Semlali (Jan 31)
  • Re: ACID & MSSQL Erick Mechler (Jan 31)
  • <Possible follow-ups>
  • RE: ACID & MSSQL Hicks, John (Jan 31)
  • RE: ACID & MSSQL Redouane Semlali (Jan 31)
• How to enable SENSOR Gosswiler Bjoern (Jan 31)
  • Re: How to enable SENSOR twig les (Jan 31)
  • <Possible follow-ups>
  • RE: How to enable SENSOR Hicks, John (Jan 31)
  • RE: How to enable SENSOR Semerjian, Ohanes (Feb 02)
• Snort 1.9 and PureSecure Ceri Coburn (Jan 31)
• Packet contents: EXPERIMENTAL SHELLCODE x86 NOOP Marc Quibell (Jan 31)
  • Re: Packet contents: EXPERIMENTAL SHELLCODE x86 NOOP Matt Kettler (Jan 31)
  • Re: Packet contents: EXPERIMENTAL SHELLCODE x86 NOOP Dragos Ruiu (Jan 31)
• snort + IPFilter? Everist, Benjamin S. (NASWI) (Jan 31)
  • <Possible follow-ups>
  • RE: snort + IPFilter? Gonzalez, Albert (Jan 31)
  • RE: snort + IPFilter? Everist, Benjamin S. (NASWI) (Feb 04)
    • RE: snort + IPFilter? Demetri Mouratis (Feb 04)
  • RE: snort + IPFilter? Everist, Benjamin S. (NASWI) (Feb 04)
  • RE: snort + IPFilter? Everist, Benjamin S. (NASWI) (Feb 04)
• eth0 without ip .. David Alonso De La Vega Tapage (Jan 31)
  • Re: eth0 without ip .. Demetri Mouratis (Jan 31)
  • <Possible follow-ups>
  • RE: eth0 without ip .. Gonzalez, Albert (Jan 31)
  • RE: eth0 without ip .. Slighter, Tim (Feb 03)
  • FW: eth0 without ip .. Slighter, Tim (Feb 03)
• RES: Handling of a 1 or 2 GB pipe? [Snort-users] Romulo M. Cholewa (Jan 31)
• Re: SnortCenter and existing init s larc (Jan 31)
• Snort on FreeBSD Schmehl, Paul L (Jan 31)
• RES: A Couple of Questions [Snort-users] Romulo M. Cholewa (Jan 31)
• Port Mirroring (More Info) Bruno Benchimol a.k.a. Misty MSt (Feb 01)
• RES: Port Mirroring (More Info) [Snort-users] Romulo M. Cholewa (Feb 01)
• Snort Sensor not being reported in the DB after being deleted from DB Ryan Barrett (Feb 01)
• SnortSnarf Install Document Lance Lloyd (Feb 01)
  • <Possible follow-ups>
  • RE: SnortSnarf Install Document Slighter, Tim (Feb 03)
• List of rule options Frank Knobbe (Feb 01)
• The order that rules are processed in? Schmehl, Paul L (Feb 01)
  • Re: The order that rules are processed in? twig les (Feb 01)
  • <Possible follow-ups>
  • RE: The order that rules are processed in? Schmehl, Paul L (Feb 01)
    • RE: The order that rules are processed in? Paul D. Shaffer (Feb 01)
    • Re: The order that rules are processed in? Dragos Ruiu (Feb 01)
      • Re: The order that rules are processed in? Dragos Ruiu (Feb 01)
  • RE: The order that rules are processed in? Schmehl, Paul L (Feb 01)
    • RE: The order that rules are processed in? Rich Adamson (Feb 02)
  • RE: The order that rules are processed in? Schmehl, Paul L (Feb 02)
• logging inbound packets only njharris (Feb 01)
  • Re: logging inbound packets only Dragos Ruiu (Feb 02)
• Clarification of inbound only logging issue. njharris (Feb 02)
  • Re: Clarification of inbound only logging issue. Erick Mechler (Feb 02)
• A couple of design comments/questions Jason Haar (Feb 02)
  • Re: A couple of design comments/questions twig les (Feb 02)
  • Re: A couple of design comments/questions Frank Knobbe (Feb 02)
• update on inbound logging only issue. njharris (Feb 02)
• A weird packet..... perhaps a bug? Frank Knobbe (Feb 02)
  • Re: A weird packet..... perhaps a bug? Erek Adams (Feb 03)
  • Re: [Snort-devel] A weird packet..... perhaps a bug? Chris Green (Feb 03)
  • Re: A weird packet..... perhaps a bug? Kenneth G. Arnold (Feb 03)
  • <Possible follow-ups>
  • RE: A weird packet..... perhaps a bug? Cornelis, Dirk (BE - Diegem) (Feb 03)
• Snort on Mandrake 9.0 Vaessen, E.M.J. (Ed) (Feb 03)
  • <Possible follow-ups>
  • RE: Snort on Mandrake 9.0 Gonzalez, Albert (Feb 03)
  • RE: Snort on Mandrake 9.0 Miller, Eoin (Feb 03)
• snort win32 source code rajat khatri (Feb 03)
  • Re: snort win32 source code Erek Adams (Feb 03)
    • RE: snort win32 source code Michael Steele (Feb 03)
    • Re: snort win32 source code Chris Reid (Feb 03)
• Snort w/ Mysql Error nephlite (Feb 03)
  • Re: Snort w/ Mysql Error twig les (Feb 03)
  • Re: Snort w/ Mysql Error Paul Schmehl (Feb 03)
  • <Possible follow-ups>
  • Re: Re: Snort w/ Mysql Error nephlite (Feb 03)
  • Re: Snort w/ Mysql Error Everist, Benjamin S. (NASWI) (Feb 04)
• Mysql error when compiling ACID(Barnyard-0.1.0) Brandon Amundson (Feb 03)
  • <Possible follow-ups>
  • Re: Mysql error when compiling ACID(Barnyard-0.1.0) Kevin Peuhkurinen (Feb 03)
• Weird packets revisited Kevin Peuhkurinen (Feb 03)
• Weird packets solved in 2.0 Kevin Peuhkurinen (Feb 03)
  • Re: Weird packets solved in 2.0 Frank Knobbe (Feb 03)
    • Re: Weird packets solved in 2.0 Kevin Peuhkurinen (Feb 03)
• Manageing Rules Gary Hill (Feb 03)
  • Re: Manageing Rules twig les (Feb 03)
    • Re: Manageing Rules Andreas Östling (Feb 04)
      • Snort Performance Comparison Chart Andrea Iacopini (Feb 04)
• snort-1.9.0 don't connect when restart the SQL server Murzsa Norbert (Feb 03)
  • Re: snort-1.9.0 don't connect when restart the SQL server Demetri Mouratis (Feb 03)
• Interfaces without an ip / no udp capture considerations Ricardo, Gerson (Feb 03)
• snort eating up memory FAST Steve Moran (Feb 03)
  • Re: snort eating up memory FAST twig les (Feb 03)
• eth0 without ip David Culp (Feb 03)
  • Re: eth0 without ip Matt Kettler (Feb 03)
    • Re: eth0 without ip David Culp (Feb 03)
      • Re: eth0 without ip Matt Kettler (Feb 03)
  • <Possible follow-ups>
  • RE: eth0 without ip Hicks, John (Feb 05)
• Problem solved; Logging only outbound connections njharris (Feb 03)
• Where do I find flex-resp? Schmehl, Paul L (Feb 03)
  • <Possible follow-ups>
  • RE: Where do I find flex-resp? Schmehl, Paul L (Feb 03)
    • RE: Where do I find flex-resp? twig les (Feb 03)
  • Re: Where do I find flex-resp? Matt Kettler (Feb 03)
  • RE: Where do I find flex-resp? Schmehl, Paul L (Feb 03)
• misc errors Michael J. McCasland (Feb 03)
• OT: Syslog Viewer Erek Adams (Feb 04)
• HTTP PORTS Darrin Powell (Feb 04)
  • <Possible follow-ups>
  • RE: HTTP PORTS Morgan R. Elmore (Feb 04)
    • Re: HTTP PORTS Chris Green (Feb 04)
    • Re: HTTP PORTS Andrew R. Baker (Feb 04)
    • RE: HTTP PORTS Matt Kettler (Feb 04)
  • RE: HTTP PORTS Morgan R. Elmore (Feb 04)
• Snort does not appear to be running namth (Feb 04)
• Snortd's status is "snort dead but sybsys locked" namth (Feb 04)
  • Re: Snortd's status is "snort dead but sybsys locked" Erek Adams (Feb 04)
  • <Possible follow-ups>
  • RE: Snortd's status is "snort dead but sybsys locked" Miller, Eoin (Feb 04)
• not allowed traffic in the Intranet [RMC-VUCLPP3] Romulo M. Cholewa (Feb 04)
• Snort error Souza, Chris (Feb 04)
  • Re: Snort error Paul Schmehl (Feb 04)
  • <Possible follow-ups>
  • Re: Snort error Matt Kettler (Feb 04)
• Does anyone have a script for cleaning out the database of old entries? Compton, Rich (Feb 04)
  • Re: Does anyone have a script for cleaning out the database of old entries? Erick Mechler (Feb 04)
    • Re: Does anyone have a script for cleaning out the database of old entries? Erick Mechler (Feb 04)
• resp and root Paul Schmehl (Feb 04)
  • Re: resp and root Chris Green (Feb 04)
• create-mysql error twig les (Feb 04)
  • Re: create-mysql error Bamm Visscher (Feb 04)
    • Re: create-mysql error twig les (Feb 04)
      • Re: create-mysql error Chris Green (Feb 04)
• Undefined reference to yylex errors. Saguturu, Suresh (Feb 04)
• Linux & Pcap ... :-( Kevin Peuhkurinen (Feb 04)
  • Re: Linux & Pcap ... :-( Paul B. Poh (Feb 05)
  • Re: Linux & Pcap ... :-( Lawrence Reed (Feb 05)
    • Re: Linux & Pcap ... :-( Paul B. Poh (Feb 05)
      • Re: Linux & Pcap ... :-( Lawrence Reed (Feb 05)
• snort+mysql+acid Alan McCarty (Feb 04)
  • Re: snort+mysql+acid Dustin Decker (Feb 04)
  • <Possible follow-ups>
  • RE: snort+mysql+acid Scott, Joshua (Feb 04)
    • MySql and Snort Cilin (Feb 05)
      • Re: MySql and Snort Anne Carasik (Feb 05)
      • Re: MySql and Snort Cilin (Feb 07)
• IDScenter 1.1 RC1 released! Ueli Kistler (Feb 04)
• Question about IP range syntax Schmehl, Paul L (Feb 04)
• Snort-inline segfault Katriel Traum (Feb 04)
• Problems with Snort and Postgresql gbarreiro (Feb 05)
  • Re: Problems with Snort and Postgresql Bamm Visscher (Feb 05)
  • <Possible follow-ups>
  • Re: Problems with Snort and Postgresql gbarreiro (Feb 05)
    • Re: Problems with Snort and Postgresql Bamm Visscher (Feb 05)
    • Re: Problems with Snort and Postgresql Demetri Mouratis (Feb 05)
  • Re: Problems with Snort and Postgresql gbarreiro (Feb 06)
  • Re: Problems with Snort and Postgresql Mario Alberto Soto Cordones (Feb 07)
  • Re: Problems with Snort and Postgresql Mario Alberto Soto Cordones (Feb 07)
• WinPcap now supports Multiple Processors! Erek Adams (Feb 05)
• OT: SQL Diff tool Erek Adams (Feb 05)
• SnortCenter-Add New Sensor Pathmenanthan Ramakrishna (Feb 05)
• Linux & Pcap .. ;--) Kevin Peuhkurinen (Feb 05)
• IDScenter 1.1 RC1 tester wanted! Ueli Kistler (Feb 05)
• False positives with SID 1337 and SID 1378 Jon (Feb 05)
• Report Compiling Matt Todd (Feb 05)
• ICMP Destination Unreachable Dennis Gorman (Feb 05)
  • Re: ICMP Destination Unreachable Kenneth G. Arnold (Feb 05)
    • RE: ICMP Destination Unreachable Dennis Gorman (Feb 05)
      • RE: ICMP Destination Unreachable twig les (Feb 05)
      • RE: ICMP Destination Unreachable Kenneth G. Arnold (Feb 05)
  • Re: ICMP Destination Unreachable twig les (Feb 05)
  • Re: ICMP Destination Unreachable Matt Kettler (Feb 05)
  • <Possible follow-ups>
  • ICMP Destination Unreachable Always Bishan (Mar 08)
    • Re: ICMP Destination Unreachable Kenneth G. Arnold (Mar 08)
    • Re: ICMP Destination Unreachable Erek Adams (Mar 08)
    • Re: ICMP Destination Unreachable Matt Kettler (Mar 08)
• Re: Snort-users digest, Vol 1 #2758 - 10 msgs Kenton Smith (Feb 05)
• RE: MySql and Snort L. Christopher Luther (Feb 05)
  • <Possible follow-ups>
  • RE: MySql and Snort L. Christopher Luther (Feb 08)
  • RE: MySql and Snort L. Christopher Luther (Feb 08)
• Starting and Stopping Snort feeding Mysql James M. Driskell (Feb 05)
  • Re: Starting and Stopping Snort feeding Mysql Kenneth G. Arnold (Feb 06)
    • RE: Starting and Stopping Snort feeding Mysql James M. Driskell (Feb 07)
• Catchall Rule John Cherbini (Feb 05)
  • Re: Catchall Rule twig les (Feb 05)
    • Re: Catchall Rule Ashley Thomas (Feb 05)
  • Re: Catchall Rule Jacob Redding (Feb 06)
  • <Possible follow-ups>
  • RE: Catchall Rule John Cherbini (Feb 05)
    • Re: Catchall Rule Rodney Green (Feb 06)
      • RE: Catchall Rule John Cherbini (Feb 06)
  • RE: Catchall Rule John Cherbini (Feb 05)
  • Re: Catchall rule njharris (Feb 05)
  • RE: Catchall Rule Gary Hill (Feb 06)
    • RE: Catchall Rule Erek Adams (Feb 06)
      • RE: Catchall Rule John Cherbini (Feb 06)
      • Re: Catchall Rule Ashley Thomas (Feb 06)
      • Re: Catchall Rule Martin Roesch (Feb 10)
  • RE: Catchall Rule Gonzalez, Albert (Feb 06)
  • RE: Catchall Rule Gary Hill (Feb 06)
  • RE: Catchall Rule John Cherbini (Feb 06)
  • Re: Catchall Rule Kenton Smith (Feb 06)
• Snort ain't logging anything... Mam Ruoc (Feb 06)
  • <Possible follow-ups>
  • RE: Snort ain't logging anything... L. Christopher Luther (Feb 06)
  • RE: Snort ain't logging anything... Mam Ruoc (Feb 06)
    • RE: RE: Snort ain't logging anything... Michael Steele (Feb 06)
• Rules Gary Hill (Feb 06)
  • <Possible follow-ups>
  • RE: Rules Steve Halligan (Feb 06)
  • RE: Rules Gary Hill (Feb 06)
    • RE: Rules Erek Adams (Feb 06)
    • RE: Rules twig les (Feb 06)
  • RE: Rules John York (Feb 06)
• Logging a specific IP to a separate logging instance A Fubbick (Feb 06)
  • Re: Logging a specific IP to a separate logging instance Erek Adams (Feb 06)
• SHIT Gonzalez, Albert (Feb 06)
  • <Possible follow-ups>
  • Re: SHIT gr8dane2 (Feb 06)
• SnortCenter v0.9.6 installation problems John Rioux (Feb 06)
• snort v2 syslog problems? Rich Adamson (Feb 06)
• Yet another spp_portscan2 question Fialkowski, Joe (Feb 06)
  • Re: Yet another spp_portscan2 question Demetri Mouratis (Feb 06)
• Access Denied Lucretia Enterprises (Feb 06)
  • Re: Access Denied Anne Carasik (Feb 06)
    • Re: Access Denied Kenneth G. Arnold (Feb 06)
  • <Possible follow-ups>
  • RE: Access Denied L. Christopher Luther (Feb 06)
• how do you use the snort data? ljacobs (Feb 06)
  • Re: how do you use the snort data? twig les (Feb 06)
  • <Possible follow-ups>
  • RE: how do you use the snort data? Gary Hill (Feb 06)
• Windows 2000 service Jim Schwin (Feb 06)
• Stopping outbound Kazaa Travis S. (Feb 06)
  • Re: Stopping outbound Kazaa twig les (Feb 06)
  • Re: Stopping outbound Kazaa Brian (Feb 07)
    • Re: Stopping outbound Kazaa Gustavo Beltrami Rossi (Feb 10)
  • <Possible follow-ups>
  • Re: Stopping outbound Kazaa Travis S. (Feb 06)
  • Re: Stopping outbound Kazaa Travis S. (Feb 13)
    • Re: Stopping outbound Kazaa Erek Adams (Feb 13)
      • Re: Stopping outbound Kazaa twig les (Feb 13)
    • Re: Stopping outbound Kazaa Gustavo Beltrami Rossi (Feb 14)
  • RE: Stopping outbound Kazaa Bob McDowell (Feb 14)
• Where to send logs spyguy (Feb 06)
  • Re: Where to send logs twig les (Feb 06)
  • RE: Where to send logs David Scott (Feb 06)
  • <Possible follow-ups>
  • RE: Where to send logs L. Christopher Luther (Feb 06)
• Snort 1.9.0 Hard Crashes/Lockups Ricardo, Gerson (Feb 06)
  • Re: Snort 1.9.0 Hard Crashes/Lockups Erek Adams (Feb 06)
  • Re: Snort 1.9.0 Hard Crashes/Lockups Demetri Mouratis (Feb 06)
  • Re: Snort 1.9.0 Hard Crashes/Lockups Chris Green (Feb 06)
• Re: Eagle X 1.0 release Ueli Kistler (Feb 06)
• Delete Alerts on Acid Pedro Tedeschi (Feb 06)
  • Re: Delete Alerts on Acid Demetri Mouratis (Feb 06)
  • <Possible follow-ups>
  • Re: Delete Alerts on Acid Gabriel L. Somlo (Feb 06)
• Question about downloading rules Paul Schmehl (Feb 06)
  • Re: Question about downloading rules Edin Dizdarevic (Feb 06)
  • <Possible follow-ups>
  • RE: Question about downloading rules LaRose, Dallas (Feb 06)
    • Re: RE: Question about downloading rules Paul Schmehl (Feb 06)
• mysql snort error Souza, Chris (Feb 06)
  • Re: mysql snort error Erek Adams (Feb 06)
• bad traffic loopback traffic Everist, Benjamin S. (NASWI) (Feb 06)
  • Re: bad traffic loopback traffic twig les (Feb 06)
  • Re: bad traffic loopback traffic Matt Kettler (Feb 06)
  • <Possible follow-ups>
  • RE: bad traffic loopback traffic Everist, Benjamin S. (NASWI) (Feb 06)
• "snort..conf" when using SnortCenter Eli Stair (Feb 06)
• novice Tom Murdock (Feb 06)
  • Re: novice Matt Kettler (Feb 06)
  • <Possible follow-ups>
  • RE: novice Gonzalez, Albert (Feb 06)
• OFF-Topic: Digitel Router Bruno Benchimol a.k.a. Misty MSt (Feb 06)
• Snort on SunOS jcvaraillon (Feb 07)
  • Re: Snort on SunOS Erick Mechler (Feb 07)
  • Re: Snort on SunOS Erek Adams (Feb 07)
• nimda / code red signatures Jeff Oliveto (Feb 07)
  • Re: [Snort-sigs] nimda / code red signatures Phillip G Deneault (Feb 10)
• create_mysql Jay Longley (Feb 07)
  • Re: create_mysql Jens Krabbenhoeft (Feb 07)
  • <Possible follow-ups>
  • RE: create_mysql Morgan R. Elmore (Feb 07)
• Archiving Giving you Trouble? Timothy Wright (Feb 07)
• how to get "unicode attack detected" alerts? Gary Merrick (Feb 07)
• [OT] up2date broken for my rhl7.3 box? Donofrio, Lewis (Feb 07)
  • <Possible follow-ups>
  • RE: [OT] up2date broken for my rhl7.3 box? Schmehl, Paul L (Feb 07)
  • RE: [OT] up2date broken for my rhl7.3 box? Donofrio, Lewis (Feb 07)
  • RE: [OT] up2date broken for my rhl7.3 box? Schmehl, Paul L (Feb 07)
• Snort rules for FTP CWD,SITE,etc overflow Chris Garringer (Feb 07)
• auto email with ACID Darrin Powell (Feb 07)
  • RE: auto email with ACID Mike Koponick (Feb 07)
  • <Possible follow-ups>
  • Re: auto email with ACID Roman Danyliw (Feb 10)
• Generating Reports njharris (Feb 07)
  • Re: Generating Reports Rick DeYoung (Feb 08)
• Does "log" still alert? Schmehl, Paul L (Feb 08)
  • Re: Does "log" still alert? twig les (Feb 08)
  • <Possible follow-ups>
  • RE: Does "log" still alert? Schmehl, Paul L (Feb 08)
• "Unknown sensor" Schmehl, Paul L (Feb 08)
• having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 08)
  • Re: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial twig les (Feb 08)
    • Re: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 08)
    • Re: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 09)
      • Re: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Erek Adams (Feb 09)
      • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Mike Koponick (Feb 09)
    • Re: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 09)
  • <Possible follow-ups>
  • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Schmehl, Paul L (Feb 09)
    • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 10)
      • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Erek Adams (Feb 10)
  • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Schmehl, Paul L (Feb 10)
    • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Unix Rookie (Feb 10)
  • RE: having issues with the web display after following the FreeBSD,Snort,Acid,MySQL tutorial Schmehl, Paul L (Feb 10)
• Logging a complete TCP Session Mahdi Kefayati (Feb 08)
  • Re: Logging a complete TCP Session Michael Boman (Feb 08)
• Using Spade Mahdi Kefayati (Feb 08)
  • <Possible follow-ups>
  • Re: Using Spade Mahdi Kefayati (Feb 09)
    • Re: Using Spade James Hoagland (Feb 09)
• swatch Mam Ruoc (Feb 09)
  • Re: swatch Erek Adams (Feb 09)
• logging all trafic njharris (Feb 09)
• Only traffic going in??? Sh J (Feb 09)
  • Re: Only traffic going in??? Erek Adams (Feb 10)
• IDScenter 1.1 RC2 and Eagle X 1.0.1 released! Ueli Kistler (Feb 10)
• snort+mysql startup error Souza, Chris (Feb 10)
  • Re: snort+mysql startup error Erek Adams (Feb 10)
• pre-compiled snort binaries and mysql jsauer (Feb 10)
  • Re: pre-compiled snort binaries and mysql Erek Adams (Feb 10)
• Direction detection with mac address filtering Martin Olsson (Feb 10)
  • <Possible follow-ups>
  • RE: Direction detection with mac address filtering Williams Jon (Feb 11)
    • RE: Direction detection with mac address filtering Erek Adams (Feb 11)
• Changing the admin password for SnortCenter John Rioux (Feb 10)
  • Re: Changing the admin password for SnortCenter Eli Stair (Feb 10)
  • <Possible follow-ups>
  • Re: Changing the admin password for SnortCenter John Rioux (Feb 11)
    • Re: Changing the admin password for SnortCenter Erick Mechler (Feb 11)
• Snort with 2 eth David Alonso De La Vega Tapage (Feb 10)
  • Re: Snort with 2 eth Matt Kettler (Feb 10)
  • Re: Snort with 2 eth Erek Adams (Feb 10)
  • <Possible follow-ups>
  • RE: Snort with 2 eth Schmehl, Paul L (Feb 10)
• Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
  • Re: Access denied for user: '@192.168.0.1' -SNORT- Kenneth G. Arnold (Feb 10)
  • <Possible follow-ups>
  • Re: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
    • Re: Access denied for user: '@192.168.0.1' -SNORT- twig les (Feb 10)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- Schmehl, Paul L (Feb 10)
  • Re: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
    • Re: Access denied for user: '@192.168.0.1' -SNORT- twig les (Feb 10)
    • Re: Access denied for user: '@192.168.0.1' -SNORT- Kenneth G. Arnold (Feb 10)
      • RE: Access denied for user: '@192.168.0.1' -SNORT- Michael Steele (Feb 10)
      • ACID - Which Database? Yaakov Yehudi (Feb 11)
      • Re: ACID - Which Database? Ken Gunderson (Feb 11)
      • Re: ACID - Which Database? Paul B. Poh (Feb 11)
      • Re: ACID - Which Database? Yaakov Yehudi (Feb 12)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
  • Re: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 10)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- L. Christopher Luther (Feb 11)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- L. Christopher Luther (Feb 11)
  • Re: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 11)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 11)
    • RE: Access denied for user: '@192.168.0.1' -SNORT- Kenneth G. Arnold (Feb 11)
    • Re: RE: Access denied for user: '@192.168.0.1' -SNORT- Erek Adams (Feb 11)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- L. Christopher Luther (Feb 11)
    • RE: Access denied for user: '@192.168.0.1' -SNORT- Erek Adams (Feb 12)
  • RE: Access denied for user: '@192.168.0.1' -SNORT- L. Christopher Luther (Feb 11)
  • Re: Access denied for user: '@192.168.0.1' -SNORT- mike Hughes (Feb 12)
• Snort Sensor installation error Jay Longley (Feb 10)
• Question for the Group?? Snow Jacob C KPWA (Feb 10)
  • <Possible follow-ups>
  • Re: Question for the Group?? Matt Kettler (Feb 10)
• Arguments for Snort tfandango (Feb 10)
  • Re: Arguments for Snort twig les (Feb 10)
  • Re: Arguments for Snort Shane Williams (Feb 11)
    • Re: Arguments for Snort Paul Schmehl (Feb 11)
      • Best Enterprise Snort Configuration tfandango (Feb 12)
      • Re: Best Enterprise Snort Configuration Paul Schmehl (Feb 12)
      • Re: Best Enterprise Snort Configuration Ken Gunderson (Feb 12)
      • Re: Best Enterprise Snort Configuration twig les (Feb 12)
      • Re: Best Enterprise Snort Configuration Ken Gunderson (Feb 12)
      • Re: Best Enterprise Snort Configuration Saad Kadhi (Feb 12)
      • Re: Best Enterprise Snort Configuration Michael Boman (Feb 12)
      • Re: Best Enterprise Snort Configuration Joerg Weber (Feb 12)
      • Re: Best Enterprise Snort Configuration Bennett Todd (Feb 12)
• Snort not logging to MySQL Adam Shephard (Feb 10)
  • <Possible follow-ups>
  • Re: Snort not logging to MySQL Adam Shephard (Feb 12)
• Recomile Snort with Mysql+flexresp ms dhiraj (Feb 10)
  • Re: Recomile Snort with Mysql+flexresp Demetri Mouratis (Feb 10)
• scan.log file John S (Feb 10)
  • Re: scan.log file Scott Fringer (Feb 11)
• My Sql DataBase break down.. :-( Lee Jun (Feb 10)
  • <Possible follow-ups>
  • RE: My Sql DataBase break down.. :-( Drew Stockman (Feb 11)
• Best snort analyzing tool Mam Ruoc (Feb 10)
  • <Possible follow-ups>
  • RE: Best snort analyzing tool Robert Reid (Feb 11)
• Re: Re: Changing the admin password larc (Feb 11)
  • <Possible follow-ups>
  • Re: Re: Changing the admin password John Rioux (Feb 11)
• howto display mysql databse using acid Sujata Y (Feb 11)
• RE: Snort-users digest, Vol 1 #2779 - 8 msgs Ross, Darren (Feb 11)
• MySQL problem Ken Bell (Feb 11)
• is it possible to get pcap logs in individual directories? Jon (Feb 11)
  • Re: is it possible to get pcap logs in individual directories? twig les (Feb 11)
    • Re: is it possible to get pcap logs in individual directories? Jon (Feb 11)
• Newbie Setup Question Kevin Bachelder (Feb 11)
  • Re: Newbie Setup Question twig les (Feb 11)
• sql and acid tanis () knology net (Feb 11)
  • <Possible follow-ups>
  • RE: sql and acid Hutchinson, Andrew (Feb 11)
• RE: ACID - Which Database? Hutchinson, Andrew (Feb 11)
• mysql_error: Lost connection to MySQL server during query Ben Swaby (Feb 11)
  • <Possible follow-ups>
  • Re: mysql_error: Lost connection to MySQL server during query Andy Dales (Feb 11)
  • RE: mysql_error: Lost connection to MySQL server during query Brian M. Diehl (Feb 11)
• Snort for Win 2000 Danilo Santos (Feb 11)
  • Re: Snort for Win 2000 Ueli Kistler (Feb 11)
  • Re: Snort for Win 2000 Erek Adams (Feb 11)
  • RE: Snort for Win 2000 Michael Steele (Feb 11)
  • <Possible follow-ups>
  • RE: Snort for Win 2000 L. Christopher Luther (Feb 11)
• ACID alert group email problem Poulos, Lou (Feb 11)
• confirm 938020 Robert Hoffmaster (Feb 11)
• Snort Logging on Linux but NOT to MYSQL on windows mike Hughes (Feb 11)
  • Re: Snort Logging on Linux but NOT to MYSQL on windows Erek Adams (Feb 12)
  • RE: Snort Logging on Linux but NOT to MYSQL on windows Vicky Mair (Feb 12)
  • <Possible follow-ups>
  • RE: Snort Logging on Linux but NOT to MYSQL on windows L. Christopher Luther (Feb 12)
  • RE: Snort Logging on Linux but NOT to MYSQL on windows mike Hughes (Feb 13)
    • Re: RE: Snort Logging on Linux but NOT to MYSQL on windows Erek Adams (Feb 13)
  • RE: Snort Logging on Linux but NOT to MYSQL on windows L. Christopher Luther (Feb 13)
• Traffic anomaly detection Joerg Weber (Feb 12)
  • Re: Traffic anomaly detection Erek Adams (Feb 12)
    • Re: Traffic anomaly detection Frank Knobbe (Feb 12)
  • Re: Traffic anomaly detection James Hoagland (Feb 12)
  • <Possible follow-ups>
  • RE: Traffic anomaly detection Bob McDowell (Feb 12)
  • RE: Traffic anomaly detection Williams Jon (Feb 13)
    • RE: Traffic anomaly detection Erek Adams (Feb 13)
• Snort for windows Danilo Santos (Feb 12)
• SMB pluging César Augusto Rojas Sierra (Feb 12)
  • RE: SMB pluging Paul D. Shaffer (Feb 12)
• Physical configuration question Sammy (Feb 12)
  • Re: Physical configuration question Bamm Visscher (Feb 12)
• changing Timestamp Sh J (Feb 12)
• RE: Best Enterprise Snort Configuration McPheeters, Scott (Feb 12)
  • <Possible follow-ups>
  • RE: Best Enterprise Snort Configuration Hutchinson, Andrew (Feb 12)
  • RE: Best Enterprise Snort Configuration Kreimendahl, Chad J (Feb 14)
    • Re: Best Enterprise Snort Configuration Bennett Todd (Feb 14)
• csv - field question Sh J (Feb 12)
  • Re: csv - field question Brian (Feb 12)
  • Re: csv - field question Adam Shephard (Feb 12)
• Portscan signatures Ron Shuck (Feb 12)
  • <Possible follow-ups>
  • Portscan signatures Ron Shuck (Feb 12)
• snort summary information... Bob Hoffmaster (Feb 12)
• Seperate logging for different subnets in ACID Marlon Beltz (Feb 12)
• Alert only when n number of rule matches rcvd Jason Linden (Feb 12)
  • <Possible follow-ups>
  • Alert only when n number of rule matches rcvd Jason Linden (Feb 13)
    • Re: Alert only when n number of rule matches rcvd Erek Adams (Feb 13)
• Attention ALL Windows Users : How-To Install Remote Sensors on Windows Running MySQL... Michael Steele (Feb 12)
  • RE: Attention ALL Windows Users : How-To Install Remote Sensors on Windows Running MySQL... . (Feb 18)
    • Re: Attention ALL Windows Users : How-To Install Remote Sensors on Windows Running MySQL... Chris Reid (Feb 18)
    • RE: Attention ALL Windows Users : How-To Install Remote Sensors on Windows Running MySQL... . (Feb 18)
• [OT] - Mysql logging, iptables, snort and you... Bob McDowell (Feb 12)
• How to monitor some particular devices Lok Ying Chung (Feb 12)
  • Re: How to monitor some particular devices twig les (Feb 13)
• Question about snortsnarf Schmehl, Paul L (Feb 12)
  • <Possible follow-ups>
  • Re: Question about snortsnarf Eric Joe (Feb 12)
  • RE: Question about snortsnarf Schmehl, Paul L (Feb 12)
    • RE: Question about snortsnarf James Hoagland (Feb 13)
      • RE: Question about snortsnarf Paul Schmehl (Feb 13)
      • RE: Question about snortsnarf Eric Joe (Feb 13)
• web based config Rodney Green (Feb 13)
  • Re: web based config Saad Kadhi (Feb 13)
    • Re: web based config Rodney Green (Feb 13)
  • Re: web based config Joerg Weber (Feb 13)
    • Re: web based config Rodney Green (Feb 13)
  • <Possible follow-ups>
  • RE: web based config Jason Nelson (Feb 13)
• ACID illegal offset type errors in acid_state_citems.inc Lewis, John (Feb 13)
  • <Possible follow-ups>
  • ACID illegal offset type errors in acid_state_citems.inc Lewis, John (Feb 13)
• MYSQL Problems Ross, Darren (Feb 13)
  • Re: MYSQL Problems Erick Mechler (Feb 13)
• Microsoft SQL Server support Sigurbjartur Helgason (Feb 13)
  • Re: Microsoft SQL Server support Erek Adams (Feb 13)
• Demarc PureSecure Jason Linden (Feb 13)
• [performance] Question... Emmanuel Dardaine (Feb 13)
  • Re: [performance] Question... Erek Adams (Feb 13)
• system requirements K.A. Long (Feb 13)
  • Re: system requirements Erek Adams (Feb 13)
• Several newbie questions Nall, Robert (Feb 13)
  • <Possible follow-ups>
  • Re: Several newbie questions Matt Kettler (Feb 13)
• Problems on snort-mysql in a windows machine Armando José Martins de Oliveira (Feb 13)
• Archiving the archive Bob Dehnhardt (Feb 13)
  • Re: Archiving the archive Ken Gunderson (Feb 13)
    • Re: Archiving the archive Ken Gunderson (Feb 13)
  • <Possible follow-ups>
  • RE: Archiving the archive McPheeters, Scott (Feb 13)
• problem with alert_syslog and internal statistics... Bob Hoffmaster (Feb 13)
  • Re: problem with alert_syslog and internal statistics... Matt Kettler (Feb 13)
  • Re: problem with alert_syslog and internal statistics... Bamm Visscher (Feb 13)
  • Re: problem with alert_syslog and internal statistics... Erek Adams (Feb 13)
• Snort, Barnyard, and Postgresql tfandango (Feb 13)
  • Re: Snort, Barnyard, and Postgresql Scott Fringer (Feb 13)
    • Re: Snort, Barnyard, and Postgresql tfandango (Feb 13)
  • Re: Snort, Barnyard, and Postgresql Bamm Visscher (Feb 13)
• Can someone help me with a script to send my snort alerts to my email Aaron Babalola (Feb 13)
  • Re: Can someone help me with a script to send my snort alerts to my email Matt Kettler (Feb 13)
• New install Luo, Philip (Feb 13)
  • <Possible follow-ups>
  • RE: New install Luo, Philip (Feb 13)
• My Acid/MySQL setup is mega slow. Aaron The Young (Feb 13)
  • Re: My Acid/MySQL setup is mega slow. Ken Gunderson (Feb 13)
    • Re: My Acid/MySQL setup is mega slow. Kenneth G. Arnold (Feb 13)
      • Re: My Acid/MySQL setup is mega slow. Erick Mechler (Feb 13)
      • Re: My Acid/MySQL setup is mega slow. Erek Adams (Feb 13)
    • Re: My Acid/MySQL setup is mega slow. acyoung (Feb 14)
      • Re: My Acid/MySQL setup is mega slow. Ken Gunderson (Feb 14)
• ACID Archive Solution / ACID DB Scripts / ACID AG Email Fix Timothy Wright (Feb 13)
• swatch install problem Darrin Powell (Feb 13)
• Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 13)
  • <Possible follow-ups>
  • RE: Difficulty setting HOME_NET to my interface address L. Christopher Luther (Feb 14)
    • Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 14)
      • Re: RE: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 15)
    • Re: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 15)
  • RE: Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 14)
    • Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 15)
      • Re: RE: Difficulty setting HOME_NET to my interface address Chris Reid (Feb 16)
      • Re: RE: Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 16)
      • Re: RE: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 17)
  • Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 14)
  • RE: Difficulty setting HOME_NET to my interface address L. Christopher Luther (Feb 14)
  • RE: Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 16)
    • RE: Difficulty setting HOME_NET to my interface address Chris Reid (Feb 16)
  • RE: Difficulty setting HOME_NET to my interface address Chris Reid (Feb 16)
  • RE: Difficulty setting HOME_NET to my interface address L. Christopher Luther (Feb 16)
• FlexResp in Snort 1.9 WIN32 port not working? Charles Darwin (Feb 13)
• portscan vs. portscan2 Rob Burris (Feb 13)
  • Re: portscan vs. portscan2 Erek Adams (Feb 13)
    • Re: portscan vs. portscan2 Rob Burris (Feb 13)
      • Re: portscan vs. portscan2 Erek Adams (Feb 14)
• Alert or log? francisv (Feb 13)
  • Re: Alert or log? Erek Adams (Feb 13)
  • <Possible follow-ups>
  • RE: Alert or log? francisv (Feb 13)
    • RE: Alert or log? Erek Adams (Feb 14)
    • Re: Alert or log? Bamm Visscher (Feb 14)
      • Re: Alert or log? Paul B. Poh (Feb 16)
  • RE: Alert or log? francisv (Feb 14)
    • RE: Alert or log? Erek Adams (Feb 15)
• Manual for all the options Martin Olsson (Feb 14)
• rule to log all smb name and IP addr pairs David Bear (Feb 14)
• ACID archive problems Counselman, Chris Contractor/Sverdrup (Feb 14)
  • <Possible follow-ups>
  • ACID archive problems Counselman, Chris Contractor/Sverdrup (Feb 14)
• SnortCenter questions Counselman, Chris Contractor/Sverdrup (Feb 14)
  • Re: SnortCenter questions larc (Feb 18)
• ACID/MySql DB performance McPheeters, Scott (Feb 14)
  • Re: ACID/MySql DB performance Anton A. Chuvakin (Feb 21)
  • <Possible follow-ups>
  • RE: ACID/MySql DB performance larosa, vjay (Feb 14)
    • Re: ACID/MySql DB performance Erick Mechler (Feb 14)
  • RE: ACID/MySql DB performance McPheeters, Scott (Feb 21)
    • Re: ACID/MySql DB performance Erick Mechler (Feb 21)
• IDS Policy Manager 1.3 Final Released! Jeff Dell (Feb 14)
• kazaa II dreamwvr () dreamwvr com (Feb 14)
• Snortcenter on Windows 2K Hess, Ben (Feb 14)
  • Re: Snortcenter on Windows 2K larc (Feb 18)
• ACID question .. David Alonso De La Vega Tapage (Feb 14)
  • Re: ACID question .. Erick Mechler (Feb 14)
  • <Possible follow-ups>
  • ACID question .. David Alonso De La Vega Tapage (Feb 18)
    • Re: ACID question .. Ken Gunderson (Feb 18)
• Re: ACID Question Marc Quibell (Feb 14)
• New User -- Ownership and Logging Questions Brian Dellinger (Feb 14)
  • Re: New User -- Ownership and Logging Questions Erek Adams (Feb 14)
• Snort/Acid/mysql working but my setup might have been worng... mike Hughes (Feb 14)
• RE: RE: Difficulty setting HOME_NET to my interface address L. Christopher Luther (Feb 14)
• Building RPM ? Brian Ipsen (Feb 15)
• New user -- Ownership and logging question Mystical Dluxe (Feb 15)
• Minimal Redhat 7.3 install Baeder, Jason (GXS) (Feb 15)
  • Re: Minimal Redhat 7.3 install Demetri Mouratis (Feb 15)
  • Re: Minimal Redhat 7.3 install Bennett Todd (Feb 16)
  • <Possible follow-ups>
  • RE: Minimal Redhat 7.3 install Baeder, Jason (GXS) (Feb 16)
    • Re: Minimal Redhat 7.3 install Ken Gunderson (Feb 16)
  • RE: Minimal Redhat 7.3 install Baeder, Jason (GXS) (Feb 17)
• What Rule?? Akerson, Jeff (Feb 15)
  • Re: What Rule?? Ueli Kistler (Feb 16)
  • Re: What Rule?? Jeff Nathan (Feb 16)
• False Portscan Alarms Charles Darwin (Feb 16)
• Possible bug in Snort 1.9 (with config alertfile) Charles Darwin (Feb 16)
  • <Possible follow-ups>
  • RE: Possible bug in Snort 1.9 (with config alertfile) L. Christopher Luther (Feb 17)
• snort -q Maarten de Vries (Feb 16)
  • Re: snort -q Nigel Houghton (Feb 17)
  • Re: snort -q Jacob Redding (Feb 17)
• Snort + Acid Number of alerts s s (Feb 16)
• Traffic anomaly: Summary Joerg Weber (Feb 17)
• Newbie: Snort on Win2K morrowd (Feb 17)
  • RE: Newbie: Snort on Win2K David Scott (Feb 17)
• Snort Rule Question Nick Patellis (Feb 17)
  • Re: Snort Rule Question Erick Mechler (Feb 17)
• Scan on tcp 13000 Bob Dehnhardt (Feb 17)
  • Re: [Snort-sigs] Scan on tcp 13000 Michael Scheidell (Feb 17)
    • Re: [Snort-sigs] Scan on tcp 13000 Jeff Kell (Feb 17)
• TimeStamp and Conf File Fine Tunning Help mike Hughes (Feb 17)
  • Re: TimeStamp and Conf File Fine Tunning Help Erek Adams (Feb 17)
  • <Possible follow-ups>
  • Re: TimeStamp and Conf File Fine Tunning Help pro0digy (Feb 17)
  • TimeStamp and Conf File Fine Tunning Help Pricher Jeffrey Contr AFCA/GCF (Feb 18)
• ACID-XML for Unix Released S. (Feb 18)
• No alerts: Good or bad Adam Shephard (Feb 18)
  • Re: No alerts: Good or bad Erek Adams (Feb 18)
    • Re: No alerts: Good or bad Adam Shephard (Feb 19)
      • Re: No alerts: Good or bad Erek Adams (Feb 19)
  • Re: No alerts: Good or bad Joerg Weber (Feb 18)
• Barnyard woes Joerg Weber (Feb 18)
  • Re: Barnyard woes Ken Gunderson (Feb 18)
    • Re: Barnyard woes Paul Schmehl (Feb 18)
  • Re: Barnyard woes Andrew R. Baker (Feb 18)
    • Re: Barnyard woes Ken Gunderson (Feb 19)
      • Re: Barnyard woes Andrew R. Baker (Feb 19)
      • Re: Barnyard woes Ken Gunderson (Feb 19)
      • Help! Very wierd traffic. Yonah Russ (Feb 19)
      • Re: Help! Very wierd traffic. Matt Kettler (Feb 19)
      • Re: Help! Very wierd traffic. Yonah Russ (Feb 19)
      • Re: Help! Very wierd traffic. Frank Knobbe (Feb 19)
• RE: Attention ALL Windows Users : How-To Install Re mote Sensors on Windows Running MySQL... Nall, Robert (Feb 18)
• RE: [Snort-sigs] Scan on tcp 13000 Scheidell (Feb 18)
  • <Possible follow-ups>
  • RE: Re: [Snort-sigs] Scan on tcp 13000 Everist, Benjamin S. (NASWI) (Feb 18)
  • RE: Re: [Snort-sigs] Scan on tcp 13000 Alex Polevoy (Feb 18)
  • RE: Re: [Snort-sigs] Scan on tcp 13000 Drew Stockman (Feb 18)
  • RE: Re: [Snort-sigs] Scan on tcp 13000 Miller, Eoin (Feb 18)
    • RE: Re: [Snort-sigs] Scan on tcp 13000 twig les (Feb 18)
• How to disable a single Rule for some Hosts? Christian Brem (Feb 18)
  • Re: How to disable a single Rule for some Hosts? Erek Adams (Feb 18)
  • <Possible follow-ups>
  • RE: How to disable a single Rule for some Hosts? McPheeters, Scott (Feb 18)
• Windows Binaries @ silicondefense.com ????? Dhruv Chandra (Feb 18)
  • Re: Windows Binaries @ silicondefense.com ????? Erek Adams (Feb 18)
  • Re: Windows Binaries @ silicondefense.com ????? Jim Hoagland (Feb 18)
• spaces in signature content fields? mike hsar (Feb 18)
  • Re: spaces in signature content fields? Erek Adams (Feb 18)
    • Re: spaces in signature content fields? mike hsar (Feb 18)
      • Re: spaces in signature content fields? Erek Adams (Feb 18)
      • Re: spaces in signature content fields? Brian (Feb 20)
• Oinkmaster v0.7 released. Andreas Östling (Feb 18)
• Trouble reporting snort logs to dshield in DSHIELD format. Charles Darwin (Feb 18)
  • <Possible follow-ups>
  • Trouble reporting snort logs to dshield in DSHIELD format. Paulo Santos Perneta (Feb 18)
• Snort order and stuff? Snow Jacob C KPWA (Feb 18)
  • Re: Snort order and stuff? twig les (Feb 18)
• Completely unscientific snort db performance test Derek Glidden (Feb 18)
  • Re: Completely unscientific snort db performance test Dirk Geschke (Feb 19)
• WinXP-1.9-MySQL-2 sensors, 1 collector and the 1067 error Ty Brewer (Feb 18)
  • RE: WinXP-1.9-MySQL-2 sensors, 1 collector and the 1067 error Michael Steele (Feb 18)
• Port 17300 scans Mark Scott (Feb 18)
• Lancope Stealthwatch Luo, Philip (Feb 18)
  • Re: Lancope Stealthwatch Martin Roesch (Feb 26)
• Centrally controlled log management server Perrymon, Josh L. (Feb 18)
  • Re: Centrally controlled log management server Bennett Todd (Feb 19)
• Sick baby pig... David A. Dorney (Feb 18)
  • <Possible follow-ups>
  • Re: Sick baby pig... pro0digy (Feb 18)
• Perimeter Defense Client Update David Scott (Feb 18)
• Silicon Defense - Some Browsing Disrupted - Read Now Michael Steele (Feb 18)
• WinXP-1.9-MySQL-2 sensors, 1 collector and the pro0digy (Feb 18)
  • RE: WinXP-1.9-MySQL-2 sensors, 1 collector and the Michael Steele (Feb 20)
  • <Possible follow-ups>
  • RE: WinXP-1.9-MySQL-2 sensors, 1 collector and the Hutchinson, Andrew (Feb 20)
• What do you with scan alerts pro0digy (Feb 18)
  • Re: What do you with scan alerts Erick Mechler (Feb 19)
  • Re: What do you with scan alerts Charles Darwin (Feb 20)
• Packet data disappears after installing Snort Center agent Yaakov Yehudi (Feb 19)
  • Re: Packet data disappears after installing Snort Center agent Charles Darwin (Feb 20)
• ACID and Internet Explorer 5.5 Michael (Feb 19)
  • Start snort deamon at boot time Michael (Feb 19)
    • Re: Start snort deamon at boot time Saad Kadhi (Feb 19)
    • Re: Start snort deamon at boot time larc (Feb 19)
  • Re: ACID and Internet Explorer 5.5 larc (Feb 19)
    • Re: ACID and Internet Explorer 5.5 Michael (Feb 19)
      • Re: ACID and Internet Explorer 5.5 larc (Feb 19)
      • Re: ACID and Internet Explorer 5.5 Michael (Feb 21)
• Snort Windows PRoblem MS.Dhiraj (Feb 19)
• ACID / GD on Windows [RMC-BKTKET4] Romulo M. Cholewa (Feb 19)
• Re: Start snort deamon at boot time Michael (Feb 19)
• pptp logging khaled bastaki (Feb 19)
  • Re: pptp logging Brian (Feb 19)
• RE: [Dshield] Port 17300 scans [snort-users-admin@l ists.sourceforge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List] Chan, Stephen (Singapore) (Feb 19)
• v1.9 log multiple alert packets Rich Adamson (Feb 19)
  • Re: v1.9 log multiple alert packets Chris Green (Feb 19)
  • <Possible follow-ups>
  • Re: v1.9 log multiple alert packets Margles Singleton (Feb 19)
• Telnet/SMTP stream reassembly Stefan Lundin (Feb 19)
• Oinkmaster 0.7 - better win32 support (still needs cygwin) Ueli Kistler (Feb 19)
• Horsepower Snow Jacob C KPWA (Feb 19)
  • Re: Horsepower James Hoagland (Feb 19)
  • Re: Horsepower Saad Kadhi (Feb 19)
• disabling promiscuous mode sniffing Rob Burris (Feb 19)
  • Re: disabling promiscuous mode sniffing twig les (Feb 19)
    • Re: disabling promiscuous mode sniffing Rob Burris (Feb 19)
  • Re: disabling promiscuous mode sniffing Nigel Houghton (Feb 19)
  • Re: disabling promiscuous mode sniffing Bennett Todd (Feb 20)
• New user - Doubt pavani garimella (Feb 19)
  • Re: New user - Doubt Erick Mechler (Feb 19)
• multiple content matches Travis S. (Feb 19)
  • Re: multiple content matches Ashley Thomas (Feb 19)
  • Re: multiple content matches Erek Adams (Feb 19)
  • Re: multiple content matches Chris Green (Feb 19)
  • <Possible follow-ups>
  • Re: multiple content matches Margles Singleton (Feb 19)
• logwatch reporting for snort Darrin Powell (Feb 19)
  • Re: logwatch reporting for snort Erek Adams (Feb 19)
• Unable to install snort Michael Hughes (Feb 19)
  • Re: Unable to install snort Matt Kettler (Feb 19)
  • <Possible follow-ups>
  • Re: Unable to install snort Michael Hughes (Feb 19)
    • Re: Unable to install snort Matt Kettler (Feb 19)
• database connect issue Saúl Bósquez (Feb 19)
  • <Possible follow-ups>
  • Re:database connect issue pro0digy (Feb 20)
    • Re: Re:database connect issue Saúl Bósquez (Mar 02)
      • Re: Re:database connect issue Erek Adams (Mar 03)
    • database connect issue Saul Bosquez (Mar 03)
      • Re: database connect issue Michael Boman (Mar 03)
      • Message not available
      • Re: database connect issue Michael Boman (Mar 03)
• Help with content rules looking for the absence of a hex pattern (large ICMP modification) Matt Kettler (Feb 19)
  • Re: Help with content rules looking for the absence of a hex pattern (large ICMP modification) Erick Mechler (Feb 20)
    • Re: Help with content rules looking for the absence of a hex pattern (large ICMP modification) Matt Kettler (Feb 20)
• Tagging doesn't set Sig name? Jason Haar (Feb 19)
  • Re: Tagging doesn't set Sig name? Erick Mechler (Feb 19)
    • Re: Tagging doesn't set Sig name? Jason Haar (Feb 19)
      • Re: Tagging doesn't set Sig name? Erick Mechler (Feb 19)
• [OT] Policy on broken vacation rules? Matt Kettler (Feb 19)
  • Re: [OT] Policy on broken vacation rules? Erek Adams (Feb 20)
    • Re: [OT] Policy on broken vacation rules? Matt Kettler (Feb 20)
• Application proxy firewall? Brian Conte (Feb 20)
  • Re: Application proxy firewall? Demetri Mouratis (Feb 20)
  • Re: Application proxy firewall? Erek Adams (Feb 20)
  • <Possible follow-ups>
  • RE: Application proxy firewall? Drew Stockman (Feb 20)
• Small comment to users of the modified oinkmaster perl script i posted on 20.2.2003 Ueli Kistler (Feb 20)
• alert notification mechanisms Ken Gunderson (Feb 20)
  • Re: alert notification mechanisms Erek Adams (Feb 20)
    • Re: alert notification mechanisms Ken Gunderson (Feb 20)
• Future Directions? Support for multi-channeled protocols? Jason Haar (Feb 20)
  • Re: Future Directions? Support for multi-channeled protocols? Martin Roesch (Feb 26)
• icmp-info.rules Petreski, Samuel (Feb 20)
  • Re: icmp-info.rules Erek Adams (Feb 20)
  • Re: icmp-info.rules James-lists (Feb 20)
  • Custom syn flood rule webcatalog (Feb 20)
  • <Possible follow-ups>
  • Re: icmp-info.rules pro0digy (Feb 21)
• 2 NIC card Chae Yew Chuen (Feb 20)
  • Re: 2 NIC card Stefan Lundin (Feb 21)
    • Re: 2 NIC card Edin Dizdarevic (Feb 21)
  • Re: 2 NIC card Bennett Todd (Feb 21)
  • <Possible follow-ups>
  • RE: 2 NIC card Miller, Eoin (Feb 21)
• Summarize alert Chae Yew Chuen (Feb 20)
• Problems with SnortCenter Jason Faulhefer (Feb 20)
  • <Possible follow-ups>
  • Problems with Snortcenter Jason Faulhefer (Feb 21)
    • Re: Problems with Snortcenter Erick Mechler (Feb 21)
  • Re: Problems with Snortcenter pro0digy (Feb 21)
• WEB-CLIENT javascript URL host spoofing attempt Schmehl, Paul L (Feb 20)
• Followup to rule 1841 - URL spoofing vulnerability Schmehl, Paul L (Feb 20)
• More sid 1841 Schmehl, Paul L (Feb 20)
  • <Possible follow-ups>
  • Re: More sid 1841 Kenneth G. Arnold (Feb 21)
  • Re: More sid 1841 Matt Kettler (Feb 21)
  • RE: More sid 1841 Schmehl, Paul L (Feb 21)
  • RE: More sid 1841 Matt Kettler (Feb 21)
    • RE: More sid 1841 --experimental? twig les (Feb 21)
      • RE: More sid 1841 -experimental? Matt Kettler (Feb 21)
    • Re: More sid 1841 Michael Boman (Feb 22)
      • Re: More sid 1841 Matt Kettler (Feb 22)
  • RE: More sid 1841 Matt Kettler (Feb 21)
  • RE: More sid 1841 Schmehl, Paul L (Feb 21)
  • RE: More sid 1841 Schmehl, Paul L (Feb 22)
• re: [Snort-announce] Oinkmaster v0.7 released. Charles Darwin (Feb 20)
  • Re: re: [Snort-announce] Oinkmaster v0.7 released. Chris Reid (Feb 21)
  • Re: re: [Snort-announce] Oinkmaster v0.7 released. Andreas Östling (Feb 21)
• several questions regarding snort sduckwal (Feb 20)
• Oinkmaster by Andreas Östling for Win32 - READMEwin32.txt Ueli Kistler (Feb 21)
• Detecting Broadcast with Snort Ramon Barquier (Feb 21)
  • Re: Detecting Broadcast with Snort Matt Kettler (Feb 21)
    • Re: Detecting Broadcast with Snort twig les (Feb 21)
      • Re: Detecting Broadcast with Snort Matt Kettler (Feb 21)
      • Re: Detecting Broadcast with Snort twig les (Feb 21)
      • Re: Detecting Broadcast with Snort Matt Kettler (Feb 21)
    • Re: Detecting Broadcast with Snort Gene Yoo (Feb 22)
      • Re: Detecting Broadcast with Snort Matt Kettler (Feb 22)
      • Re: Detecting Broadcast with Snort Frank Knobbe (Feb 22)
      • Re: Detecting Broadcast with Snort Gene Yoo (Feb 24)
  • <Possible follow-ups>
  • Re: Detecting Broadcast with Snort james (Feb 24)
• Test of post, my last post was hexed. argh Jason Faulhefer (Feb 21)
• Sensor Name fred . hinchcliffe (Feb 21)
  • Re: Sensor Name Erick Mechler (Feb 21)
  • <Possible follow-ups>
  • RE: Sensor Name Schmehl, Paul L (Feb 21)
  • Re: Sensor Name fred . hinchcliffe (Feb 21)
• RES: 2 NIC card [Snort-users] Romulo M. Cholewa (Feb 21)
  • Re: RES: 2 NIC card [Snort-users] Edin Dizdarevic (Feb 21)
• Doubt pavani garimella (Feb 21)
• DOS in Snort? Counselman, Chris Contractor/Sverdrup (Feb 21)
  • Re: DOS in Snort? Erick Mechler (Feb 21)
    • Re: DOS in Snort? Shane Williams (Feb 21)
  • Re: DOS in Snort? Brian (Feb 21)
• Mysql Integeration Jayachandran.K (Feb 21)
  • Re: Mysql Integeration Kenneth G. Arnold (Feb 21)
  • <Possible follow-ups>
  • Re: Mysql Integeration pro0digy (Feb 21)
• Anti Virus Protection vs. Intrusion Detection John (Feb 21)
  • Re: Anti Virus Protection vs. Intrusion Detection Kenneth G. Arnold (Feb 21)
  • <Possible follow-ups>
  • Re: Anti Virus Protection vs. Intrusion Detection John (Feb 22)
• Barnyard for Windows 2k Jason Linden (Feb 21)
• optimize MYSQL + ACID Pete Davis (Feb 21)
  • Re: optimize MYSQL + ACID Erick Mechler (Feb 21)
  • <Possible follow-ups>
  • RE: optimize MYSQL + ACID Hutchinson, Andrew (Feb 21)
  • RE: optimize MYSQL + ACID Hutchinson, Andrew (Feb 21)
    • Re: optimize MYSQL + ACID Erick Mechler (Feb 21)
• Pass rules Pete Davis (Feb 21)
  • Re: Pass rules Matt Kettler (Feb 21)
  • <Possible follow-ups>
  • RE: Pass rules Steve Halligan (Feb 22)
• Unknown Sensor James M. Driskell (Feb 21)
  • <Possible follow-ups>
  • RE: Unknown Sensor Schmehl, Paul L (Feb 21)
• MySQL on redhat linux 7.2 Aaron Babalola (Feb 22)
• duplicate preprocessor error Ted Llewellyn (Feb 22)
  • Re: duplicate preprocessor error Erek Adams (Feb 22)
  • Re: duplicate preprocessor error Andrew R. Baker (Feb 22)
    • Re: duplicate preprocessor error Ted Llewellyn (Feb 22)
      • Re: duplicate preprocessor error Andrew R. Baker (Feb 22)
      • Re: duplicate preprocessor error Jim Hoagland (Feb 23)
    • duplicate preprocessor error fixed Ted Llewellyn (Feb 22)
• Stealth Interface on Redhat 8.0, 7.2, or 6.0??? Mike Chandler (Feb 22)
  • Re: Stealth Interface on Redhat 8.0, 7.2, or 6.0??? Edin Dizdarevic (Feb 22)
  • Re: Stealth Interface on Redhat 8.0, 7.2, or 6.0??? Demetri Mouratis (Feb 23)
• Using an IDS to redirect hostile traffic to a Honeypot Jack Whitsitt (jofny) (Feb 22)
  • <Possible follow-ups>
  • Using an IDS to redirect hostile traffic to a Honeypot Jack Whitsitt (jofny) (Feb 24)
• Potential MySQL problem? [RMC-N2XAG14] Romulo M. Cholewa (Feb 23)
• Re: Snort-users digest, Vol 1 #2825 - 12 msgs Pete Davis (Feb 23)
• SNMP alert Chae Yew Chuen (Feb 23)
• abnormal spade behavior! Mahdi Kefayati (Feb 24)
  • Re: abnormal spade behavior! James Hoagland (Feb 24)
  • <Possible follow-ups>
  • Fwd: Re: abnormal spade behavior! Mahdi Kefayati (Feb 25)
• Help with web servers Sébastien Bisoglio (Feb 24)
  • Re: Help with web servers Matt Kettler (Feb 24)
    • Message not available
      • Re: Help with web servers Matt Kettler (Feb 24)
• startingsnort Dinesh Raj (Feb 24)
• Cannot connect remote sensor to mysql . (Feb 24)
  • Signatures for WORM_LOVEGATE.C Sam Evans (Feb 24)
• Home and External networks fred . hinchcliffe (Feb 24)
  • <Possible follow-ups>
  • Re: Home and External networks pro0digy (Feb 24)
  • RE: Home and External networks L. Christopher Luther (Feb 24)
• Help for web server Sébastien Bisoglio (Feb 24)
• spp_fnord Alerts Galore Joe Giles (Feb 24)
  • <Possible follow-ups>
  • spp_fnord Alerts Galore Joe Giles (Feb 25)
    • Re: spp_fnord Alerts Galore Matt Kettler (Feb 25)
    • Re: spp_fnord Alerts Galore Dragos Ruiu (Feb 28)
• How do I clean up when ACID fails like this? Aaron The Young (Feb 24)
  • Re: How do I clean up when ACID fails like this? Ken Gunderson (Feb 24)
  • Re: How do I clean up when ACID fails like this? Demetri Mouratis (Feb 24)
  • Re: How do I clean up when ACID fails like this? Kenneth G. Arnold (Feb 24)
  • Re: How do I clean up when ACID fails like this? Jon (Feb 24)
  • <Possible follow-ups>
  • RE: How do I clean up when ACID fails like this? McPheeters, Scott (Feb 24)
  • RE: How do I clean up when ACID fails like this? Hutchinson, Andrew (Feb 24)
• Delete or Save Snow Jacob C KPWA (Feb 24)
• ACID, MySQL, Apache, Snort - Access Error Snow Jacob C KPWA (Feb 24)
  • Re: ACID, MySQL, Apache, Snort - Access Error Steve Suehring (Feb 25)
  • <Possible follow-ups>
  • RE: ACID, MySQL, Apache, Snort - Access Error Snow Jacob C KPWA (Feb 25)
  • RE: ACID, MySQL, Apache, Snort - Access Error kerberos K (Feb 27)
• RE: Problem with IDSCenter log rotator - sharing violation Daniel Ng (Feb 24)
  • <Possible follow-ups>
  • RE: Problem with IDSCenter log rotator - sharing violation L. Christopher Luther (Feb 25)
• unusual alert destination Rob Burris (Feb 24)
• Hogwash control? (Newbie question) Lei Zhang (Feb 25)
• Packet query honey grp (Feb 25)
  • <Possible follow-ups>
  • Re: Packet query honey grp (Feb 25)
    • Re: Packet query Ashley Thomas (Feb 25)
• stream4 performance problems Edin Dizdarevic (Feb 25)
  • Re: stream4 performance problems Martin Roesch (Feb 26)
    • Re: stream4 performance problems Edin Dizdarevic (Feb 27)
      • Re: stream4 performance problems Martin Roesch (Feb 27)
      • Re: stream4 performance problems Edin Dizdarevic (Feb 27)
      • Re: stream4 performance problems Erek Adams (Feb 27)
      • Re: stream4 performance problems Chris Green (Feb 27)
      • Re: stream4 performance problems Martin Roesch (Mar 03)
      • Re: stream4 performance problems Edin Dizdarevic (Mar 03)
      • Re: stream4 performance problems Martin Roesch (Mar 16)
• BAD TRAFFIC data in TCP SYN packet John York (Feb 25)
  • <Possible follow-ups>
  • RE: BAD TRAFFIC data in TCP SYN packet Keith Pachulski (Feb 25)
    • Re: BAD TRAFFIC data in TCP SYN packet Phil Wood (Feb 25)
    • Re: BAD TRAFFIC data in TCP SYN packet Brian (Feb 26)
  • BAD TRAFFIC data in TCP SYN packet Ron Shuck (Feb 25)
  • RE: BAD TRAFFIC data in TCP SYN packet Coyle, Brian (Feb 25)
  • RE: BAD TRAFFIC data in TCP SYN packet John York (Feb 25)
  • RE: BAD TRAFFIC data in TCP SYN packet John York (Feb 25)
• Snort Remote Database Support Eirea, Maria (ITD) (Feb 25)
• Standard packet representation? John Cherbini (Feb 25)
• Common false positives John Cherbini (Feb 25)
  • Re: Common false positives Matt Kettler (Feb 25)
  • Re: Common false positives Bennett Todd (Feb 25)
  • <Possible follow-ups>
  • RE: Common false positives Schmehl, Paul L (Feb 25)
• Snort output plugins query honey grp (Feb 25)
  • Re: Snort output plugins query James Hoagland (Feb 25)
  • Re: Snort output plugins query Matt Kettler (Feb 25)
  • Re: Snort output plugins query Jack Whitsitt (jofny) (Feb 25)
• uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 25)
  • Re: uricontent option in 1.9 vs 1.8.6 Joe McAlerney (Feb 25)
    • Advice from the experts Mike Koponick (Feb 25)
      • Re: Advice from the experts twig les (Feb 26)
    • Re: uricontent option in 1.9 vs 1.8.6 Erek Adams (Feb 26)
    • Re: uricontent option in 1.9 vs 1.8.6 Brian (Feb 26)
      • Re: uricontent option in 1.9 vs 1.8.6 Chris Green (Feb 26)
  • <Possible follow-ups>
  • RE: uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 26)
    • RE: uricontent option in 1.9 vs 1.8.6 Erek Adams (Feb 26)
    • Re: uricontent option in 1.9 vs 1.8.6 Brian (Feb 26)
  • uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 26)
  • RE: uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 26)
    • Re: uricontent option in 1.9 vs 1.8.6 Chris Green (Feb 26)
  • RE: uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 26)
  • RE: uricontent option in 1.9 vs 1.8.6 David Gordon (Feb 26)
• Attention ALL Windows Users : Install Complete IDS Solution on Windows - Major Update! Michael Steele (Feb 25)
• How's best to alert on Web connections that *don't* contain particular content? Jason Haar (Feb 25)
  • Re: How's best to alert on Web connections that *don't* contain particular content? Kenneth G. Arnold (Feb 25)
    • Re: How's best to alert on Web connections that *don't* contain particular content? Jason Haar (Feb 25)
      • Re: How's best to alert on Web connections that *don't* contain particular content? Phil Wood (Feb 25)
      • Re: How's best to alert on Web connections that *don't* contain particular content? Frank Knobbe (Feb 26)
  • Re: How's best to alert on Web connections that *don't* contain particular content? Brian (Feb 26)
  • Re: How's best to alert on Web connections that *don't* contain particular content? Martin Roesch (Feb 26)
    • Re: How's best to alert on Web connections that *don't* contain particular content? Jason Haar (Feb 27)
  • <Possible follow-ups>
  • RE: How's best to alert on Web connections that *don't* contain particular content? Schmehl, Paul L (Feb 25)
    • Re: How's best to alert on Web connections that *don't* contain particular content? Jason Haar (Feb 25)
• rule parser and escaped characters Chris Clark (Feb 25)
  • Re: rule parser and escaped characters Chris Green (Feb 25)
    • RE: rule parser and escaped characters Chris Clark (Mar 01)
      • Re: rule parser and escaped characters Brian (Mar 03)
• Notification on Alert Joerg Weber (Feb 26)
  • <Possible follow-ups>
  • RE: Notification on Alert Schmehl, Paul L (Feb 26)
• Problem and tip Sébastien Bisoglio (Feb 26)
  • <Possible follow-ups>
  • Problem and tip jeremy chartier (Feb 26)
• Configuring snort with snmp on windows rajat khatri (Feb 26)
• Errors accessing mysql Comcast (Feb 26)
  • <Possible follow-ups>
  • Re: Errors accessing mysql Kenton Smith (Feb 26)
• File Size Limit SNORT in Logging Mode Wiley, Rob (Feb 26)
  • Re: File Size Limit SNORT in Logging Mode Erek Adams (Feb 26)
  • Re: File Size Limit SNORT in Logging Mode Erick Mechler (Feb 26)
• WTF happened to snort Gabriel Mino (Feb 26)
  • RE: WTF happened to snort Michael Steele (Feb 26)
  • <Possible follow-ups>
  • RE: WTF happened to snort Gabriel Mino (Feb 26)
    • Re: WTF happened to snort Jason (Feb 26)
    • RE: Nothing happened to snort twig les (Feb 26)
• RE: Nothing happened to snort Gabriel Mino (Feb 26)
• fast logging Always Bishan (Feb 27)
  • Re: fast logging Bamm Visscher (Feb 27)
  • Re: fast logging Martin Roesch (Feb 27)
    • Re: fast logging Always Bishan (Feb 27)
• Error handling detection of Back Orifice Daniel Ng (Feb 27)
• Another uricontent question Lawrence Reed (Feb 27)
  • Re: Another uricontent question Chris Green (Feb 27)
• Hotmail .eml "shell script" Grime, Richard S (Feb 27)
• IDS Company Policy/Guidelines Maynard, Jeff S. (Feb 27)
• Snortcenter + Acid + MySQL + $portscan_file Read, Andrew (Feb 27)
• another content Aditya (Feb 27)
• Anybody been seeing this / What is it. David E. Gianndrea (Feb 27)
  • Re: Anybody been seeing this / What is it. twig les (Feb 27)
    • Re: Anybody been seeing this / What is it. David E. Gianndrea (Feb 27)
• distance/within? Aditya (Feb 27)
  • Re: distance/within? Chris Green (Feb 27)
• FYI and help -- Bad alerts Lawrence Reed (Feb 27)
• Multiple Snort Instances Demetri Mouratis (Feb 27)
  • Re: Multiple Snort Instances Erek Adams (Feb 27)
  • RE: Multiple Snort Instances Mike Koponick (Feb 27)
    • RE: Multiple Snort Instances Erek Adams (Feb 27)
  • <Possible follow-ups>
  • RE: Multiple Snort Instances Eric Joe (Feb 27)
  • RE: Multiple Snort Instances McPheeters, Scott (Feb 27)
  • RE: Multiple Snort Instances Williams Jon (Feb 28)
    • RE: Multiple Snort Instances Demetri Mouratis (Feb 28)
• Automatic blocking with OpenBSD's pf dynamic rules. Xavier Guilbeault (Feb 27)
  • Re: Automatic blocking with OpenBSD's pf dynamic rules. Matt Kettler (Feb 27)
• Logging to both the Alert Log file and a SYSLOG Server Chris Christianson (Feb 27)
  • Re: Logging to both the Alert Log file and a SYSLOG Server Erek Adams (Feb 27)
• Silly Question... Bob McDowell (Feb 27)
• Snortcenter - curl: (7) socket error: 111 Michael Hughes (Feb 27)
• alert and Log Clayton Mascasrenhas (Feb 27)
  • Re: alert and Log Erek Adams (Feb 27)
• FW: Phone alerting Jan van den Berg (Feb 27)
• (spp_portscan2) Portscan detected Clayton Mascasrenhas (Feb 27)
  • Re: (spp_portscan2) Portscan detected Ashley Thomas (Feb 27)
  • Re: (spp_portscan2) Portscan detected Erick Mechler (Feb 27)
  • Re: (spp_portscan2) Portscan detected Saad Kadhi (Feb 28)
• alert (spp_portscan2) Portscan Always Bishan (Feb 28)
  • <Possible follow-ups>
  • alert (spp_portscan2) Portscan Always Bishan (Feb 28)
• Logging all packet to mysql Armando José Martins de Oliveira (Feb 28)
  • Re: Logging all packet to mysql Erek Adams (Feb 28)
• Executing a script in snort MS.Dhiraj (Feb 28)
  • Re: Executing a script in snort Erek Adams (Feb 28)
• snort, nessus and teardrop Svein Erik Søberg (Feb 28)
  • Re: snort, nessus and teardrop Erek Adams (Feb 28)
  • <Possible follow-ups>
  • RE: snort, nessus and teardrop Svein Erik Søberg (Feb 28)
• Signature for IPSec encrypted VPN tunnel NTD (Feb 28)
  • Re: Signature for IPSec encrypted VPN tunnel Brian (Mar 01)
  • Re: Signature for IPSec encrypted VPN tunnel Matt Kettler (Mar 03)
    • Re: Signature for IPSec encrypted VPN tunnel Brian (Mar 04)
• (OT) Kudos to the Snort Users List Participants Doctor Hacker (Feb 28)
• Snort signautures SUDAGER BILKHU (Feb 28)
  • Re: Snort signautures Erick Mechler (Feb 28)
  • Re: Snort signautures Erek Adams (Feb 28)
  • Re: Snort signautures (understanding snort output) Matt Kettler (Feb 28)
• snort compilation on Tru Unix 4.0G System Operations (Feb 28)
  • Re: snort compilation on Tru Unix 4.0G sam (Feb 28)
    • Re: snort compilation on Tru Unix 4.0G Erek Adams (Mar 03)
    • Re: snort compilation on Tru Unix 4.0G System Operations (Mar 03)
  • Re: snort compilation on Tru Unix 4.0G Jeff Nathan (Mar 04)
    • Re: snort compilation on Tru Unix 4.0G System Operations (Mar 06)
      • Re: snort compilation on Tru Unix 4.0G Jeff Nathan (Mar 06)
  • Re: snort compilation on Tru Unix 4.0G Chris Green (Mar 06)
    • Re: snort compilation on Tru Unix 4.0G System Operations (Mar 07)
• Alerts, Logged and Passed Clayton Mascasrenhas (Feb 28)
  • Re: Alerts, Logged and Passed Erek Adams (Feb 28)
    • Re: Alerts, Logged and Passed Clayton Mascarenhas (Feb 28)
      • Re: Alerts, Logged and Passed Erek Adams (Feb 28)
      • Re: Alerts, Logged and Passed Clayton Mascarenhas (Feb 28)
      • Re: Alerts, Logged and Passed Erek Adams (Feb 28)
• Unable to receive alerts Sadanapalli, Pradeep Kumar (MED, TCS) (Feb 28)
  • Re: Unable to receive alerts Joe Giles (Feb 28)
  • <Possible follow-ups>
  • RE: Unable to receive alerts Sadanapalli, Pradeep Kumar (MED, TCS) (Feb 28)
    • RE: Unable to receive alerts Joe Giles (Feb 28)
    • RE: Unable to receive alerts Erek Adams (Feb 28)
• scan file Clayton Mascarenhas (Feb 28)
  • Re: scan file Paul Schmehl (Feb 28)
• Running snort in daemon mode disables network connection Sadanapalli, Pradeep Kumar (MED, TCS) (Feb 28)
  • Re: Running snort in daemon mode disables network connection Erek Adams (Feb 28)
• Preprocessor options documentation Paul Schmehl (Feb 28)
  • Re: Preprocessor options documentation Erek Adams (Feb 28)
  • <Possible follow-ups>
  • RE: Preprocessor options documentation Schmehl, Paul L (Feb 28)
• RE: Running snort in daemon mode disables network c onnection Sadanapalli, Pradeep Kumar (MED, TCS) (Feb 28)
  • RE: Running snort in daemon mode disables network c onnection Erek Adams (Mar 03)
• Libnet broken on FBSD? can't compile 1.9 stable? Michael Scheidell (Feb 28)
  • Re: Libnet broken on FBSD? can't compile 1.9 stable? Erick Mechler (Feb 28)
  • <Possible follow-ups>
  • RE: Libnet broken on FBSD? can't compile 1.9 stable? Scheidell (Mar 03)
    • Re: Libnet broken on FBSD? can't compile 1.9 stable? Erick Mechler (Mar 01)
    • RE: Libnet broken on FBSD? can't compile 1.9 stable? Jeff Nathan (Mar 04)
      • Re: Libnet broken on FBSD? can't compile 1.9 stable? Erick Mechler (Mar 05)
      • Re: Libnet broken on FBSD? can't compile 1.9 stable? Jeff Nathan (Mar 05)
  • RE: Libnet broken on FBSD? can't compile 1.9 stable? Scheidell (Mar 04)
• Spade Alerts Mahdi Kefayati (Mar 01)
  • Re: Spade Alerts James Hoagland (Mar 01)
• Snort Error Message Using spade configuration Mahdi Kefayati (Mar 01)
  • Re: Snort Error Message Using spade configuration James Hoagland (Mar 01)
    • Re: Snort Error Message Using spade configuration Mahdi Kefayati (Mar 02)
      • Re: Snort Error Message Using spade configuration James Hoagland (Mar 06)
• Snort 1.9 and spp_portscan2 Vlad Gavrila (Mar 02)
  • Re: Snort 1.9 and spp_portscan2 Erek Adams (Mar 03)
    • Re: Snort 1.9 and spp_portscan2 Vlad Gavrila (Mar 03)
  • <Possible follow-ups>
  • Re:Snort 1.9 and spp_portscan2 Always Bishan (Mar 03)
• Distributed Barnyard deployment KD Rajkumar (Mar 03)
  • Re: Distributed Barnyard deployment Andrew R. Baker (Mar 05)
  • <Possible follow-ups>
  • Re: Distributed Barnyard deployment KD Rajkumar (Mar 05)
    • Re: Distributed Barnyard deployment Andrew R. Baker (Mar 05)
• Please comment on suggested architecture.. KD Rajkumar (Mar 03)
• Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)
  • <Possible follow-ups>
  • RE: Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)
  • RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
    • RE: Problem with MYSQL/ACID And Large Database Paul Schmehl (Mar 03)
  • Re: Problem with MYSQL/ACID And Large Database Kenneth G. Arnold (Mar 03)
  • RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
  • RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
  • RE: Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)
• [greg.morris () sourcefire com: Snort Mitigation and Patch Notification] Karl A. Krueger (Mar 03)
  • Re: [greg.morris () sourcefire com: Snort Mitigation and Patch Notification] Matt Kettler (Mar 03)
• SNORT INstallation :Mysql.sock missing Subir Kumar (Mar 03)
• Snort 1.9.1 available (please upgrade) Martin Roesch (Mar 03)
• [Snort-2003-001] Buffer overflow in Snort RPC preprocessor Martin Roesch (Mar 03)
  • RE: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor Gregory W. Ratcliff (Mar 03)
    • Re: [Snort-2003-001] Buffer overflow in Snort RPC preprocessor Joseph Gresham (Mar 03)
• Re: Snort Inline Bridge webcatalog (Mar 03)
• Snort tool for alert analysis Clayton Mascarenhas (Mar 03)
  • Re: Snort tool for alert analysis Dragos Ruiu (Mar 05)
  • <Possible follow-ups>
  • Re: Snort tool for alert analysis Miguel Rosales (Mar 03)
    • Re: Snort tool for alert analysis jeremy chartier (Mar 04)
• Question about hardware needs Robert Casto (Mar 03)
• Interesting question Luo, Philip (Mar 03)
  • Re: Interesting question Brian (Mar 07)
• RE: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Slighter, Tim (Mar 03)
  • Re: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Martin Roesch (Mar 03)
  • Re: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Michael Anderson (Mar 03)
  • Re: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Bennett Todd (Mar 03)
• Follow-up Slighter, Tim (Mar 03)
  • Re: Follow-up Bennett Todd (Mar 03)
  • Re: Follow-up Martin Roesch (Mar 04)
• 1.9.1 MySQL Connectivity Issue? Bradley, Paul (Mar 03)
• RE: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Slighter, Tim (Mar 03)
  • <Possible follow-ups>
  • RE: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Slighter, Tim (Mar 03)
    • Re: [Snort-2003-001] Buffer overflow in Snort RPC p reprocessor Michael Anderson (Mar 03)
• New build error Slighter, Tim (Mar 03)
• Rule Problems - Snort 1.9.0 Pete Blessing (Mar 03)
• Rule problems Pete Blessing (Mar 03)
  • Re: Rule problems Erek Adams (Mar 03)
• Portscan Error (SnortCenter + ACID) Read, Andrew (Mar 03)
  • Re: Portscan Error (SnortCenter + ACID) Erek Adams (Mar 04)
• rpc exploit? Michael Anderson (Mar 03)
• SMB alerts doesn't work. Jimmy Hernandez (Mar 03)
  • Re: SMB alerts doesn't work. Erek Adams (Mar 04)
  • <Possible follow-ups>
  • RE: SMB alerts doesn't work. Bryce Stenberg (Mar 03)
• snort 1.9.x still holds fd open on sighup Michael Scheidell (Mar 03)
  • Re: snort 1.9.x still holds fd open on sighup Jeff Nathan (Mar 04)
• RED ALERT - ALL Windows Users : Snort 1.9.1 b231 is now available for downloading Michael Steele (Mar 03)
• snort tcp session reassembly gupta_sonali (Mar 04)
  • Re: snort tcp session reassembly Erek Adams (Mar 04)
• ACID/ACID-XML Sleepy (Mar 04)
• Email Alerts Dinesh Raj (Mar 04)
  • <Possible follow-ups>
  • email alerts Dinesh Raj (Mar 04)
    • Re: email alerts Erek Adams (Mar 04)
  • Re: email alerts Petriz, Pablo (Mar 04)
    • Re: email alerts Jason Haar (Mar 04)
• Snort http_decode preprocessor Ralph Zimmermann (Mar 04)
  • Re: Snort http_decode preprocessor Joerg Weber (Mar 04)
  • Re: Snort http_decode preprocessor Erek Adams (Mar 04)
  • <Possible follow-ups>
  • RE: Snort http_decode preprocessor Ralph Zimmermann (Mar 04)
• mysql priority change Fred Poelma (xsx4all) (Mar 04)
• [ANN] HenWen 1.3.2 Nick Zitzmann (Mar 04)
• RPC decoder overflow in snort-inline and hogwash William_Metcalf (Mar 04)
  • Re: RPC decoder overflow in snort-inline and hogwash Chris Green (Mar 04)
• segmentation fault when logging snort Gross Barry D. (Mar 04)
  • Re: segmentation fault when logging snort Erek Adams (Mar 04)
• ip_src in iphder? Paul Schmehl (Mar 04)
  • Re: ip_src in iphder? Bamm Visscher (Mar 04)
  • <Possible follow-ups>
  • RE: ip_src in iphder? Kreimendahl, Chad J (Mar 04)
• Re: Snort1.9 TCPdump output file format Ken Connelly (Mar 04)
• SnortCenter Multiple Local sensors Read, Andrew (Mar 04)
  • <Possible follow-ups>
  • RE: SnortCenter Multiple Local sensors Read, Andrew (Mar 04)
• Snort alert ANTONIO GUTIERREZ (Mar 04)
• ACID Saúl Bósquez (Mar 04)
  • <Possible follow-ups>
  • Re: ACID kerberos K (Mar 04)
  • ACID Master Brian (Mar 31)
    • Re: ACID Patrick S. Harper (Mar 31)
      • Re: ACID Master Brian (Mar 31)
      • Re: ACID Paul Schmehl (Mar 31)
• Snort 1.9.1 RCP preprocessor pretty noisy Jason Haar (Mar 04)
• Snort as Network Intrusion Detection system - Help Needed Sadanapalli, Pradeep Kumar (MED, TCS) (Mar 04)
  • Re: Snort as Network Intrusion Detection system - Help Needed Erek Adams (Mar 04)
    • Re: Snort as Network Intrusion Detection system - Help Needed Paul Schmehl (Mar 04)
• WARNING: unknown output plugin: 'database' ipwitch (Mar 04)
  • <Possible follow-ups>
  • RE: WARNING: unknown output plugin: 'database' Slighter, Tim (Mar 05)
    • RE: WARNING: unknown output plugin: 'database' Richard Silver (Mar 13)
• Acid not Console not opening up properly.... mike Hughes (Mar 04)
  • Re: Acid not Console not opening up properly.... Michael Boman (Mar 04)
  • <Possible follow-ups>
  • Re: Acid not Console not opening up properly.... mike Hughes (Mar 04)
    • Re: Acid not Console not opening up properly.... Michael Boman (Mar 04)
• Win32 Snort-1.9.1 installer available at snort.org Martin Roesch (Mar 04)
  • RE: Win32 Snort-1.9.1 installer available at snort.org Michael Steele (Mar 04)
• snort 1.9.1 with redhat 8.0 and libnet 1.0.2.a Jason Romo (Mar 05)
  • Re: snort 1.9.1 with redhat 8.0 and libnet 1.0.2.a Jeff Nathan (Mar 06)
    • Re: snort 1.9.1 with redhat 8.0 and libnet 1.0.2.a Dragos Ruiu (Mar 06)
  • Re: snort 1.9.1 with redhat 8.0 and libnet 1.0.2.a Jason Romo (Mar 08)
    • Re: Re: snort 1.9.1 with redhat 8.0 and libnet 1.0.2.a Jeff Nathan (Mar 11)
• problem with the update script mostafa ibrahim (Mar 05)
• snort-inline missing Jochen Vogel (Mar 05)
  • Re: snort-inline missing Vlad Gavrila (Mar 05)
• Rule for sendmail-exploit Joerg Weber (Mar 05)
  • Re: Rule for sendmail-exploit Elvir Crnic (Mar 05)
• AW: snort-inline missing Jochen Vogel (Mar 05)
• Release of snort_inline-1.9.1 Rob McMillen (Mar 05)
• snort & sql Jeremy Rodriguez (Mar 05)
  • Re: snort & sql Erek Adams (Mar 05)
    • Re: snort & sql César Augusto Rojas Sierra (Mar 05)
  • <Possible follow-ups>
  • RE: snort & sql McPheeters, Scott (Mar 05)
  • RE: snort & sql Morgan R. Elmore (Mar 05)
    • RE: snort & sql Jason Romo (Mar 05)
  • RE: snort & sql McPheeters, Scott (Mar 05)
• Run an external program Gregory . Kane (Mar 05)
  • Re: Run an external program Erek Adams (Mar 05)
    • Re: Run an external program Bennett Todd (Mar 05)
      • Re: Run an external program Jack Whitsitt (jofny) (Mar 05)
      • Re: Run an external program Bennett Todd (Mar 05)
      • Re: Run an external program Jack Whitsitt (jofny) (Mar 05)
      • Re: Run an external program Erek Adams (Mar 05)
      • Re: Run an external program Bennett Todd (Mar 05)
      • Re: Run an external program Erek Adams (Mar 05)
      • Re: Run an external program Bennett Todd (Mar 05)
  • Re: Run an external program Bennett Todd (Mar 05)
• JpGraph license concern William . Noble (Mar 05)
• snort chroot sock error workarounds dreamwvr () dreamwvr com (Mar 05)
• (spp_asn1) ASN.1 spec violation, possible overflow Maynard, Jeff S. (Mar 05)
  • Re: (spp_asn1) ASN.1 spec violation, possible overflow Erek Adams (Mar 07)
• Trouble with ACID and the Back button Chris Eidem (Mar 05)
  • Re: Trouble with ACID and the Back button Michael Anderson (Mar 05)
    • Re: Trouble with ACID and the Back button Robby Desmond (Mar 06)
• tell the number of packets before triggering Marius Stefan (Mar 05)
• Snort Tools available Jan van den Berg (Mar 05)
  • Re: Snort Tools available Carl Gibbons (Mar 06)
  • <Possible follow-ups>
  • RE: Snort Tools available Lanny Trager (Mar 05)
    • Re: RE: Snort Tools available Carl Gibbons (Mar 06)
• question Jose Ramon Hernandez Macias (Mar 05)
  • Re: question Erek Adams (Mar 05)
  • <Possible follow-ups>
  • Question Corrado Federici (Mar 13)
  • Question Corrado Federici (Mar 13)
    • Re: Question (about Content-List) Matt Kettler (Mar 13)
• Snort v2 - syslog "-s 127.0.0.1" not working Rich Adamson (Mar 05)
  • Re: Snort v2 - syslog "-s 127.0.0.1" not working Chris Green (Mar 10)
    • Re: Snort v2 - syslog "-s 127.0.0.1" not working Rich Adamson (Mar 12)
• eth1 interface Saúl Bósquez (Mar 05)
  • Re: eth1 interface Erek Adams (Mar 05)
  • RE: eth1 interface Mike Koponick (Mar 05)
  • <Possible follow-ups>
  • RE: eth1 interface McPheeters, Scott (Mar 05)
• Ignored x duplicate alerts (ACID, MySQL, Snort 1.9.x) FWAdmin (Mar 05)
• Specific IP rule sets Nall, Robert (Mar 05)
  • <Possible follow-ups>
  • Re: Specific IP rule sets Matt Kettler (Mar 05)
• snort chroot env mysql setup dreamwvr () dreamwvr com (Mar 05)
• Have snort execute a command when matching a rule? Richard Compton (Mar 05)
  • RE: Have snort execute a command when matching a rule? Mike Koponick (Mar 05)
  • Re: Have snort execute a command when matching a rule? Matt Kettler (Mar 05)
• spp_rpc_decode Demetri Mouratis (Mar 05)
  • <Possible follow-ups>
  • Re: spp_rpc_decode Kenneth G. Arnold (Mar 05)
• Vulnerability in ftp honey grp (Mar 05)
  • <Possible follow-ups>
  • RE: Vulnerability in ftp Lars Troen (Mar 06)
• ACID not working Saúl Bósquez (Mar 05)
• snort-inline redhat 8.0 William_Metcalf (Mar 05)
• Aurora Linux success? Walter B. Burke (Mar 05)
  • Re: [aurora-sparc-user] Aurora Linux success? Naresh (Mar 06)
• rules ? Charles Ballowe (Mar 05)
  • Re: rules ? Matt Kettler (Mar 05)
• snort and gaultlet steve nutt (Mar 05)
  • <Possible follow-ups>
  • Snort and Gaultlet steve nutt (Mar 05)
    • Re: Snort and Gaultlet James Hoagland (Mar 06)
      • Snort Glitch perhaps Allan (Mar 06)
      • Re: Snort Glitch perhaps Erek Adams (Mar 06)
      • Re: Snort Glitch perhaps twig les (Mar 06)
      • Re: Snort Glitch perhaps Jason Haar (Mar 06)
• Detecting Unicode attacks Daniel Ng (Mar 05)
• My settings and output of 3 test on snort, is this normal? mike Hughes (Mar 06)
  • Re: My settings and output of 3 test on snort, is this normal? Bamm Visscher (Mar 06)
  • <Possible follow-ups>
  • Re: My settings and output of 3 test on snort, is this normal? mike Hughes (Mar 06)
    • Re: My settings and output of 3 test on snort, is this normal? Erek Adams (Mar 06)
    • Re: My settings and output of 3 test on snort, is this normal? Nigel Houghton (Mar 10)
• Snort pattern matching weirdness. larosa, vjay (Mar 06)
  • <Possible follow-ups>
  • RE: Snort pattern matching weirdness. larosa, vjay (Mar 06)
  • RE: Snort pattern matching weirdness. larosa, vjay (Mar 07)
• classification types Ken Connelly (Mar 06)
• disabling the new spew of spp_rpc_decode alerts AppleAnnie331 (Mar 06)
  • <Possible follow-ups>
  • Re: disabling the new spew of spp_rpc_decode alerts AppleAnnie331 (Mar 06)
    • Re: disabling the new spew of spp_rpc_decode alerts Jason Haar (Mar 06)
      • ports running RPC svcs (was Re: disabling the new spew of spp_rpc_decode alerts) Bennett Todd (Mar 07)
• ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed? Ryan Barrett (Mar 06)
  • <Possible follow-ups>
  • RE: ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed? Schmehl, Paul L (Mar 06)
• Fragmented RPC Records John Hally (Mar 06)
  • <Possible follow-ups>
  • RE: Fragmented RPC Records Cloppert, Michael (Mar 25)
• Snort problems Adam Kennedy (Mar 06)
  • Re: Snort problems Erick Mechler (Mar 06)
  • Re: Snort problems Erek Adams (Mar 06)
    • Re: Snort problems Adam Kennedy (Mar 07)
      • Re: Snort problems Adam Kennedy (Mar 10)
      • Re: Snort problems Erek Adams (Mar 10)
      • Bandwidth measurements and correlations Gordon Cunningham (Mar 10)
      • logging traffic volume (was Re: Bandwidth measurements and correlations) Bennett Todd (Mar 11)
      • RE: Bandwidth measurements and correlations Jan van den Berg (Mar 12)
      • Re: Snort problems Jeff Nathan (Mar 11)
      • Re: Snort problems Adam Kennedy (Mar 11)
      • Re: Snort problems SOLVED Adam Kennedy (Mar 11)
• react: Shawn Workman (Mar 06)
  • Re: react: James-lists (Mar 06)
  • Re: react: Erek Adams (Mar 06)
    • RE: react: Shawn Workman (Mar 06)
• Does the "-z" option mean you can't do "trigger on SYN"? Jason Haar (Mar 06)
• Attention Windows Users : Install Complete IDS Solution on Windows - New Updates! Michael Steele (Mar 06)
• Portscan2 threshold values Ueli Kistler (Mar 07)
• Rules and Actions Graeme Thompson (Mar 07)
  • Re: Rules and Actions Paul Schmehl (Mar 07)
• Sendmail crackaddr header overflow sig - Dozens of False Positives Jeff Oliveto (Mar 07)
• snort session reassembly problem gupta_sonali (Mar 07)
  • Re: snort session reassembly problem Erek Adams (Mar 07)
    • Re: snort session reassembly problem Edin Dizdarevic (Mar 07)
      • Re: snort session reassembly problem Erek Adams (Mar 07)
      • Re: snort session reassembly problem Erek Adams (Mar 12)
    • Re: snort session reassembly problem Sven Fichtner (Mar 10)
      • Re: snort session reassembly problem Erek Adams (Mar 10)
• MSS Offerings Angela Dickinson (Mar 07)
  • Snort Wireless? Mike Koponick (Mar 07)
    • Re: Snort Wireless? nigel nigek (Mar 10)
• snort and bonding Patrice Boulanger (Mar 07)
  • Re: snort and bonding Bennett Todd (Mar 07)
  • Re: snort and bonding Michael Boman (Mar 08)
  • <Possible follow-ups>
  • RE: snort and bonding Scott Williams (Network) (Mar 18)
• Stopping portscanning Max Lopez (Mar 07)
  • Re: Stopping portscanning twig les (Mar 07)
    • Re: Stopping portscanning Max Lopez (Mar 07)
  • Re: Stopping portscanning Alberto Gonzalez (Mar 07)
    • Re: Stopping portscanning Max Lopez (Mar 07)
      • Re: Stopping portscanning Alberto Gonzalez (Mar 07)
      • Re: Stopping portscanning Max Lopez (Mar 07)
• ACID and 2003 fix Miguel Rosales (Mar 07)
• Archive Data Format Maynard, Jeff S. (Mar 07)
• Snort Sniffing vs. Snort Database Jan van den Berg (Mar 07)
  • Re: Snort Sniffing vs. Snort Database Erek Adams (Mar 07)
    • RE: Snort Sniffing vs. Snort Database Jan van den Berg (Mar 08)
      • RE: Snort Sniffing vs. Snort Database Erek Adams (Mar 08)
• (spp_arpspoof) Ethernet/ARP Mismatch request for Destination Jan Hugo Prins (Mar 07)
  • Re: (spp_arpspoof) Ethernet/ARP Mismatch request for Destination Erek Adams (Mar 07)
• Disable logging of Priority 2 and 3 alerts and application data - Can this easily be done? Chris Hozian (Mar 07)
• Generate alert but not log packet data Shawn Truax (Mar 07)
  • Re: Generate alert but not log packet data Alberto Gonzalez (Mar 08)
  • <Possible follow-ups>
  • Re: Generate alert but not log packet data Shawn Truax (Mar 08)
  • Re: Generate alert but not log packet data Alberto Gonzalez (Mar 08)
• unknown destination ip and portscan false alerts Always Bishan (Mar 07)
  • Re: unknown destination ip and portscan false alerts Alberto Gonzalez (Mar 08)
    • Re: unknown destination ip and portscan false alerts Always Bishan (Mar 08)
• P2P GNUTella GET Always Bishan (Mar 08)
  • Re: P2P GNUTella GET Erek Adams (Mar 08)
  • Re: P2P GNUTella GET Kenneth G. Arnold (Mar 08)
  • RE: P2P GNUTella GET Dave Thornburgh (Mar 10)
    • RE: P2P GNUTella GET Erek Adams (Mar 10)
    • RE: P2P GNUTella GET Always Bishan (Mar 10)
• Acid Snort Barnyard Payload Alwin Raymundo (Mar 08)
  • <Possible follow-ups>
  • Re: Acid Snort Barnyard Payload Kevin Peuhkurinen (Mar 10)
    • Re: Re: Acid Snort Barnyard Payload Alwin Raymundo (Mar 11)
• snort placement on Win32 d_greenjr (Mar 08)
  • Re: snort placement on Win32 Chris Reid (Mar 08)
    • snort on Win32 - code & build issues uncovered Rich Adamson (Mar 12)
  • Message not available
    • Re: snort placement on Win32 d_greenjr (Mar 08)
  • RE: snort placement on Win32 Michael Steele (Mar 08)
• Brand New to Snort Brand New to Linux nwoliver (Mar 08)
  • Re: Brand New to Snort Brand New to Linux twig les (Mar 08)
  • Re: Brand New to Snort Brand New to Linux Matt Kettler (Mar 08)
  • Re: Brand New to Snort Brand New to Linux Timothy M. Lyons (Mar 08)
  • Re: Brand New to Snort Brand New to Linux Paul Schmehl (Mar 08)
• help on FlexResponse Mohamed Baher (Mar 09)
  • Re: help on FlexResponse Alberto Gonzalez (Mar 09)
• help on TCP reset Mohamed Baher (Mar 09)
• strange rule problem Yonah Russ (Mar 09)
  • Re: strange rule problem Alberto Gonzalez (Mar 09)
• Command/tool=eth Tim (Mar 09)
  • Re: Command/tool=eth Alberto Gonzalez (Mar 09)
• Writing a rule for Brute force attacks Daniel Ng (Mar 09)
  • Re: Writing a rule for Brute force attacks Matt Kettler (Mar 10)
• Log Priority in csv file Sh J (Mar 09)
  • Re: Log Priority in csv file Brian (Mar 16)
• Does snort "sniff" differently than tcpdump? Jason Haar (Mar 09)
• viewing archived alerts Always Bishan (Mar 10)
  • Re: viewing archived alerts Jason Romo (Mar 10)
    • Re: viewing archived alerts Always Bishan (Mar 10)
      • Re: viewing archived alerts Erick Mechler (Mar 11)
      • Re: viewing SID in ACID Always Bishan (Mar 11)
      • Re: viewing SID in ACID Joerg Weber (Mar 11)
  • <Possible follow-ups>
  • viewing archived alerts Always Bishan (Mar 10)
• Snort Inline - ip_queue dies Jochen Vogel (Mar 10)
  • <Possible follow-ups>
  • RE: Snort Inline - ip_queue dies Slighter, Tim (Mar 10)
  • RE: Snort Inline - ip_queue dies Slighter, Tim (Mar 11)
• SNORT+Mysql trouble!? SNORT (Mar 10)
• ACID: "Unique IP Links" facility broken? COOPER,MARK (HP-UnitedKingdom,ex1) (Mar 10)
  • <Possible follow-ups>
  • Re: ACID: "Unique IP Links" facility broken? Roman Danyliw (Mar 10)
• SMP Snort? Wilcoxon, Steve (Mar 10)
  • Re: SMP Snort? Erek Adams (Mar 10)
• Snort Alert [160:2:0] Kevin Peuhkurinen (Mar 10)
• SNORT with mysql SNORT (Mar 10)
  • Re: SNORT with mysql Joerg Weber (Mar 10)
• Problem view ACID + MSSQL Ludovic GRANGE (Mar 10)
• Snort+ACID+MySql DB maint problems Smith, Aron (Mar 10)
  • Re: Snort+ACID+MySql DB maint problems Paul Schmehl (Mar 10)
  • <Possible follow-ups>
  • RE: Snort+ACID+MySql DB maint problems Smith, Aron (Mar 10)
    • RE: Snort+ACID+MySql DB maint problems Paul Schmehl (Mar 10)
• AW: Snort Inline - ip_queue dies Jochen Vogel (Mar 10)
  • <Possible follow-ups>
  • AW: Snort Inline - ip_queue dies Jochen Vogel (Mar 11)
  • AW: Snort Inline - ip_queue dies Jochen Vogel (Mar 12)
    • Re: AW: Snort Inline - ip_queue dies Erek Adams (Mar 12)
      • Re: AW: Snort Inline - ip_queue dies Jeff Nathan (Mar 13)
    • Re: AW: Snort Inline - ip_queue dies webcatalog (Mar 12)
• Snort 1.9.0 Build 209 Weirdness on Win2K L. Christopher Luther (Mar 10)
• openbsd+fw+snort+mysql SNORT (Mar 10)
• snort for windows, IIS, PHP, ACID Problem Tony Singh (Mar 10)
• New rule type problem George Kendell (Mar 10)
  • <Possible follow-ups>
  • New rule type problem George Kendell (Mar 10)
• DNS zone transfer UDP false positives in 1.9.1? Matt Kettler (Mar 10)
  • Re: DNS zone transfer UDP false positives in 1.9.1? Ken Connelly (Mar 10)
    • Re: DNS zone transfer UDP false positives in 1.9.1? Matt Kettler (Mar 10)
    • Re: DNS zone transfer UDP false positives in 1.9.1? Erek Adams (Mar 10)
• Deloder worm spyguy (Mar 10)
  • Ignoring SNMP from specific addresses? Matt Richard (Mar 10)
    • Re: Ignoring SNMP from specific addresses? Erek Adams (Mar 10)
      • Re: Ignoring SNMP from specific addresses? Matt Richard (Mar 10)
  • Re: Deloder worm Kevin Pietersma (Mar 11)
    • Re: Deloder worm Bill McCarty (Mar 12)
• [Somewhat OT] - Why would a web server ping me? Bob McDowell (Mar 10)
  • Re: [Somewhat OT] - Why would a web server ping me? Frank Knobbe (Mar 10)
  • Re: [Somewhat OT] - Why would a web server ping me? Erek Adams (Mar 11)
• Weird problem Chae Yew Chuen (Mar 10)
  • Re: Weird problem Erek Adams (Mar 11)
• Problem with data.MYD Michael Roberts (Mar 11)
  • <Possible follow-ups>
  • Re: Problem with data.MYD Roman Danyliw (Mar 11)
  • Re: Problem with data.MYD Roman Danyliw (Mar 11)
  • Re: Problem with data.MYD Michael Roberts (Mar 12)
  • Re: Problem with data.MYD Michael Roberts (Mar 12)
• adding sensors Always Bishan (Mar 11)
  • Re: adding sensors Erek Adams (Mar 11)
• Snort terminates. Lund, Carl Fredrik (Mar 11)
  • Re: Snort terminates. Erek Adams (Mar 11)
  • <Possible follow-ups>
  • RE: Snort terminates. Slighter, Tim (Mar 11)
• snort & mysql Machilsen, Koen (Mar 11)
  • Re: snort & mysql Erek Adams (Mar 11)
• Virus - Possible scr Worm Always Bishan (Mar 11)
  • Re: Virus - Possible scr Worm Alberto Gonzalez (Mar 11)
    • Re: Virus - Possible scr Worm Always Bishan (Mar 11)
  • Re: Virus - Possible scr Worm Matt Richard (Mar 11)
• Re: [Somewhat OT] - Why would a web server ping me? (Bob McDowell) Always Bishan (Mar 11)
• multiple ASN.1,Null scan alerts Always Bishan (Mar 11)
  • <Possible follow-ups>
  • multiple ASN.1,Null scan alerts Always Bishan (Mar 11)
• Packet drop functionality with snort rajat khatri (Mar 11)
  • Re: Packet drop functionality with snort Alberto Gonzalez (Mar 11)
  • <Possible follow-ups>
  • RE: Packet drop functionality with snort L. Christopher Luther (Mar 11)
  • RE: Packet drop functionality with snort Slighter, Tim (Mar 11)
  • RE: Packet drop functionality with snort Bob McDowell (Mar 11)
• different CMD.exe access?!? John Hally (Mar 11)
  • Re: different CMD.exe access?!? Bamm Visscher (Mar 11)
    • Re: different CMD.exe access?!? Jason (Mar 14)
  • Re: different CMD.exe access?!? Phil Wood (Mar 11)
  • Re: different CMD.exe access?!? Paul Schmehl (Mar 11)
  • <Possible follow-ups>
  • RE: different CMD.exe access?!? L. Christopher Luther (Mar 11)
  • RE: different CMD.exe access?!? Ricardo, Gerson (Mar 14)
• MySQL & ACID Issues - - (Mar 11)
  • Re: MySQL & ACID Issues Lawrence Reed (Mar 11)
  • Re: MySQL & ACID Issues Erick Mechler (Mar 11)
  • <Possible follow-ups>
  • RE: MySQL & ACID Issues Rossi, Rob (Mar 11)
• Addressing in rules Chris Garringer (Mar 11)
  • Re: Addressing in rules Erek Adams (Mar 11)
• Best Practices Ray Ellington (Mar 11)
  • <Possible follow-ups>
  • RE: Best Practices L. Christopher Luther (Mar 11)
  • RE: Best Practices Vintinner, M. Scott (Mar 11)
• snortcenter blocked one of my IDSs. help! edison marques (Mar 11)
  • Re: snortcenter blocked one of my IDSs. help! larc (Mar 12)
• Snort 1.9.1 Dual Sensor ANTONIO GUTIERREZ (Mar 11)
  • Re: Snort 1.9.1 Dual Sensor Matt Kettler (Mar 11)
  • <Possible follow-ups>
  • RE: Snort 1.9.1 Dual Sensor Grime, Richard S (Mar 12)
  • re: Snort 1.9.1 Dual Sensor Michael J. McCasland (Mar 12)
  • RE: Snort 1.9.1 Dual Sensor Matt Kettler (Mar 12)
  • RE: Snort 1.9.1 Dual Sensor Grime, Richard S (Mar 13)
    • Re: Snort 1.9.1 Dual Sensor Bennett Todd (Mar 13)
  • RE: Snort 1.9.1 Dual Sensor Grime, Richard S (Mar 13)
• Attack descriptions Graeme Thompson (Mar 11)
• Upgrade from 1.8.6 to 1.9.1 Elvira_Byrnes (Mar 11)
  • Re: Upgrade from 1.8.6 to 1.9.1 twig les (Mar 11)
• FW: CERT Advisory CA-2003-08 Increased Activity Targeting Windows Shares Vicky Rode (Mar 11)
• cannot start snort service Donnie Green (Mar 12)
  • Re: cannot start snort service Joerg Weber (Mar 12)
  • <Possible follow-ups>
  • Re: cannot start snort service Donnie Green Jr (Mar 12)
• AW: cannot start snort service Poppi, Sandro (Mar 12)
  • Re: cannot start snort service Donnie Green Jr (Mar 12)
• Quick Question. Chris Keladis (Mar 12)
  • Re: Quick Question. Erek Adams (Mar 12)
• network audit avi koren (Mar 12)
  • Re: network audit Alberto Gonzalez (Mar 12)
  • Re: network audit twig les (Mar 12)
  • Re: network audit Matt Kettler (Mar 13)
• Compiling Snort +flexresponse on Solaris william bradd (Mar 12)
• snort won't start on boot Donnie Green (Mar 12)
  • Re: snort won't start on boot Alberto Gonzalez (Mar 12)
  • <Possible follow-ups>
  • Re: snort won't start on boot Kevin Peuhkurinen (Mar 12)
• snort problem Ronan Horgan (Mar 12)
• Installation Instructions Tetsujin28GO (Mar 12)
  • Re: Installation Instructions Alberto Gonzalez (Mar 12)
  • Re: Installation Instructions Erek Adams (Mar 12)
  • Re: Installation Instructions Valter Santos (Mar 12)
• Flexresp Francisco Gomez Garcia (Mar 12)
  • Re: Flexresp Erek Adams (Mar 12)
• Snort Alert [x:x:x] revisited Kevin Peuhkurinen (Mar 12)
• Portscan vs. Portscan2 alert deluge and ACID sensor name Ty Brewer (Mar 12)
• CodeRed Observations. larosa, vjay (Mar 12)
  • <Possible follow-ups>
  • RE: CodeRed Observations. John York (Mar 12)
  • RE: CodeRed Observations. larosa, vjay (Mar 12)
  • RE: CodeRed Observations. John York (Mar 13)
• Re: Questions Jose Ramon Hernandez Macias (Mar 12)
  • Re: Re: Questions Erek Adams (Mar 12)
• Subdirectories created in /var/log/snort francisv (Mar 12)
  • Re: Subdirectories created in /var/log/snort twig les (Mar 12)
• Restart or not Jeff (Mar 12)
  • Re: Restart or not Paul Schmehl (Mar 13)
    • Re: Restart or not Matt Kettler (Mar 13)
• snort-inline doesn´t work Jochen Vogel (Mar 13)
• Exchange Instant Message Conversations Ben Swaby (Mar 13)
• RE: [Snort-users] snort-inline doesn´t work Slighter, Tim (Mar 13)
  • <Possible follow-ups>
  • RE: [Snort-users] snort-inline doesn´t work Slighter, Tim (Mar 13)
• remote sensor installation blues Always Bishan (Mar 13)
  • <Possible follow-ups>
  • RE: remote sensor installation blues Maynard, Jeff S. (Mar 13)
  • RE: remote sensor installation blues Jose Ramon Hernandez Macias (Mar 13)
• Srnot not put any data in MySql. David Alonso De La Vega Tapage (Mar 13)
  • <Possible follow-ups>
  • RE: Srnot not put any data in MySql. Maynard, Jeff S. (Mar 13)
    • Re: Srnot not put any data in MySql. David Alonso De La Vega Tapage (Mar 13)
• AW: [Snort-users] snort-inline doesn´t work Jochen Vogel (Mar 13)
  • <Possible follow-ups>
  • AW: [Snort-users] snort-inline doesn´t work Jochen Vogel (Mar 13)
• Multiple databases with snort Counselman, Chris Contractor/Sverdrup (Mar 13)
  • Re: Multiple databases with snort Jon (Mar 13)
  • <Possible follow-ups>
  • RE: Multiple databases with snort Hutchinson, Andrew (Mar 13)
• New-bie.. Done this and next what. Mallik Prasad.S (Mar 13)
• Ignored x duplicate alerts (ACID, MySQL, Snort 1.9. x) FWAdmin (Mar 13)
  • Re: Ignored x duplicate alerts (ACID, MySQL, Snort 1.9. x) Jon (Mar 13)
• udp port 0 attempts and portscan to port 0 Tudor Panaitescu (Mar 13)
• snort w/mysql question Donnie Green Jr (Mar 13)
• installation snag Philip Davidson (Mar 13)
  • Re: installation snag Kenneth G. Arnold (Mar 13)
  • Re: installation snag Erick Mechler (Mar 13)
• Final configure.in patches for flexresp Jeff Nathan (Mar 13)
  • <Possible follow-ups>
  • Re: Final configure.in patches for flexresp Jeff Nathan (Mar 13)
• Pushing MS hot fixes & service packs? Rich Adamson (Mar 13)
  • Re: Pushing MS hot fixes & service packs? Erick Mechler (Mar 13)
    • Re: Pushing MS hot fixes & service packs? Erek Adams (Mar 13)
  • Re: Pushing MS hot fixes & service packs? Dustin Decker (Mar 13)
• MS Patches Michael J. McCasland (Mar 13)
• Try setting up a mysql user for you acid database that has access to log in from a remote location Chris Hozian (Mar 13)
• unknown output plugin 'database' Tobias Rice (Mar 13)
  • Re: unknown output plugin 'database' Andrew R. Baker (Mar 18)
  • <Possible follow-ups>
  • RE: unknown output plugin 'database' Hutchinson, Andrew (Mar 14)
    • RE: unknown output plugin 'database' Tobias Rice (Mar 14)
• Fw: DSL-IP Probes Curiousity.. james (Mar 14)
• AW: AW: Snort Inline - ip_queue dies Jochen Vogel (Mar 14)
• Curiosity about lost connectivity Andrea Iacopini (Mar 14)
  • Re: Curiosity about lost connectivity Michael Boman (Mar 14)
• xml output plugin woes Ivan Eriksen (Mar 14)
• testing ids Julio (Mar 14)
  • RE: testing ids Ray Ellington (Mar 14)
    • RE: testing ids Ashley Thomas (Mar 14)
      • RE: testing ids Jan van den Berg (Mar 14)
      • RE: testing ids Ashley Thomas (Mar 14)
  • <Possible follow-ups>
  • RE: testing ids Ray Ellington (Mar 14)
  • testing ids Julio (Mar 17)
  • RE: testing ids Brian Laing (Mar 17)
  • RE: RE: testing ids Benjamin Hippler (Mar 17)
    • Very Large IDS implementations (was Re: RE: testing ids) Bennett Todd (Mar 17)
      • Re: Very Large IDS implementations (was Re: RE: testing ids) Andrea Barisani (Mar 17)
  • RE: RE: testing ids Benjamin Hippler (Mar 17)
  • RE: RE: testing ids Miller, Eoin (Mar 17)
  • RE: RE: testing ids Latha K (Mar 18)
  • RE: testing ids Latha K (Mar 18)
• Error starting Snort Byron York (Mar 14)
  • Re: Error starting Snort Erek Adams (Mar 14)
  • <Possible follow-ups>
  • RE: Error starting Snort L. Christopher Luther (Mar 14)
    • Re: Error starting Snort Byron York (Mar 14)
• search functions returns all IPs... ipwitch (Mar 14)
• preprocessor portscan2-ignorehosts + "WEBTRAFFIC" mike Hughes (Mar 14)
  • RE: preprocessor portscan2-ignorehosts + "WEBTRAFFIC" Ray Ellington (Mar 14)
  • <Possible follow-ups>
  • RE: preprocessor portscan2-ignorehosts + "WEBTRAFFIC" mike Hughes (Mar 14)
    • RE: preprocessor portscan2-ignorehosts + "WEBTRAFFIC" Erek Adams (Mar 15)
  • RE: preprocessor portscan2-ignorehosts + "WEBTRAFFIC" mike Hughes (Mar 14)
• RE: flexresp patches (WARNING: LONG MESSAGE) Jeff Nathan (Mar 14)
• Authentication Failure Paul Yang (Mar 14)
• Questions after 1.9.1 install John Sage (Mar 14)
  • Re: Questions after 1.9.1 install Alberto Gonzalez (Mar 14)
    • Re: Questions after 1.9.1 install John Sage (Mar 15)
      • Re: Questions after 1.9.1 install Alberto Gonzalez (Mar 15)
  • Re: Questions after 1.9.1 install Erek Adams (Mar 15)
    • Re: Questions after 1.9.1 install John Sage (Mar 15)
      • Re: Questions after 1.9.1 install Erek Adams (Mar 15)
  • Re: Questions after 1.9.1 install Chris Green (Mar 21)
• Preprocessor PortScan2 is not doing what it..... mike Hughes (Mar 14)
  • Re: Preprocessor PortScan2 is not doing what it..... Alberto Gonzalez (Mar 14)
• Facing problem with react keyword.! parikshit (Mar 14)
  • Re: Facing problem with react keyword.! Alberto Gonzalez (Mar 15)
• Two questions: SNMP/Syslog Lance Lloyd (Mar 15)
  • <Possible follow-ups>
  • RE: Two questions: SNMP/Syslog Lance Lloyd (Mar 15)
    • RE: Two questions: SNMP/Syslog Kenneth G. Arnold (Mar 15)
• Using ACID with a remote SNORT machine SNORT (Mar 16)
  • Re: Using ACID with a remote SNORT machine fatb (Mar 16)
    • Re: Using ACID with a remote SNORT machine fatb (Mar 16)
    • Re: Using ACID with a remote SNORT machine fatb (Mar 16)
    • Re: Using ACID with a remote SNORT machine fatb (Mar 16)
  • <Possible follow-ups>
  • Re: Using ACID with a remote SNORT machine fatb (Mar 16)
  • RE: Using ACID with a remote SNORT machine Schmehl, Paul L (Mar 17)
    • Re: Using ACID with a remote SNORT machine Andreas (Mar 18)
  • Re: Using ACID with a remote SNORT machine fatb (Mar 17)
  • RE: Using ACID with a remote SNORT machine Schmehl, Paul L (Mar 18)
• Snort not log into mysql Gatti, Mauro (Mar 17)
• migrate from mysql to oracle Master Brian (Mar 17)
  • <Possible follow-ups>
  • migrate from mysql to oracle Master Brian (Mar 19)
• migrate from mysql to oracle (sorry if this arrive twice) Master Brian (Mar 17)
  • Re: migrate from mysql to oracle (sorry if this arrive twice) Erek Adams (Mar 17)
  • Re: migrate from mysql to oracle (sorry if this arrive twice) Mike Andersen (Mar 18)
• SID 1545: DOS Cisco attempt D PH (Mar 17)
  • Re: SID 1545: DOS Cisco attempt twig les (Mar 17)
  • <Possible follow-ups>
  • Re: SID 1545: DOS Cisco attempt D PH (Mar 25)
• CSV problem on Window! Héroux, Christian (Mar 17)
• RE: Ignored x duplicate alerts (ACID, MySQL, Snort 1.9. x) Thompson, Jason (Mar 17)
• Mysql doesn't work with snort 1.9.1 - possible fix... Mike Harding (Mar 17)
• Re: CSV problem on Window! (fwd) Erek Adams (Mar 17)
• Snort 1.9.1 for windows 2000. ANTONIO GUTIERREZ (Mar 17)
  • Re: Snort 1.9.1 for windows 2000. Erek Adams (Mar 17)
• Storing Mac Addresses in SQL David Harris (Mar 17)
• any details/sigs for "Magic Lantern"? Travis Farmer (Mar 17)
  • Re: any details/sigs for "Magic Lantern"? Brian (Mar 22)
    • RE: any details/sigs for "Magic Lantern"? Travis Farmer (Mar 22)
  • Re: any details/sigs for "Magic Lantern"? Matt Kettler (Mar 23)
• Review of install document for 1.9.1 on RH 8.0 Patrick S. Harper (Mar 17)
• HOME_NET Limit? eelsten (Mar 17)
  • Re: HOME_NET Limit? Erek Adams (Mar 17)
  • Re: HOME_NET Limit? Matt Kettler (Mar 17)
• Question about the database structure - OT? Schmehl, Paul L (Mar 17)
  • <Possible follow-ups>
  • RE: Question about the database structure - OT? Schmehl, Paul L (Mar 17)
• RE: Snort-users digest, Vol 1 #2911 - 14 msgs Ghercoias, Catalin (Mar 17)
  • Re: RE: Snort-users digest, Vol 1 #2911 - 14 msgs John Sage (Mar 17)
• Variables and Negation Jason Luke (Mar 17)
  • Re: Variables and Negation Matt Kettler (Mar 17)
  • <Possible follow-ups>
  • RE: Variables and Negation Jason Luke (Mar 17)
    • RE: Variables and Negation Erek Adams (Mar 17)
  • RE: Variables and Negation Schmehl, Paul L (Mar 17)
  • RE: Variables and Negation Schmehl, Paul L (Mar 17)
  • RE: Variables and Negation Jason Luke (Mar 17)
  • RE: Variables and Negation L. Christopher Luther (Mar 17)
• Added second snort sensor to an IDS system - mixed alerts with th e first sensor Ghercoias, Catalin (Mar 17)
• Portscan traffic Alwin Raymundo (Mar 17)
  • Re: Portscan traffic Matt Kettler (Mar 17)
  • <Possible follow-ups>
  • Re: Portscan traffic mike Hughes (Mar 17)
• Interesting statistic Erick Mechler (Mar 17)
• Database problems with ACID! SNORT (Mar 17)
• disable spp_portscan2 Xue Wu (Mar 17)
  • Re: disable spp_portscan2 Erek Adams (Mar 17)
  • Re: disable spp_portscan2 John Sage (Mar 18)
    • Re: disable spp_portscan2 Xue Wu (Mar 18)
      • Re: disable spp_portscan2 Erek Adams (Mar 18)
      • Re: disable spp_portscan2 Xue Wu (Mar 18)
      • Re: disable spp_portscan2 Erek Adams (Mar 18)
      • Re: disable spp_portscan2 Xue Wu (Mar 18)
      • Re: disable spp_portscan2 Erek Adams (Mar 18)
      • Re: disable spp_portscan2 Demetri Mouratis (Mar 18)
      • Re: disable spp_portscan2 Erek Adams (Mar 18)
    • Re: disable spp_portscan2 Erek Adams (Mar 18)
      • Re: disable spp_portscan2 John Sage (Mar 18)
      • Re: disable spp_portscan2 Erek Adams (Mar 18)
  • <Possible follow-ups>
  • RE: disable spp_portscan2 L. Christopher Luther (Mar 18)
• Portscan does not ignore my net Smith, Aron (Mar 17)
  • Re: Portscan does not ignore my net Erek Adams (Mar 17)
• Problems compiling 1.9.1 on IRIX 6.5.x Eric Kimminau (Mar 17)
• OpenPcap() error Robert Cole (Mar 17)
  • Re: OpenPcap() error Robert Cole (Mar 18)
    • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Phil Wood (Mar 19)
      • Re: OpenPcap() error Robert Cole (Mar 19)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error Alberto Gonzalez (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
      • Re: OpenPcap() error Alberto Gonzalez (Mar 21)
      • Re: OpenPcap() error Erek Adams (Mar 22)
      • Re: OpenPcap() error Erek Adams (Mar 18)
      • Re: OpenPcap() error John Sage (Mar 18)
      • Re: OpenPcap() error Robert Cole (Mar 18)
    • Re: OpenPcap() error Bamm Visscher (Mar 18)
  • <Possible follow-ups>
  • RE: OpenPcap() error L. Christopher Luther (Mar 18)
• portscan2 ignore destination Lund, Carl Fredrik (Mar 18)
  • Re: portscan2 ignore destination Erek Adams (Mar 18)
  • <Possible follow-ups>
  • RE: portscan2 ignore destination Lund, Carl Fredrik (Mar 18)
    • RE: portscan2 ignore destination Erek Adams (Mar 18)
• WEB-MISC adminlogin access ??? Alfredo D (Mar 18)
  • <Possible follow-ups>
  • WEB-MISC adminlogin access ??? Alfredo D (Mar 18)
• Snort Signature for IIS WebDav Exploit? James Harrison (Mar 18)
  • Re: Snort Signature for IIS WebDav Exploit? Erek Adams (Mar 18)
• Mukhiya Gurung/San Jose/IBM is out of the office. Mukhiya Gurung (Mar 18)
• using flex-resp without an IP address Eric Baur (Mar 18)
  • Re: using flex-resp without an IP address Erek Adams (Mar 18)
• Multiple sensors? Keg (Mar 18)
  • Re: Multiple sensors? Erek Adams (Mar 18)
    • Re: Multiple sensors? Keg (Mar 18)
• mysql crashes Keg (Mar 18)
• I'm a snort virgin Angel Gabriel (Mar 18)
  • Re: I'm a snort virgin twig les (Mar 18)
  • RE: I'm a snort virgin Ray Ellington (Mar 18)
  • <Possible follow-ups>
  • RE: I'm a snort virgin L. Christopher Luther (Mar 18)
  • I'm a snort Virgin Angel Gabriel (Mar 19)
• TFTP Get Clayton Mascarenhas (Mar 18)
  • Re: TFTP Get Frank Knobbe (Mar 18)
  • Re: TFTP Get Matt Kettler (Mar 18)
    • Re: TFTP Get twig les (Mar 18)
      • Re: TFTP Get Matt Kettler (Mar 18)
      • Re: TFTP Get twig les (Mar 18)
      • Re: TFTP Get Jason Haar (Mar 18)
      • Re: TFTP Get Rich Adamson (Mar 19)
  • <Possible follow-ups>
  • Re: TFTP Get Clayton Mascarenhas (Mar 18)
• sensor can't communicate with console Paul Yang (Mar 18)
• Attention ALL Windows Users : Install Complete IDS Solution on Windows - Major Updates! Michael Steele (Mar 18)
• Annoying away message? twig les (Mar 18)
  • [OT] Re: Annoying away message? Matt Kettler (Mar 18)
  • <Possible follow-ups>
  • RE: Annoying away message? Bob Walder (Mar 19)
• Snort Alerts Elvira_Byrnes (Mar 18)
  • Re: Snort Alerts Matt Kettler (Mar 21)
• snort 1.9.1 message Always Bishan (Mar 18)
  • Re: snort 1.9.1 message (decoded length message from rpc_decode) Matt Kettler (Mar 21)
  • <Possible follow-ups>
  • snort 1.9.1 message Always Bishan (Mar 19)
• config within snort.conf Alberto Gonzalez (Mar 18)
  • Re: config within snort.conf John Sage (Mar 19)
• acidv0.9.6b23 blues Always Bishan (Mar 19)
• New to Snort David Cintron (Mar 19)
  • Re: New to Snort David Alonso De La Vega Tapage (Mar 19)
    • Re: New to Snort Robby Desmond (Mar 20)
• grapical interface for snort חואן (Mar 19)
  • Re: grapical interface for snort Simon Gray (Mar 19)
    • Re: grapical interface for snort Joerg Weber (Mar 19)
  • Re: grapical interface for snort Nick Zitzmann (Mar 19)
• SNMP public access udp Clayton Mascarenhas (Mar 19)
  • Re: SNMP public access udp Matt Kettler (Mar 21)
• Helper Apps. Angel Gabriel (Mar 19)
  • Re: Helper Apps. Erek Adams (Mar 19)
• Data archiving Sammy (Mar 19)
  • Re: Data archiving Erek Adams (Mar 19)
  • <Possible follow-ups>
  • RE: Data archiving Bob McDowell (Mar 19)
    • RE: Data archiving Gordon Cunningham (Mar 19)
    • Re: Data archiving Erick Mechler (Mar 21)
• RE: Create_mysql for SNort 1.9 L. Christopher Luther (Mar 19)
  • <Possible follow-ups>
  • Create_mysql for SNort 1.9 Scot Lymer (Mar 21)
    • Re: Create_mysql for SNort 1.9 Patrick S. Harper (Mar 19)
    • Re: Create_mysql for SNort 1.9 Erick Mechler (Mar 21)
    • Re: Create_mysql for SNort 1.9 Joerg Weber (Mar 21)
  • RE: Create_mysql for SNort 1.9 Schmehl, Paul L (Mar 21)
• Install document for Snort 1.9.1 on RedHat 8.0 Patrick S. Harper (Mar 19)
  • <Possible follow-ups>
  • Install document for Snort 1.9.1 on RedHat 8.0 Patrick S. Harper (Mar 21)
• Snort frontends? Paul Schmehl (Mar 19)
  • RE: Snort frontends? Gordon Cunningham (Mar 19)
    • RE: Snort frontends? Paul Schmehl (Mar 19)
      • Re: Snort frontends? Ueli Kistler (Mar 19)
      • Re: Snort frontends? Paul Schmehl (Mar 19)
      • Re: Snort frontends? Ueli Kistler (Mar 19)
      • Re: Snort frontends? Paul Schmehl (Mar 19)
      • Re: Snort frontends? Ueli Kistler (Mar 20)
      • Re: Snort frontends? Nick Zitzmann (Mar 19)
  • <Possible follow-ups>
  • RE: Snort frontends? Philip Davidson (Mar 20)
• Snort database archive script Paul Schmehl (Mar 19)
• Snort as an intrusion detection library Shaiful (Mar 19)
• What is this packet? Going to M$ Paul Schmehl (Mar 19)
  • Re: What is this packet? Going to M$ Matt Kettler (Mar 19)
  • Re: What is this packet? Going to M$ twig les (Mar 20)
  • <Possible follow-ups>
  • Re: What is this packet? Going to M$ Kenton Smith (Mar 20)
• Segmenting Network Parts Jan van den Berg (Mar 19)
  • Re: Segmenting Network Parts Demetri Mouratis (Mar 20)
    • Re: Segmenting Network Parts David Alonso De La Vega Tapage (Mar 21)
      • Re: Segmenting Network Parts Erek Adams (Mar 21)
      • Re: Segmenting Network Parts David Alonso De La Vega Tapage (Mar 21)
      • Re: Segmenting Network Parts Erek Adams (Mar 21)
• snortreport 1.11 & profiling.php ? Tom Van Overbeke (Mar 20)
  • <Possible follow-ups>
  • snortreport 1.11 & profiling.php ? Tom Van Overbeke (Mar 20)
    • Re: snortreport 1.11 & profiling.php ? Simon Gray (Mar 20)
• RE: Snort-users digest, Vol 1 #2928 - 7 msgs Taylor, David (Mar 20)
• uses of multiple sensors Always Bishan (Mar 20)
  • Re: uses of multiple sensors sunzi (Mar 20)
  • <Possible follow-ups>
  • Re: uses of multiple sensors JP Vossen (Mar 26)
• Portscan setup? Jim Gifford (Mar 20)
• snort e oracle Master Brian (Mar 20)
  • <Possible follow-ups>
  • RE: snort e oracle Kreimendahl, Chad J (Mar 20)
• ntwdblib.dll JOE & ANGIE (Mar 20)
  • Re: ntwdblib.dll Matt Kettler (Mar 20)
  • Re: ntwdblib.dll Chris Reid (Mar 20)
  • <Possible follow-ups>
  • RE: ntwdblib.dll L. Christopher Luther (Mar 20)
  • Re: ntwdblib.dll Dhruv Chandra (Mar 20)
• MYSQL ANTONIO GUTIERREZ (Mar 20)
  • Re: MYSQL Paul Schmehl (Mar 20)
• Re: [SAtalk] Returned email Matt Kettler (Mar 20)
• ICMP Large PAcket Jose Ramon Hernandez Macias (Mar 20)
  • Re: ICMP Large PAcket Matt Kettler (Mar 20)
  • Re: ICMP Large PAcket Jeff Nathan (Mar 20)
  • <Possible follow-ups>
  • Re: ICMP Large PAcket Jose Ramon Hernandez Macias (Mar 20)
• Problem!!! Leonardo Maciel (Mar 20)
  • Re: Problem!!! twig les (Mar 20)
    • Re: Problem!!! Leonardo Maciel (Mar 21)
      • Re: Problem!!! Erek Adams (Mar 22)
      • Re: Problem!!! Paul Schmehl (Mar 24)
      • Re: Problem!!! Erek Adams (Mar 24)
      • Re: Problem!!! Andrew R. Baker (Mar 24)
  • <Possible follow-ups>
  • RE: Problem!!! L. Christopher Luther (Mar 21)
• problem on Snort 1.9.1 Leonardo Maciel (Mar 20)
  • Re: problem on Snort 1.9.1 Matt Kettler (Mar 20)
• Upgrade Question Weber, Wes (Mar 20)
  • Re: Upgrade Question twig les (Mar 20)
  • Re: Upgrade Question Erick Mechler (Mar 20)
  • Re: Upgrade Question Matt Kettler (Mar 20)
• Compiling problem with Mandrake 9 Fabiano Bracaloni (Mar 20)
• Reducing amount of data Sammy (Mar 20)
• portscan2-ignoreports...anyone get it to work??? Jeff Oliveto (Mar 20)
  • Re: portscan2-ignoreports...anyone get it to work??? Matt Kettler (Mar 20)
  • Re: [Snort-users] portscan2-ignoreports...anyone get it to work??? Erek Adams (Mar 24)
    • RE: [Snort-users] portscan2-ignoreports...anyone get it to work??? Jeff Oliveto (Mar 25)
      • RE: [Snort-users] portscan2-ignoreports...anyone get it to work??? Erek Adams (Mar 24)
      • Re: [Snort-users] portscan2-ignoreports...anyone get it to work??? Chris Green (Mar 26)
• snortsnarf David Cintron (Mar 20)
  • Re: snortsnarf James Hoagland (Mar 21)
  • RE: snortsnarf Michael Steele (Mar 21)
• Correlating Data Joerg Weber (Mar 21)
  • Re: Correlating Data sunzi (Mar 21)
• snortreport 1.12: one error solved, next one Tom Van Overbeke (Mar 21)
• RE: [Snort-sigs] portscan2-ignoreports...anyone get it to work??? Kevin Riggins (Mar 21)
• snort 1.9.0 + redhat 8.0: no output to mysql when in daemon mode Tom Van Overbeke (Mar 21)
  • Re: snort 1.9.0 + redhat 8.0: no output to mysql when in daemon mode Erek Adams (Mar 21)
  • Re: snort 1.9.0 + redhat 8.0: no output to mysql when in daemon mode Erek Adams (Mar 21)
• RE: snort 1.9.0 + redhat 8.0: no output to mysql wh en in daemon mode L. Christopher Luther (Mar 21)
• EXTERNAL_NET definition Eric Baur (Mar 21)
  • <Possible follow-ups>
  • RE: EXTERNAL_NET definition Eric Baur (Mar 21)
• ICMP destination doubt Clayton Mascarenhas (Mar 21)
  • RE: ICMP destination doubt Gregory W. Ratcliff (Mar 21)
• Intrusion prevention? Sh J (Mar 21)
  • Re: Intrusion prevention? Alberto Gonzalez (Mar 21)
    • Re: Intrusion prevention? Ueli Kistler (Mar 22)
• "file size limit exceeded" Rodney Jackson (Mar 22)
  • Re: "file size limit exceeded" Ueli Kistler (Mar 22)
• Portscan2... Tobias Rice (Mar 22)
  • Re: Portscan2... Erek Adams (Mar 22)
    • Re: Portscan2... Tobias Rice (Mar 22)
      • Re: Portscan2... Erek Adams (Mar 22)
      • Re: Portscan2... Tobias Rice (Mar 22)
      • Re: Portscan2... Erek Adams (Mar 22)
      • Re: Portscan2... Tobias Rice (Mar 22)
      • Re: Portscan2... Alberto Gonzalez (Mar 22)
      • Re: Portscan2... Alberto Gonzalez (Mar 22)
      • Re: Portscan2... Jim Burwell (Mar 22)
      • Re: Portscan2... Erek Adams (Mar 23)
      • Re: Portscan2... Jim Burwell (Mar 23)
  • Re: Portscan2... Shawn Duffy (Mar 22)
• Snort - ACID - MySQL - My Head Ache snort (Mar 23)
  • Re: Snort - ACID - MySQL - My Head Ache Erek Adams (Mar 23)
    • Re: Snort - ACID - MySQL - My Head Ache snort (Mar 23)
  • <Possible follow-ups>
  • Snort - ACID - MySQL - My Head Ache carlos (Mar 24)
    • RE: Snort - ACID - MySQL - My Head Ache Michael Steele (Mar 24)
      • RE: Snort - ACID - MySQL - My Head Ache snort (Mar 24)
      • RE: Snort - ACID - MySQL - My Head Ache Michael Steele (Mar 24)
      • RE: Snort - ACID - MySQL - My Head Ache snort (Mar 24)
      • RE: Snort - ACID - MySQL - My Head Ache Michael Steele (Mar 25)
• ignorehost for portscan2 Sergey Matveychuk (Mar 23)
  • Re: ignorehost for portscan2 snort (Mar 23)
    • Hogwash 0.4 and 0.5 Muenz, Michael (Mar 24)
      • Re: Hogwash 0.4 and 0.5 Alberto Gonzalez (Mar 24)
• AW: Intrusion prevention? Jochen Vogel (Mar 24)
  • Re: AW: Intrusion prevention? Alberto Gonzalez (Mar 24)
• Quick Newbie Rule Question Mark R (Mar 24)
  • Re: Quick Newbie Rule Question Erek Adams (Mar 24)
• MYSQL - Question.- Snort. Mallik Prasad.S (Mar 24)
• Snort 1.9 Mark (Mar 24)
  • Re: Snort 1.9 Erek Adams (Mar 24)
  • RE: Snort 1.9 Michael Steele (Mar 24)
• Rule set not initializing Monkey Boy (Mar 24)
  • Re: Rule set not initializing Erek Adams (Mar 24)
• Snort 1.9.1 'configure' fails Neil Dickey (Mar 24)
• iptables + Snort Prasanna Sridhar (Mar 24)
  • Re: iptables + Snort Erek Adams (Mar 24)
  • Re: iptables + Snort Matt Kettler (Mar 24)
• portscan and portscan2 Shadi Rostami (Mar 24)
  • Re: portscan and portscan2 Matt Kettler (Mar 24)
    • RE: portscan and portscan2 Nels (Mar 24)
      • Re: portscan and portscan2 Dragos Ruiu (Mar 24)
• ACID not reporting Portscan Traffic...sort of... Tobias Rice (Mar 24)
  • <Possible follow-ups>
  • Re: ACID not reporting Portscan Traffic...sort of... mike Hughes (Mar 26)
    • RE: ACID not reporting Portscan Traffic...sort of... Tobias Rice (Mar 27)
• Unaligned access pid FreeBSD/Alpha Scot (Mar 24)
• snort installation probs Jill Tovey (Mar 25)
  • <Possible follow-ups>
  • Re: snort installation probs larc (Mar 25)
    • Re: snort installation probs Jill Tovey (Mar 25)
• Are there any rules out there to alert for a THC-Hydra scan? John Crabtree (Mar 25)
• RE: Are there any rules out there to alert for a TH C-Hydra scan? SRH-Lists (Mar 25)
  • <Possible follow-ups>
  • RE: Are there any rules out there to alert for a TH C-Hydra scan? Steve Halligan (Mar 26)
• uses of multiple sensors - reply & follow-up question Cloppert, Michael (Mar 25)
• Auto Update on Rules ANTONIO GUTIERREZ (Mar 25)
  • Re: Auto Update on Rules Erick Mechler (Mar 26)
    • RE: Auto Update on Rules Michael Steele (Mar 26)
  • <Possible follow-ups>
  • Re: Auto Update on Rules Erick Mechler (Mar 26)
• Fragmented RPC Records  Darrin Powell (Mar 25)
• Sources preprocessors Aditya (Mar 25)
  • Re: Sources preprocessors Matt Kettler (Mar 25)
• Snort and IPtables... Tobias Rice (Mar 25)
  • Re: Snort and IPtables... Phil Wood (Mar 25)
  • Re: Snort and IPtables... Erick Mechler (Mar 25)
    • RE: Snort and IPtables... Tobias Rice (Mar 25)
      • Re: Snort and IPtables... Peter VE (Mar 25)
      • Re: Snort and IPtables... Matt Kettler (Mar 25)
• SCAN Amanda and port 0 traffic Clayton Mascarenhas (Mar 25)
  • Re: SCAN Amanda and port 0 traffic Matt Kettler (Mar 25)
• Snort -- file size exceeded Rodney Jackson (Mar 25)
  • Re: Snort -- file size exceeded Michael Boman (Mar 26)
    • RE: Snort -- file size exceeded Rodney Jackson (Mar 26)
      • Re: Snort -- file size exceeded Michael Boman (Mar 26)
  • Re: Snort -- file size exceeded Erek Adams (Mar 26)
    • RE: Snort -- file size exceeded Rodney Jackson (Mar 26)
      • Re: Snort -- file size exceeded Michael Boman (Mar 26)
• maybe a quick solution for web traffic and portscan 2 mike Hughes (Mar 26)
• info about snort architecture Andrea Iacopini (Mar 26)
  • Re: info about snort architecture Bennett Todd (Mar 26)
• Problem with snort log with mysql. Snortsnarf? Aaron Babalola (Mar 26)
• DNS Zone Transfer False Positive Ron Shuck (Mar 26)
  • Re: DNS Zone Transfer False Positive James Hoagland (Mar 26)
  • <Possible follow-ups>
  • RE: DNS Zone Transfer False Positive Geoff Craig (Mar 26)
  • RE: DNS Zone Transfer False Positive Ron Shuck (Mar 26)
    • RE: DNS Zone Transfer False Positive James Hoagland (Mar 27)
  • RE: DNS Zone Transfer False Positive Geoff Craig (Mar 26)
• help parsing unified format logs David Marcoux (Mar 26)
  • Re: help parsing unified format logs Erek Adams (Mar 26)
• Configuration Questions August . K . Kunnecke (Mar 26)
  • RE: Configuration Questions Michael Steele (Mar 26)
  • Re: Configuration Questions Erek Adams (Mar 26)
• Snort 2.0 rc1 available Martin Roesch (Mar 26)
  • Re: Snort 2.0 rc1 available Rob Hughes (Mar 26)
    • Re: Snort 2.0 rc1 available Paul B. Poh (Mar 27)
      • Re: Snort 2.0 rc1 available Andrew R. Baker (Mar 27)
  • Re: Snort 2.0 rc1 available Master Brian (Mar 27)
  • Re: Snort 2.0 rc1 available Bennett Todd (Mar 27)
  • Snort 2.0 rc1 performances jeremy chartier (Mar 28)
    • Snort 2.0 rc1 Observations Kenneth G. Arnold (Mar 28)
      • Re: Snort 2.0 rc1 Observations Erek Adams (Mar 28)
      • Re: Snort 2.0 rc1 Observations Kenneth G. Arnold (Mar 28)
      • Re: Snort 2.0 rc1 Observations Erek Adams (Mar 28)
      • Re: Snort 2.0 rc1 Observations Chris Green (Mar 31)
      • Snort 2.0 rc1 pass solved / now mysql problem Kenneth G. Arnold (Mar 31)
  • snort decoder jeremy chartier (Mar 28)
    • Re: snort decoder Chris Green (Mar 28)
  • <Possible follow-ups>
  • RE: Snort 2.0 rc1 available Slighter, Tim (Mar 27)
    • Re: Snort 2.0 rc1 available Chris Green (Mar 31)
• Multiple Snort DBs consolidated into a single DB Ken Bell (Mar 26)
• how to use expressions on a stealth interface Thomas Uczekaj (Mar 26)
  • Re: how to use expressions on a stealth interface Erek Adams (Mar 26)
• A question about flow:established keyword Shadi Rostami (Mar 26)
  • Re: A question about flow:established keyword twig les (Mar 26)
  • Re: A question about flow:established keyword Erick Mechler (Mar 26)
  • <Possible follow-ups>
  • RE: A question about flow:established keyword Shadi Rostami (Mar 26)
    • Re: A question about flow:established keyword Erick Mechler (Mar 26)
  • RE: A question about flow:established keyword Shadi Rostami (Mar 26)
• FIN scans and Apple airport Paul Schmehl (Mar 26)
• Re: [Snort-announce] Snort 2.0 rc1 available Mahdi Kefayati (Mar 27)
  • Re: Re: [Snort-announce] Snort 2.0 rc1 available Bennett Todd (Mar 27)
• Re: snort installation probs] Jill Tovey (Mar 27)
• Alert facility and output facility Jan van den Berg (Mar 27)
• AW: Snort 2.0 rc1 available Jochen Vogel (Mar 27)
  • Re: Snort 2.0 rc1 available Jed Haile (Mar 27)
• flexresp,Libnet problem? Mahdi Kefayati (Mar 27)
  • Re: flexresp,Libnet problem? Jeff Nathan (Mar 27)
  • <Possible follow-ups>
  • Re: flexresp,Libnet problem? Neil Dickey (Mar 27)
  • RE: flexresp,Libnet problem? Rich Stryker (Mar 27)
• snort inline problems Jochen Vogel (Mar 27)
  • <Possible follow-ups>
  • Re: snort inline problems Jed Haile (Mar 27)
• byte_test, byte_jump, distance, within Clemens, Dan (Mar 27)
  • Re: byte_test, byte_jump, distance, within Chris Green (Mar 31)
• Kazaa Signature ASeung (Mar 27)
  • Re: Kazaa Signature Adam Shephard (Mar 27)
  • Re: Kazaa Signature Paul Schmehl (Mar 27)
  • <Possible follow-ups>
  • Re: Kazaa Signature ASeung (Mar 27)
  • Re: Kazaa Signature ASeung (Mar 27)
• prob w/ database output configuration & ACID Rob Burris (Mar 27)
  • Re: prob w/ database output configuration & ACID Erek Adams (Mar 27)
    • Re: prob w/ database output configuration & ACID Rob Burris (Mar 28)
      • Re: prob w/ database output configuration & ACID Erek Adams (Mar 28)
      • Re: prob w/ database output configuration & ACID Rob Burris (Mar 28)
      • Re: prob w/ database output configuration & ACID Erek Adams (Mar 28)
• Slammer Virus ruined my ACID and SNORT Andrade, Leonardo F. Buonsanti de (IT - Brasil) (Mar 27)
  • <Possible follow-ups>
  • RE: Slammer Virus ruined my ACID and SNORT Maynard, Jeff S. (Mar 27)
    • RE: Slammer Virus ruined my ACID and SNORT Paul Schmehl (Mar 27)
  • RE: Slammer Virus ruined my ACID and SNORT Maynard, Jeff S. (Mar 27)
  • RE: Slammer Virus ruined my ACID and SNORT Semerjian, Ohanes (Mar 27)
  • RE: Slammer Virus ruined my ACID and SNORT Jim Clews (Mar 28)
  • RE: Slammer Virus ruined my ACID and SNORT Maynard, Jeff S. (Mar 28)
• Over 1 Million records in ACID..... Ghercoias, Catalin (Mar 27)
  • Re: Over 1 Million records in ACID..... Paul Schmehl (Mar 27)
  • Re: Over 1 Million records in ACID..... David E. Gianndrea (Mar 27)
  • Re: Over 1 Million records in ACID..... Erick Mechler (Mar 27)
  • <Possible follow-ups>
  • Re: Over 1 Million records in ACID..... Dusty Hall (Mar 27)
  • RE: Over 1 Million records in ACID..... Ghercoias, Catalin (Mar 27)
    • Re: Over 1 Million records in ACID..... David E. Gianndrea (Mar 27)
• 1.9.1 winxp home Olaf Lachowicz (Mar 27)
  • RE: 1.9.1 winxp home Michael Steele (Mar 27)
  • <Possible follow-ups>
  • Re: 1.9.1 winxp home Neil Dickey (Mar 27)
    • Re: 1.9.1 winxp home Olaf Lachowicz (Mar 27)
      • RE: 1.9.1 winxp home Michael Steele (Mar 27)
      • Re: 1.9.1 winxp home Olaf Lachowicz (Mar 27)
      • RE: 1.9.1 winxp home Michael Steele (Mar 27)
    • Re: 1.9.1 winxp home Olaf Lachowicz (Mar 27)
  • RE: 1.9.1 winxp home L. Christopher Luther (Mar 27)
    • Re: 1.9.1 winxp home Olaf Lachowicz (Mar 27)
  • RE: 1.9.1 winxp home L. Christopher Luther (Mar 28)
  • RE: 1.9.1 winxp home Kalteis, Nico (Contractor) (Mar 28)
• barnyard and byte order cm (Mar 27)
  • Re: barnyard and byte order Andrew R. Baker (Mar 28)
• Understanding PORTSCAN DETECTED vs. portscan status Tom Yerex (Mar 27)
• BAD TRAFFIC bad frag bits Clayton Mascarenhas (Mar 27)
  • Re: BAD TRAFFIC bad frag bits Jeff Nathan (Mar 27)
• Source 0.0.0.0 Destination 0.0.0.0 Nels (Mar 27)
  • Re: Source 0.0.0.0 Destination 0.0.0.0 twig les (Mar 29)
• Following problem TAYLAN KIRAN (Mar 28)
• Acid and Oracle Master Brian (Mar 28)
• AW: snort inline problems Jochen Vogel (Mar 28)
• Unknown Database type specified: a DBtype of '' was specified jcvaraillon (Mar 28)
  • <Possible follow-ups>
  • Re: Unknown Database type specified: a DBtype of '' was specified jcvaraillon (Mar 28)
    • RE: Re: Unknown Database type specified: a DBtype of '' was specified Patrice Boulanger (Mar 28)
  • Re: Re: Unknown Database type specified: a DBtype of '' was specified jcvaraillon (Mar 28)
• rules updating Always Bishan (Mar 28)
• MySQL 4 Johan Sunnerstig (Mar 28)
  • Re: MySQL 4 Kenneth G. Arnold (Mar 28)
  • Re: MySQL 4 Steve Suehring (Mar 28)
  • Re: MySQL 4 Mika Hirvonen (Mar 28)
• Just starting with snort on XP Barbara Pease (Mar 28)
  • Re: Just starting with snort on XP Erek Adams (Mar 28)
  • Re: Just starting with snort on XP Patrick S. Harper (Mar 28)
• Snort inline kills scans (but why?) pieter claassen (Mar 28)
• removal of alert cache Philip Davidson (Mar 28)
  • Re: removal of alert cache Simon Gray (Mar 28)
• "And now for something Completely Different!" Or 'How to Upgrade' Erek Adams (Mar 28)
• Snort "detect_scan" Bypass Alert SecurityAdmin (Mar 28)
  • <Possible follow-ups>
  • Snort "detect_scan" Bypass Alert Jose Ramon Hernandez Macias (Mar 28)
    • Re: Snort "detect_scan" Bypass Alert Erek Adams (Mar 28)
  • RE: Snort "detect_scan" Bypass Alert SecurityAdmin (Mar 28)
  • RE: Snort "detect_scan" Bypass Alert Kalteis, Nico (Contractor) (Mar 28)
  • RE: Snort "detect_scan" Bypass Alert Kalteis, Nico (Contractor) (Mar 28)
• Snort won't log anything! Please help... Kalteis, Nico (Contractor) (Mar 28)
  • <Possible follow-ups>
  • RE: Snort won't log anything! Please help... Kalteis, Nico (Contractor) (Mar 28)
    • RE: Snort won't log anything! Please help... Erek Adams (Mar 28)
  • RE: Snort won't log anything! Please help... Kalteis, Nico (Contractor) (Mar 28)
    • RE: Snort won't log anything! Please help... Erek Adams (Mar 28)
• RE: Snort 2.0 rc1 Observations Slighter, Tim (Mar 28)
  • RE: Snort 2.0 rc1 Observations Erek Adams (Mar 28)
• Snort's Blocking Capability? Thop (Thomas Hesketh-Roberts) (Mar 28)
  • Re: Snort's Blocking Capability? Erek Adams (Mar 28)
    • Re: Snort's Blocking Capability? Jason Haar (Mar 30)
  • <Possible follow-ups>
  • RE: Snort's Blocking Capability? SRH-Lists (Mar 28)
  • RE: Snort's Blocking Capability? Steve Halligan (Mar 28)
• Snort 1.9.1 and syslog identity jjaddiss (Mar 28)
• Alert notification - HELP!! - URGENT!! Philip Davidson (Mar 28)
  • Re: Alert notification - HELP!! - URGENT!! Kenneth G. Arnold (Mar 28)
• Snort 2.0 libnet config --cflags broken still? Michael Scheidell (Mar 28)
  • Re: Snort 2.0 libnet config --cflags broken still? Jon (Mar 28)
  • <Possible follow-ups>
  • RE: Snort 2.0 libnet config --cflags broken still? Scheidell (Mar 29)
    • RE: Snort 2.0 libnet config --cflags broken still? Erek Adams (Mar 29)
  • RE: Snort 2.0 libnet config --cflags broken still? Scheidell (Mar 31)
• Incomplete RPC segment - False Positives... Shawn Duffy (Mar 28)
  • Re: Incomplete RPC segment - False Positives... Erek Adams (Mar 29)
• snort 2.0 RC1 runs commented out rules? Michael Scheidell (Mar 28)
  • Re: snort 2.0 RC1 runs commented out rules? Chris Green (Mar 31)
• Snort 2.0rc1 disable_ipopt_alerts doesn't work? Nick Zitzmann (Mar 28)
  • Re: Snort 2.0rc1 disable_ipopt_alerts doesn't work? Erek Adams (Mar 29)
• Flexresp rst_all seem dose not work Mahdi Kefayati (Mar 29)
• Snort from scratch ;) Mahdi Kefayati (Mar 29)
• RedHat 8.0 mysql,snort and acid David Cintron (Mar 29)
  • Re: RedHat 8.0 mysql,snort and acid Patrick S. Harper (Mar 29)
  • RE: RedHat 8.0 mysql,snort and acid Don Weber (Mar 31)
• Promiscuous mode on only one interface Brei, Matt (Mar 29)
  • Re: Promiscuous mode on only one interface Patrick S. Harper (Mar 29)
• Same src/dst Brei, Matt (Mar 30)
  • Re: Same src/dst David Alonso De La Vega Tapage (Mar 31)
  • Re: Same src/dst twig les (Mar 31)
• RE: Alert notification - HELP!! -URGENT!! William Metcalf (Mar 31)
• [output] Log application data into the database Emmanuel Dardaine (Mar 31)
  • Re: [output] Log application data into the database Brian (Mar 31)
• Question on database for Snort FWAdmin (Mar 31)
  • <Possible follow-ups>
  • RE: Question on database for Snort Kreimendahl, Chad J (Mar 31)
    • RE: Question on database for Snort Paul Schmehl (Mar 31)
      • Re: Question on database for Snort Michael Anderson (Mar 31)
      • RE: Question on database for Snort Kenneth G. Arnold (Mar 31)
  • RE: Question on database for Snort Sudhakar Gummadi (Mar 31)
• "Saving State" in Snort Michael L. Artz (Mar 31)
• snort_inline-1.9.1-2 release Rob McMillen (Mar 31)
• ACID snort_archive DB access and udp port 0 traffic Jose Ramon Hernandez Macias (Mar 31)
• Proxy pass rule Jose Ramon Hernandez Macias (Mar 31)
• Sniffer setup. ANTONIO GUTIERREZ (Mar 31)