Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

3034 messages starting Mar 31 03 and ending Jun 30 03
Date index | Thread index | Author index

• RE: ACID Bill Frank (Mar 31)
  • <Possible follow-ups>
  • Re: ACID Master Brian (Apr 01)
  • RE: ACID Chris Eidem (Apr 03)
  • ACID Esler, Joel Contractor (Jun 11)
  • ACID Rodney Green (Jun 18)
    • Re: ACID Erek Adams (Jun 21)
  • acid Bryan Irvine (Jun 25)
    • Re: acid Jon Baer (Jun 25)
    • Re: acid sunzi (Jun 25)
  • Fwd: Re: acid Jason K. Boykin (Jun 25)
• RE: Snort 2.0 libnet config --cflags broken still? Jeff Nathan (Mar 31)
• RE: Same src/dst Brei, Matt (Mar 31)
  • <Possible follow-ups>
  • RE: Same src/dst Brei, Matt (Mar 31)
• RE: [output] Log application data into the database Emmanuel Dardaine (Apr 01)
• DF and MF Clayton Mascarenhas (Apr 01)
  • Re: DF and MF Jeff Nathan (Apr 05)
    • Re: DF and MF Andreas Östling (Apr 07)
• Snort Error Ali (Apr 01)
  • Re: Snort Error Erick Mechler (Apr 01)
• Stealth Scan Master Brian (Apr 01)
• Question regarding Openbsd 3.3 Bridge diwelf (Apr 01)
• Snort Advisory - Security Bit Mitigation Brian (Apr 01)
  • Re: ./setup.sh Jim Burwell (Apr 04)
• RE: snort 2.0 RC1 runs commented out rules? Scheidell (Apr 01)
• RE: Question on database for Snort FWAdmin (Apr 01)
  • RE: Question on database for Snort Erek Adams (Apr 01)
  • <Possible follow-ups>
  • Re: Question on database for Snort Paul Schmehl (Apr 01)
  • RE: Question on database for Snort Kreimendahl, Chad J (Apr 01)
    • RE: Question on database for Snort Paul Schmehl (Apr 01)
  • RE: Question on database for Snort FWAdmin (Apr 01)
    • RE: Question on database for Snort Erek Adams (Apr 02)
  • RE: Question on database for Snort FWAdmin (Apr 02)
    • Re: Question on database for Snort David Alonso De La Vega Tapage (Apr 02)
• Re: "Saving State" in Snort Chris Green (Apr 01)
  • Re: "Saving State" in Snort Phil Wood (Apr 01)
    • Re: "Saving State" in Snort Chris Green (Apr 01)
      • Re: "Saving State" in Snort Phil Wood (Apr 01)
  • Re: "Saving State" in Snort Michael L. Artz (Apr 01)
  • Re: "Saving State" in Snort Michael L. Artz (Apr 17)
    • Re: "Saving State" in Snort Chris Green (Apr 21)
• Sniffer setup. ANTONIO GUTIERREZ (Apr 01)
  • Re: Sniffer setup. Ueli Kistler (Apr 02)
  • Re: Sniffer setup. Andrew R. Baker (Apr 03)
• ACID Concerns Slighter, Tim (Apr 01)
  • var HOME_NET question Rolf Brusletto (Apr 01)
  • <Possible follow-ups>
  • RE: ACID Concerns Matt Yackley (Apr 01)
  • RE: ACID Concerns Slighter, Tim (Apr 01)
• snortcenter ccomunication. edison marques (Apr 01)
  • Re: snortcenter ccomunication. Erick Mechler (Apr 01)
    • Re: Re: snortcenter ccomunication. edison marques (Apr 02)
      • Re: Re: snortcenter ccomunication. Erick Mechler (Apr 02)
      • Re: Re: snortcenter ccomunication. edison marques (Apr 03)
• Question -- spp_stream4 STEALTH ACTIVITY (unknown) detection Matt Yackley (Apr 01)
  • Re: Question -- spp_stream4 STEALTH ACTIVITY (unknown) detection Chris Green (Apr 01)
• RE: var HOME_NET question SRH-Lists (Apr 01)
  • <Possible follow-ups>
  • RE: var HOME_NET question Steve Halligan (Apr 01)
  • RE: var HOME_NET question SRH-Lists (Apr 01)
• Snort 2.0.0 RC2 Available! Chris Green (Apr 01)
• snort-2.0rc1 xml support ktimm (Apr 01)
• new snort.conf Kreimendahl, Chad J (Apr 01)
  • <Possible follow-ups>
  • RE: new snort.conf Kreimendahl, Chad J (Apr 01)
    • help with regular expressions Julio E. Gonzalez P. (Apr 02)
      • Re: help with regular expressions Erek Adams (Apr 02)
      • (spp_portscan2) lines in alert file Julio E. Gonzalez P. (Apr 03)
• ACID Email Alert Configuration FWAdmin (Apr 01)
  • Re: ACID Email Alert Configuration Erick Mechler (Apr 01)
  • <Possible follow-ups>
  • RE: ACID Email Alert Configuration FWAdmin (Apr 02)
• Re: [Snort-announce] Snort 2.0 rc1 available Martin Roesch (Apr 01)
• classification.config Keg (Apr 01)
• webmin Keg (Apr 01)
  • <Possible follow-ups>
  • RE: webmin Matt Yackley (Apr 01)
    • Re: webmin Keg (Apr 02)
  • Re: webmin Scheidell (Apr 03)
• Same source/dest Keg (Apr 01)
  • Re: Same source/dest james (Apr 01)
    • Re: Same source/dest Erek Adams (Apr 02)
      • Re: Same source/dest James-lists (Apr 02)
  • <Possible follow-ups>
  • RE: Same source/dest Brei, Matt (Apr 02)
    • Re: Same source/dest Keg (Apr 02)
  • RE: Same source/dest Hutchinson, Andrew (Apr 02)
  • RE: Same source/dest Brei, Matt (Apr 02)
    • RE: Same source/dest Erek Adams (Apr 02)
      • Re: Same source/dest Keg (Apr 02)
      • Re: Same source/dest Erek Adams (Apr 02)
      • Re: Same source/dest Keg (Apr 02)
      • Re: Same source/dest Erek Adams (Apr 02)
  • RE: Same source/dest Brei, Matt (Apr 02)
    • RE: Same source/dest Erek Adams (Apr 02)
  • RE: Same source/dest Brei, Matt (Apr 02)
    • RE: Same source/dest Erek Adams (Apr 02)
• Larry Lopez/ahg/IRCorp is out of the office. Laurence Lopez (Apr 01)
• IPv6 and snort v2rc2 Ted Llewellyn (Apr 01)
  • Re: IPv6 and snort v2rc2 Chris Green (Apr 02)
  • <Possible follow-ups>
  • Re: IPv6 and snort v2rc2 Ted Llewellyn (Apr 02)
• Snortcenter Beta Gary Borgeson (Apr 01)
• Hi Steve Rahman (Apr 01)
• Educational Incident Data Comparison Pilot (X-Post) Alfred Huger (Apr 01)
• Barnyard log directory Roberto Suarez Soto (Apr 02)
• Snort installation again Andrzej Wisniewski (Apr 02)
  • Re: Snort installation again Erek Adams (Apr 02)
  • RE: Snort installation again Jan van den Berg (Apr 02)
    • RE: Snort installation again Andrzej Wisniewski (Apr 03)
      • RE: Snort installation again twig les (Apr 03)
  • <Possible follow-ups>
  • RE: Snort installation again Jakub Molek (Apr 03)
• Jose Ramon Hernandez Macias/Sistemas/Megacentro/Alestra is out of the office. Jose Ramon Hernandez Macias (Apr 02)
• ACID inconsistencies? Keg (Apr 02)
  • Re: ACID inconsistencies? Keg (Apr 08)
• Portscan setup ANTONIO GUTIERREZ (Apr 02)
• snort 2.0.0 rc2 and libnet Michael Scheidell (Apr 02)
  • <Possible follow-ups>
  • Re: snort 2.0.0 rc2 and libnet Jeff Nathan (Apr 05)
• email address not specified Philip Davidson (Apr 02)
  • <Possible follow-ups>
  • RE: email address not specified Matt Yackley (Apr 02)
    • Web hosting with DHCP Goutam Dastider (Apr 02)
• RE: help with regular expressions SRH-Lists (Apr 02)
• sorry, more info about the email error Philip Davidson (Apr 02)
• Re: snort installation probs Jill Tovey (Apr 02)
• Web hosting with DHCP Goutam Dastider (Apr 02)
  • Re: Web hosting with DHCP Erick Mechler (Apr 02)
• You caught them, what next? Tobias Rice (Apr 02)
  • Re: You caught them, what next? Joe Matusiewicz (Apr 02)
  • Re: You caught them, what next? Matt Kettler (Apr 02)
    • RE: You caught them, what next? Gordon Cunningham (Apr 02)
  • Re: You caught them, what next? Michael Boman (Apr 04)
  • <Possible follow-ups>
  • RE: You caught them, what next? Drew Stockman (Apr 02)
  • RE: You caught them, what next? L. Christopher Luther (Apr 02)
  • RE: You caught them, what next? Brei, Matt (Apr 02)
  • RE: You caught them, what next? L. Christopher Luther (Apr 02)
  • RE: You caught them, what next? FWAdmin (Apr 02)
  • RE: You caught them, what next? Brei, Matt (Apr 02)
    • Re: You caught them, what next? Jason Haar (Apr 02)
  • RE: You caught them, what next? L. Christopher Luther (Apr 03)
    • RE: You caught them, what next? Erek Adams (Apr 03)
  • RE: You caught them, what next? bmcdowell (Apr 03)
    • Re: You caught them, what next? Jason Haar (Apr 03)
• Snort and Sneeze Jan van den Berg (Apr 02)
• logsnorter and shorewall Rolf Brusletto (Apr 02)
• IDS Placement ideas for inside and outside a firewall. Brei, Matt (Apr 02)
  • <Possible follow-ups>
  • RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt (Apr 02)
  • RE: IDS Placement ideas for inside and outside a firewall. Drew Stockman (Apr 02)
  • RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt (Apr 02)
  • RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt (Apr 02)
    • Re: IDS Placement ideas for inside and outside a firewall. David Glosser (Apr 02)
      • RE: IDS Placement ideas for inside and outside a firewall. Brian Laing (Apr 03)
  • RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt (Apr 03)
    • RE: IDS Placement ideas for inside and outside a firewall. Brian Laing (Apr 03)
    • Re: IDS Placement ideas for inside and outside a firewall. David Glosser (Apr 03)
• RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin (Apr 02)
  • <Possible follow-ups>
  • RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin (Apr 02)
  • RE: IDS Placement ideas for inside and outside a fi rewall. Philip Davidson (Apr 02)
  • RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin (Apr 03)
  • RE: IDS Placement ideas for inside and outside a fi rewall. Ponte, Paul F (Apr 03)
    • Re: IDS Placement ideas for inside and outside a firewall. David Glosser (Apr 03)
    • RE: IDS Placement ideas for inside and outside a firewall. Brian Laing (Apr 04)
• RE: (OT) You caught them, what next? L. Christopher Luther (Apr 02)
• FATAL ERROR: /etc/snort/rpc.rules:19: Unknown Flow Option: 'to_sever' DLittle (Apr 02)
  • <Possible follow-ups>
  • RE: FATAL ERROR: /etc/snort/rpc.rules:19: Unknown Flow Option: 'to_sever' Schmehl, Paul L (Apr 02)
• Snort and Brdiging Firewall Allan Dover (Apr 02)
  • Re: Snort and Brdiging Firewall Alberto Gonzalez (Apr 02)
• Run as user? Joe Hill (Apr 02)
  • Re: Run as user? Alberto Gonzalez (Apr 02)
    • Re: Run as user? Joe Hill (Apr 02)
      • Re: Run as user? Alberto Gonzalez (Apr 02)
      • Re: Run as user? Joe Hill (Apr 02)
      • Re: Run as user? Erek Adams (Apr 02)
      • Re: Run as user? Joe Hill (Apr 02)
      • Re: Run as user? Erek Adams (Apr 03)
      • Re: Run as user? Matt Kettler (Apr 03)
      • Re: Run as user? Joe Hill (Apr 03)
    • Re: Run as user? Chris Green (Apr 03)
• RE: MySQL 4 Johan Sunnerstig (Apr 03)
• RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin (Apr 03)
• SNORT AND HENWEN FOR NEWBIES DAFKA (Apr 03)
  • Re: SNORT AND HENWEN FOR NEWBIES Nick Zitzmann (Apr 03)
• Crystal Reports from MySQL Ed Vazquez (Apr 03)
• Gnutella Keg (Apr 03)
  • Re: Gnutella Matt Kettler (Apr 03)
  • <Possible follow-ups>
  • RE: Gnutella Bob Dehnhardt (Apr 03)
• Re: [Snort-sigs] Sendmail Signature Matt Kettler (Apr 03)
  • Re: Re: [Snort-sigs] Sendmail Signature Matt Kettler (Apr 03)
• udated curl problem edison marques (Apr 03)
• Byte_test and Byte_jump Shadi Rostami (Apr 03)
• 2.0.0rc3 Available! Chris Green (Apr 03)
• Snort setup Stigers, David (Apr 03)
  • <Possible follow-ups>
  • RE: Snort setup L. Christopher Luther (Apr 03)
  • RE: Snort setup L. Christopher Luther (Apr 03)
    • Re: Snort setup Joe Hill (Apr 03)
• snort as a service on Windows 2000 August . K . Kunnecke (Apr 03)
  • RE: snort as a service on Windows 2000 Michael Steele (Apr 05)
  • <Possible follow-ups>
  • RE: snort as a service on Windows 2000 Michael Steele (Apr 11)
  • RE: snort as a service on Windows 2000 Michael Steele (Apr 14)
• Is Oracle supported on Win2k? Jalil Feghhi (Apr 03)
• snort 2.rc2 xml output ktimm (Apr 03)
• Gigabit NIC Recommendations... Dusty Hall (Apr 03)
  • Re: Gigabit NIC Recommendations... David Alonso De La Vega Tapage (Apr 03)
• Help with a config file please? snort (Apr 03)
  • <Possible follow-ups>
  • RE: Help with a config file please? L. Christopher Luther (Apr 04)
    • RE: Help with a config file please? snort (Apr 04)
  • RE: Help with a config file please? L. Christopher Luther (Apr 04)
    • RE: Help with a config file please? snort (Apr 04)
  • RE: Help with a config file please? L. Christopher Luther (Apr 04)
    • RE: Help with a config file please? snort (Apr 04)
  • RE: Help with a config file please? snort (Apr 04)
  • RE: Help with a config file please? snort (Apr 04)
  • RE: Help with a config file please? L. Christopher Luther (Apr 04)
    • RE: Help with a config file please? snort (Apr 08)
• RE: [Snort-sigs] Questions 101 Matt Kettler (Apr 03)
• Script to cleanup ACID/Snort Alerts in MySQL DB... Dusty Hall (Apr 03)
• Snort Mysql Tables Schema.... Rolf Brusletto (Apr 03)
  • Re: Snort Mysql Tables Schema.... Chris Reid (Apr 03)
• Unknown alert Joe Hill (Apr 03)
• Snort setup problems dky (Apr 03)
• Log everything for billing purposes Ross Davis - DataAnywhere (Apr 03)
  • Re: Log everything for billing purposes twig les (Apr 03)
  • Re: Log everything for billing purposes Matt Kettler (Apr 03)
    • Re: Log everything for billing purposes Andrew R. Baker (Apr 04)
  • Re: Log everything for billing purposes Jason Romo (Apr 03)
  • <Possible follow-ups>
  • RE: Log everything for billing purposes Matt Yackley (Apr 03)
• SnortDB Extra Dusty Hall (Apr 03)
• Snort ouput format Michael L. Artz (Apr 03)
• Passive or Active Joe Hill (Apr 03)
  • Re: Passive or Active Erick Mechler (Apr 04)
• AW: Gigabit NIC Recommendations... Poppi, Sandro (Apr 03)
• idscenter Troy Evers (Apr 03)
  • Re: idscenter Ueli Kistler (Apr 04)
• ./setup.sh Jill Tovey (Apr 04)
  • Re: ./setup.sh Joerg Weber (Apr 04)
• curl error Jill Tovey (Apr 04)
  • Re: curl error Joerg Weber (Apr 04)
• adding additional sensor to ACID John Hally (Apr 04)
  • Re: adding additional sensor to ACID sunzi (Apr 04)
  • <Possible follow-ups>
  • RE: adding additional sensor to ACID Brei, Matt (Apr 04)
  • RE: adding additional sensor to ACID John Hally (Apr 04)
  • adding additional sensor to ACID Ghercoias, Catalin (Apr 04)
  • RE: adding additional sensor to ACID SecurityAdmin (Apr 06)
  • RE: adding additional sensor to ACID Wayne . Freeman (Apr 07)
• calllogfuncs() decoded length does not compute! jcvaraillon (Apr 04)
• alert file Keg (Apr 04)
  • RE: alert file Jan van den Berg (Apr 04)
• (no subject) saud (Apr 04)
  • Re: (no subject) (how to unsubscribe) Matt Kettler (Apr 04)
  • <Possible follow-ups>
  • (no subject) fjy (Apr 06)
    • Re: (no subject) Joe Hill (Apr 06)
  • (no subject) shuuichi_numazawa (Apr 06)
    • RE: (no subject) Paul D. Shaffer (Apr 06)
  • RE: (no subject) shuuichi_numazawa (Apr 06)
  • (no subject) ryan stangl (Apr 08)
    • Re: (no subject) Erek Adams (Apr 08)
    • RE: (no subject) Don Weber (Apr 08)
  • RE: (no subject) Slighter, Tim (Apr 09)
  • (no subject) Cory D. (Apr 09)
  • (no subject) KD Rajkumar (Apr 13)
  • RE: (no subject) Ryan Finnesey (Apr 13)
  • (no subject) John Sage (Apr 14)
  • (no subject) Robin Johnson (May 29)
    • Re: (no subject) Erick Mechler (May 29)
    • Re: (no subject) Patrick S. Harper (May 29)
  • RE: (no subject) Robin Johnson (May 30)
  • RE: (no subject) Robin Johnson (May 30)
    • RE: (no subject) Brian Gregorcy (May 30)
  • (no subject) snrt (Jun 24)
    • Re: (no subject) James Nonya (Jun 24)
  • (no subject) Juergen Anthamatten (Jun 25)
• Off topic: ActiveScout? Rich Adamson (Apr 04)
  • <Possible follow-ups>
  • Re: Off topic: ActiveScout? JP Vossen (Apr 04)
• RE: Help with a config file please?] snort (Apr 04)
• Re: You caught them (RR TZ issue) JP Vossen (Apr 04)
• Curious FTP access, possible information gathering? Travis Farmer (Apr 04)
• OT: French Snort Users, Please Read. Erek Adams (Apr 05)
• ICMP PING NMAP to 149.1.1.1 Kenneth G. Arnold (Apr 05)
  • Re: ICMP PING NMAP to 149.1.1.1 Joe Hill (Apr 05)
    • Re: ICMP PING NMAP to 149.1.1.1 Kenneth G. Arnold (Apr 05)
      • Re: ICMP PING NMAP to 149.1.1.1 Jeff O'Neal (Apr 06)
      • Re: ICMP PING NMAP to 149.1.1.1 Joe Hill (Apr 06)
• Frag2 timeout parameter Paweł Goleń (Apr 06)
• Possible error with the "-L" flag? Dave Garn (UUNET) (Apr 06)
• snort plugins / add-ons Ronan Horgan (Apr 06)
• Help w/ ODBC Setup Jalil Feghhi (Apr 06)
• ASN.1 Clayton Mascarenhas (Apr 06)
• $HOME_NET Keg (Apr 06)
  • Re: $HOME_NET Erek Adams (Apr 06)
    • Re: $HOME_NET Keg (Apr 07)
      • Re: $HOME_NET Erek Adams (Apr 07)
      • Re: $HOME_NET Keg (Apr 07)
      • Re: $HOME_NET Erek Adams (Apr 08)
      • Re: $HOME_NET Keg (Apr 08)
      • Re: $HOME_NET Erek Adams (Apr 08)
      • Re: $HOME_NET Keg (Apr 08)
  • <Possible follow-ups>
  • RE: $HOME_NET Snow Jacob C KPWA (Apr 09)
• Only *nix alerts? Keg (Apr 06)
  • Re: Only *nix alerts? Erek Adams (Apr 06)
    • Re: Only *nix alerts? Keg (Apr 07)
      • Re: Only *nix alerts? Erek Adams (Apr 07)
      • Re: Only *nix alerts? Keg (Apr 07)
• rule chains Derya Sezen (Apr 06)
  • Re: rule chains Erek Adams (Apr 06)
• /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes (Apr 06)
  • Re: /etc/init.d/snort file, Snort 1.9.1 Erek Adams (Apr 06)
  • <Possible follow-ups>
  • FW: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes (Apr 15)
    • Re: FW: /etc/init.d/snort file, Snort 1.9.1 John Sage (Apr 16)
  • RE: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes (Apr 16)
  • RE: FW: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes (Apr 16)
• Do 1.9 rules work with 2.0? Jesse W. Asher (Apr 06)
  • Re: Do 1.9 rules work with 2.0? Kenneth G. Arnold (Apr 06)
  • Re: Do 1.9 rules work with 2.0? Erek Adams (Apr 06)
  • Re: Do 1.9 rules work with 2.0? Chris Green (Apr 07)
• Anyone integrated HIDS-style alerts into Snort DB? Jason Haar (Apr 06)
  • What have I screwed up on this SQL call? Jason Haar (Apr 10)
• unable to open //.snortrc Chia Alan (Apr 06)
• Too many alerts Egal A Egal - SA (Apr 07)
  • Re: Too many alerts Joerg Weber (Apr 07)
• Snort memory management routines Conrad Morgan (Apr 07)
• connect failed Jill Tovey (Apr 07)
  • Re: connect failed Erek Adams (Apr 07)
    • Re: connect failed Jill Tovey (Apr 08)
• GUI interface Stigers, David (Apr 07)
  • Re: GUI interface Erek Adams (Apr 07)
  • <Possible follow-ups>
  • RE: GUI INTERFACE William_Metcalf (Apr 07)
• ppd files for Time-Module Hobgood, Frankie (Apr 07)
• ICMP rule not behaving as expected Neil Dickey (Apr 07)
  • RE: ICMP rule not behaving as expected Tobias Rice (Apr 07)
  • <Possible follow-ups>
  • RE: ICMP rule not behaving as expected Neil Dickey (Apr 07)
• Email alerts Sudhakar Gummadi (Apr 07)
  • <Possible follow-ups>
  • Re: Email alerts Matt Kettler (Apr 07)
    • Re: Email alerts Erek Adams (Apr 08)
• New guy. Mike (Apr 07)
  • Re: New guy. Erek Adams (Apr 08)
  • <Possible follow-ups>
  • RE: New guy. L. Christopher Luther (Apr 07)
  • RE: New guy. Potts, Ross A. (Apr 07)
• stealth interface d_greenjr (Apr 07)
  • Re: stealth interface Matt Kettler (Apr 07)
  • Re: stealth interface Keg (Apr 07)
  • <Possible follow-ups>
  • RE: stealth interface Matt Yackley (Apr 07)
  • RE: stealth interface Vanish Pattni (DSL AK) (Apr 07)
  • RE: stealth interface Eric Baur (Apr 08)
    • Re: stealth interface Tom Culpepper (Apr 08)
      • Re: stealth interface d_greenjr (Apr 08)
      • Re: stealth interface Tom Culpepper (Apr 08)
      • Re: stealth interface Keg (Apr 10)
      • RE: stealth interface Michael Steele (Apr 08)
      • How to set WINDOWS up for a Stealth Interface... Michael Steele (Apr 09)
      • Re: How to set WINDOWS up for a Stealth Interface... Ueli Kistler (Apr 09)
      • Re: How to set WINDOWS up for a Stealth Interface... snort (Apr 09)
  • RE: stealth interface Chris Mann (Apr 08)
  • RE: stealth interface bmcdowell (Apr 09)
  • RE: stealth interface Donnie Green (Apr 09)
  • RE: stealth interface Sanderson, Josh (Apr 09)
  • RE: RE: stealth interface Eric Baur (Apr 10)
  • RE: stealth interface Wilhelm, Brent (Apr 14)
• SMTP From Comment Overflow rule problems Ron Shuck (Apr 07)
  • <Possible follow-ups>
  • Re: SMTP From Comment Overflow rule problems Scheidell (Apr 10)
• Network placement / using a VLAN Brian McIntyre (Apr 07)
  • Re: Network placement / using a VLAN Erek Adams (Apr 08)
  • <Possible follow-ups>
  • RE: Network placement / using a VLAN JP Vossen (Apr 07)
• Newbie questions are as newbie questions does Geoff Craig (Apr 07)
  • Re: Newbie questions are as newbie questions does Michael L. Artz (Apr 07)
  • Re: Newbie questions are as newbie questions does Erek Adams (Apr 08)
• Portscan False Positives From My IP Range Vintinner, M. Scott (Apr 07)
  • RE: Portscan False Positives From My IP Range Tobias Rice (Apr 07)
• alert file XRef URL's Chapman, Justin T (Apr 07)
  • Re: alert file XRef URL's Chris Green (Apr 10)
• WEB-MISC long basic authorization string Semerjian, Ohanes (Apr 07)
  • <Possible follow-ups>
  • RE: WEB-MISC long basic authorization string Matt Yackley (Apr 08)
  • RE: WEB-MISC long basic authorization string Semerjian, Ohanes (Apr 08)
• Snort Installation problem Aaron Babalola (Apr 08)
• Priority codes Philip Davidson (Apr 08)
• Bug Report Slighter, Tim (Apr 08)
  • OT: Help with Barnyard Gordon Cunningham (Apr 08)
• certificate verify error Jill Tovey (Apr 08)
  • Re: certificate verify error Erick Mechler (Apr 08)
    • Re: certificate verify error Jill Tovey (Apr 08)
      • Re: certificate verify error Erick Mechler (Apr 08)
      • Re: certificate verify error Jill Tovey (Apr 09)
      • Re: certificate verify error Erick Mechler (Apr 09)
  • Message not available
    • Re: certificate verify error Jill Tovey (Apr 08)
• sorry about that Erek Philip Davidson (Apr 08)
  • Re: sorry about that Erek Erek Adams (Apr 08)
• Snort behavior Slighter, Tim (Apr 08)
• ACID name resolution Keg (Apr 08)
  • Re: ACID name resolution Erick Mechler (Apr 08)
• UPNP alerts Keg (Apr 08)
• question Joe Hdez (Apr 08)
  • <Possible follow-ups>
  • Question Joe Hdez (Apr 08)
  • Question Joe Hdez (Apr 11)
    • Re: Question Brian (Apr 14)
  • Question Joe Hdez (May 13)
  • question Eric Garnel (May 26)
    • Re: question james (May 26)
  • Question Ryan Vennell (Jun 03)
    • Re: Question Erek Adams (Jun 03)
    • Re: Question Edin Dizdarevic (Jun 03)
    • Re: Question Joerg Weber (Jun 03)
  • RE: Question Schmehl, Paul L (Jun 03)
  • RE: Question adam.w.hogan (Jun 03)
• About idmef xml lucy lee (Apr 08)
  • <Possible follow-ups>
  • About IDMEF XML lucy lee (Apr 13)
  • about idmef xml lucy lee (Apr 16)
• Re: OT: Help with Barnyard Ralf Spenneberg (Apr 08)
  • RE: OT: Help with Barnyard Gordon Cunningham (Apr 09)
    • RE: OT: Help with Barnyard Ralf Spenneberg (Apr 09)
      • RE: OT: Help with Barnyard Gordon Cunningham (Apr 10)
      • RE: OT: Help with Barnyard Ralf Spenneberg (Apr 10)
      • RE: OT: Help with Barnyard Gordon Cunningham (Apr 10)
      • RE: OT: Help with Barnyard Ralf Spenneberg (Apr 10)
      • RE: OT: Help with Barnyard Gordon Cunningham (Apr 10)
  • RE: OT: Help with Barnyard Gordon Cunningham (Apr 09)
  • <Possible follow-ups>
  • Re: OT: Help with Barnyard Ralf Spenneberg (Apr 10)
• Capturing only specific data quantum (Apr 09)
• HOME_NET and EXTERNAL_NET snort.conf Allan Dover (Apr 09)
• Small n00b question Snow Jacob C KPWA (Apr 09)
• /var/log/snort/some.ip.addr.dir/ permissions problem Donnie Green (Apr 09)
  • Re: /var/log/snort/some.ip.addr.dir/ permissions problem Erek Adams (Apr 09)
    • Re: /var/log/snort/some.ip.addr.dir/ permissions problem Donnie Green Jr (Apr 10)
• Firewalls on IDS Tom Culpepper (Apr 09)
  • RE: Firewalls on IDS Brian Laing (Apr 09)
  • <Possible follow-ups>
  • RE: Firewalls on IDS Miller, Eoin (Apr 09)
    • RE: Firewalls on IDS Don Weber (Apr 09)
  • RE: Firewalls on IDS Robert Reid (Apr 09)
    • RE: Firewalls on IDS Brian Laing (Apr 10)
• Quick Question McBurnett, Jim (Apr 09)
  • Re: Quick Question Erick Mechler (Apr 09)
• Alert messages in packet dumps Neil Dickey (Apr 09)
  • <Possible follow-ups>
  • Re: Alert messages in packet dumps Neil Dickey (Apr 14)
    • Re: Alert messages in packet dumps Edin Dizdarevic (Apr 14)
• How to Use Throttle when using Swatch for duplicate email alerts Sudhakar Gummadi (Apr 09)
  • Re: How to Use Throttle when using Swatch for duplicate email alerts Sam Evans (Apr 09)
  • Re: How to Use Throttle when using Swatch for duplicate email alerts Erek Adams (Apr 09)
  • <Possible follow-ups>
  • RE: How to Use Throttle when using Swatch for duplicate email alerts Hutchinson, Andrew (Apr 10)
• OT- Can anyone recommend a log parser for cisco? David Gianndrea (Apr 09)
  • Re: OT- Can anyone recommend a log parser for cisco? James Hoagland (Apr 10)
  • Re: OT- Can anyone recommend a log parser for cisco? Erek Adams (Apr 10)
• P2P rule not working Jimmy Hernandez (Apr 09)
  • Re: P2P rule not working Jeff (Apr 09)
• Problems with Snort 2.0rc4 Anderson Johnston (Apr 09)
• stream5? raybo (Apr 09)
  • Re: stream5? Erek Adams (Apr 11)
• (A little off topic but not really) Connection dropping. Brei, Matt (Apr 09)
• sending snort output to a database OFFLINE Rakesh Kumar (Apr 09)
• Does snort support cygwin? Tay Chuan (Apr 10)
  • RE: Does snort support cygwin? Michael Steele (Apr 10)
• snortdb-extra Paulo Gomes (Apr 10)
  • <Possible follow-ups>
  • RE: snortdb-extra Hutchinson, Andrew (Apr 10)
• New Rules Question Sh J (Apr 10)
  • Re: New Rules Question Erek Adams (Apr 10)
    • Re: New Rules Question Matt Kettler (Apr 10)
• getting error when using -s snort snort (Apr 10)
  • Re: getting error when using -s Erek Adams (Apr 10)
  • <Possible follow-ups>
  • Re: getting error when using -s snort snort (Apr 10)
• Snort inline configuration Ueli Kistler (Apr 10)
• Re: OT- Can anyone recommend a log parser for cisco? Dusty Hall (Apr 10)
• ACID issue Slighter, Tim (Apr 10)
  • Re: ACID issue Michael Anderson (Apr 10)
  • <Possible follow-ups>
  • RE: ACID issue Slighter, Tim (Apr 10)
    • RE: ACID issue Mike (Apr 10)
  • RE: ACID issue Slighter, Tim (Apr 10)
• stream4 Steven Rudolph (Apr 10)
  • Re: stream4 Erek Adams (Apr 10)
    • Re: stream4 Chris Green (Apr 10)
• SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Sadanapalli, Pradeep Kumar (MED, TCS) (Apr 10)
  • Re: SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Jeff (Apr 10)
  • Re: SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Bennett Todd (Apr 10)
• Acid and PHP Redhat 8.0 Tom Morgan (Apr 10)
  • Re: Acid and PHP Redhat 8.0 David T Hollis (Apr 10)
  • Re: Acid and PHP Redhat 8.0 Keg (Apr 10)
  • Re: Acid and PHP Redhat 8.0 Franklin Rierson (Apr 11)
  • <Possible follow-ups>
  • FW: Acid and PHP Redhat 8.0 SecurityAdmin (Apr 10)
• snort+mysql+acid question Harish S (Apr 10)
  • Re: snort+mysql+acid question Mike Mentges (Apr 10)
  • <Possible follow-ups>
  • RE: snort+mysql+acid question Matt Yackley (Apr 10)
• aswer to snort Francisco Javier Gonzalez Gonzalez (Apr 10)
  • Re: aswer to snort David Alonso De La Vega Tapage (Apr 10)
• How to centralize traffic Gustavo Santos (Apr 10)
• OT- Can any one recommend a turnkey log parser for cisco. David Gianndrea (Apr 10)
• help li wei (Apr 10)
  • <Possible follow-ups>
  • RE: help Chapman, Justin T (Apr 10)
• snmp traps for snort Ronan Horgan (Apr 10)
• Snort inline configuration - Additional informations Ueli Kistler (Apr 10)
  • Re: Snort inline configuration - Additional informations Erek Adams (Apr 11)
• SnortCenter - Problem with sensor Retry Connecting Jeff Bolden (Apr 10)
• ignored 1 duplicate alert(s) ipwitch (Apr 10)
• RE: SNORT-1.9.0 problem with wireless network inte rface - network ge ts disabled Sadanapalli, Pradeep Kumar (MED, TCS) (Apr 10)
• RE: /var/log/snort/some.ip.addr.dir/ permissions pr oblem Matt Yackley (Apr 10)
  • Re: /var/log/snort/some.ip.addr.dir/ permissions pr oblem David Alonso De La Vega Tapage (Apr 10)
    • Re: /var/log/snort/some.ip.addr.dir/ permissions pr oblem ipwitch (Apr 10)
• are the Snort Signature Database or arachNIDS downloadable? snort (Apr 10)
• RE: [Snort-sigs] SMTP From Comment Overflow rule problems Ron Shuck (Apr 11)
• [Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Cory D. (Apr 11)
  • RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Michael Steele (Apr 11)
  • <Possible follow-ups>
  • RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Cory D. (Apr 11)
• Snort_inline and MySQL compile problems pieter claassen (Apr 11)
  • OT: The Signature from Hell Erek Adams (Apr 11)
  • <Possible follow-ups>
  • RE: Snort_inline and MySQL compile problems Slighter, Tim (Apr 11)
• RE: What have I screwed up on this SQL call? Hutchinson, Andrew (Apr 11)
  • Re: What have I screwed up on this SQL call? Jason Haar (Apr 11)
• Ignore host David Scott (Apr 11)
  • Re: Ignore host Erek Adams (Apr 11)
    • Re: Ignore host David Alonso De La Vega Tapage (Apr 11)
      • Re: Ignore host Erek Adams (Apr 11)
      • Re: Ignore host David Alonso De La Vega Tapage (Apr 11)
  • Re: Ignore host Kenneth G. Arnold (Apr 11)
• Sensor Config Creation in SnortCenter Shlomo Dubrowin (Apr 11)
  • Re: Sensor Config Creation in SnortCenter Shlomo Dubrowin (Apr 13)
• Understanding spp_portscan2 results Domingos Costa (Apr 11)
  • <Possible follow-ups>
  • RE: Understanding spp_portscan2 results Sasa Jusic (Apr 16)
• RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on wi nXp SecurityAdmin (Apr 11)
  • <Possible follow-ups>
  • RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on wi nXp SecurityAdmin (Apr 11)
• interpreting logs... Bruyere, Michel (Apr 11)
• RE: OT: The Signature from Hell Schmehl, Paul L (Apr 11)
  • <Possible follow-ups>
  • RE: OT: The Signature from Hell Bob Dehnhardt (Apr 11)
• Snort & RHL 9 Brian M. Diehl (Apr 11)
  • Re: Snort & RHL 9 David T Hollis (Apr 11)
  • RE: Snort & RHL 9 Paul D. Shaffer (Apr 11)
    • RE: Snort & RHL 9 Patrick S. Harper (Apr 12)
    • Frag2 Blake Frantz (Apr 14)
• SNMP request UDP Andrade, Leonardo F. Buonsanti de (IT - Brasil) (Apr 11)
• capturing arp Patrick Amirian (Apr 11)
  • Re: capturing arp Chris Green (Apr 14)
  • <Possible follow-ups>
  • Re: capturing arp Sergio Aldo Casas (Apr 13)
  • RE: capturing arp Spencer, Arthur (Apr 14)
    • RE: capturing arp Rich Adamson (Apr 14)
    • Re: capturing arp Jacques (Apr 14)
    • Re: capturing arp Edin Dizdarevic (Apr 14)
  • RE: capturing arp L. Christopher Luther (Apr 14)
• Web Session Capture and Replay Suwarna Patel (Apr 11)
  • Re: Web Session Capture and Replay Edin Dizdarevic (Apr 12)
    • DROP connections? /dev/null (Apr 12)
      • Re: DROP connections? Alberto Gonzalez (Apr 12)
      • Re: DROP connections? Derya Sezen (Apr 12)
• Best OS Ryan Finnesey (Apr 11)
  • Re: Best OS Edin Dizdarevic (Apr 12)
    • Re: Best OS Jeff (Apr 12)
  • Re: Best OS Mike Mentges (Apr 14)
  • <Possible follow-ups>
  • RE: Best OS Ryan Finnesey (Apr 12)
    • RE: Best OS Patrick S. Harper (Apr 12)
    • Dual Alerts ? David Markle (Apr 13)
  • RE: Best OS SecurityAdmin (Apr 12)
    • Re: Best OS Bruno Benchimol a.k.a. Misty MSt (Apr 13)
• Applied Watch for the Snort IDS is Now Available for Free Download Eric Hines (Apr 12)
• How can I stop checking for Truncated Tcp Options? Jacques (Apr 12)
  • Re: How can I stop checking for Truncated Tcp Options? Jacques (Apr 12)
  • Re: How can I stop checking for Truncated Tcp Options? Chris Green (Apr 15)
• RE: Applied Watch for the Snort IDS is Now Availabl e for Free Download SecurityAdmin (Apr 12)
  • RE: Applied Watch for the Snort IDS is Now Available for Free Download Michael Steele (Apr 12)
    • RE: Applied Watch for the Snort IDS is Now Available for Free Download Eric Hines (Apr 13)
• Snort 1.9.1, 1.9.1 chrooted and 2.0 rc4, Barnyard, Mudpit RPMs for RedHat 7.3, 8.0 and 9 Ralf Spenneberg (Apr 13)
• Time-modules problem in PPM victor.lee (Apr 13)
  • RE: Time-modules problem in PPM Michael Steele (Apr 13)
• Where and when do snort decide which CID to give to a event? jkv (Apr 13)
  • Re: Where and when do snort decide which CID to give to a event? Paul Schmehl (Apr 13)
  • Re: Where and when do snort decide which CID to give to a event? jkv (Apr 13)
• Snort-inline and MySQL pieter claassen (Apr 13)
  • <Possible follow-ups>
  • Snort-inline and MySQL pieter claassen (Apr 14)
• MY SQL, SNORT. rehanann (Apr 13)
  • RE: MY SQL, SNORT. David Markle (Apr 14)
    • Re: MY SQL, SNORT. Jacques (Apr 14)
  • Re: MY SQL, SNORT. Patrick S. Harper (Apr 14)
• snort 2.0.0rc4 openbsd 3.2 short udp packet complaints robin (Apr 13)
  • Re: snort 2.0.0rc4 openbsd 3.2 short udp packet complaints Chris Green (Apr 14)
• Inaccurate info !! KD Rajkumar (Apr 13)
• Trouble reading snort.log.* Jacques (Apr 13)
  • Re: Trouble reading snort.log.* Michael Boman (Apr 13)
• AW: About IDMEF XML Poppi, Sandro (Apr 14)
• Can snort detect the SYN flood? Wei Nan (Apr 14)
  • Re: Can snort detect the SYN flood? Chris Green (Apr 15)
• ODBC+TDS woes Jeff (Apr 14)
  • <Possible follow-ups>
  • ODBC+TDS woes Jeff (Apr 14)
    • Re: ODBC+TDS woes Paul Schmehl (Apr 14)
      • Re: ODBC+TDS woes Jeff (Apr 14)
• Snort Windows - not working with ISDN Adapter Mirko Matytschak (Apr 14)
  • Re: Snort Windows - not working with ISDN Adapter snort (Apr 14)
  • <Possible follow-ups>
  • Snort Windows - not working with ISDN Adapter Mirko Matytschak (Apr 14)
    • RE: Snort Windows - not working with ISDN Adapter Michael Steele (Apr 14)
  • RE: Snort Windows - not working with ISDN Adapter Joe Lawson (Apr 14)
  • RE: Snort Windows - not working with ISDN Adapter L. Christopher Luther (Apr 14)
• snort 1-9-1 W2K ISDN not working Mirko Matytschak (Apr 14)
  • <Possible follow-ups>
  • RE: snort 1-9-1 W2K ISDN not working L. Christopher Luther (Apr 14)
• snort a Gbps? Bennett Todd (Apr 14)
• Re: snort 2.0.0rc4 openbsd 3.2 short udp packetcomplaints (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 14)
• Snort 2.0 Released! Martin Roesch (Apr 14)
  • Re: [Snort-devel] Snort 2.0 Released! Kevin J. Schmidt (Apr 14)
    • Re: Re: [Snort-devel] Snort 2.0 Released! Chris Green (Apr 15)
      • Re: Re: [Snort-devel] Snort 2.0 Released! Kevin J. Schmidt (Apr 15)
      • SNMP plugin removed from Snort Jose Vicente Nunez Z (Apr 15)
      • Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Martin Olsson (Apr 17)
      • Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Martin Roesch (Apr 18)
      • Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Erick Mechler (Apr 18)
      • Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Kevin J. Schmidt (Apr 18)
      • Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Jose Vicente Nunez Zuleta (Apr 18)
      • Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Ian S. Nelson (Apr 20)
  • Windump doesn't work now. LucAdmin (Apr 15)
    • Re: Windump doesn't work now. Rich Adamson (Apr 15)
• RE: Dual Alerts ? L. Christopher Luther (Apr 14)
  • RE: Dual Alerts ? David Markle (Apr 14)
  • <Possible follow-ups>
  • RE: Dual Alerts ? L. Christopher Luther (Apr 14)
• Too many links error Jaya Shankar (Apr 14)
• Snort on Windows 2003 server Robert Reid (Apr 14)
  • RE: Snort on Windows 2003 server Michael Steele (Apr 14)
• Snortcenter and windows Snow Jacob C KPWA (Apr 14)
  • RE: Snortcenter and windows Michael Steele (Apr 14)
  • <Possible follow-ups>
  • RE: Snortcenter and windows Michael Steele (Apr 14)
• snort rules flow option Michael Goodman (Apr 14)
  • Re: snort rules flow option Chris Green (Apr 21)
  • Re: snort rules flow option Brian (Apr 25)
• Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 14)
  • Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic (Apr 15)
    • Re: capturing arp (Absent jusqu'au 29/07/2002) Chris Green (Apr 16)
      • Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic (Apr 16)
  • <Possible follow-ups>
  • Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 16)
  • Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 16)
• A little pass rule help Keg (Apr 14)
  • Re: A little pass rule help Chris Green (Apr 21)
  • <Possible follow-ups>
  • RE: A little pass rule help L. Christopher Luther (Apr 14)
    • Re: A little pass rule help Keg (Apr 15)
    • Re: A little pass rule help Keg (Apr 15)
  • RE: A little pass rule help L. Christopher Luther (Apr 15)
• Applied Watch is now FREE for Non-Commercial Use after overwhelming Demand! Eric Hines (Apr 14)
• old version of snort? Liuhy (Apr 15)
  • Re: old version of snort? Patrick S. Harper (Apr 15)
  • Re: old version of snort? Brian (Apr 16)
• No output to ACID Jill Tovey (Apr 15)
  • Re: No output to ACID Edin Dizdarevic (Apr 15)
    • Re: No output to ACID Jill Tovey (Apr 15)
      • Re: No output to ACID Edin Dizdarevic (Apr 15)
      • Message not available
      • Re: No output to ACID Edin Dizdarevic (Apr 15)
      • Re: No output to ACID Joerg Weber (Apr 15)
  • Message not available
    • Re: No output to ACID Jill Tovey (Apr 15)
• writing rules for snort 1.6 Liuhy (Apr 15)
• Portscan with ICMP? Edin Dizdarevic (Apr 15)
• snortrules.tar.gz Grime, Richard S (Apr 15)
  • Re: snortrules.tar.gz Erick Mechler (Apr 15)
    • Re: snortrules.tar.gz Paul Schmehl (Apr 15)
      • Re: snortrules.tar.gz Andreas Östling (Apr 15)
      • Re: snortrules.tar.gz Paul Schmehl (Apr 16)
• Clean DB && Barnyard Start Joerg Weber (Apr 15)
• AW: writing rules for snort 1.6 Poppi, Sandro (Apr 15)
• Help Needed: i want to make a firewall Junaid (Apr 15)
  • <Possible follow-ups>
  • Help Needed: i want to make a firewall Junaid (Apr 15)
  • Help Needed: i want to make a firewall Junaid (Apr 15)
  • RE: Help Needed: i want to make a firewall Philip Davidson (Apr 15)
• [Fwd: Re: No output to ACID] Jill Tovey (Apr 15)
  • <Possible follow-ups>
  • [Fwd: Re: No output to ACID] Jill Tovey (Apr 15)
• Re: Re: [Snort-devel] Snort 2.0 Released! (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 15)
• spp_stream4 possible EVASIVE RST KD Rajkumar (Apr 15)
• RE: Re: [Snort-devel] Snort 2.0 Released! larosa, vjay (Apr 15)
• Snort 2.0 and SnortCenter Reda Hicham (Apr 15)
• logsnorter Rolf Brusletto (Apr 15)
• Re: Can snort detect the SYN flood? (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 15)
• Re: How can I stop checking for Truncated TcpOptions? (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 15)
• Still Help Needed: i want to make a firewall Junaid (Apr 15)
  • Re: Still Help Needed: i want to make a firewall Mike Mentges (Apr 15)
    • Re: Still Help Needed: i want to make a firewall Paul Schmehl (Apr 15)
  • Re: {SPAM} Still Help Needed: i want to make a firewall Matt Kettler (Apr 15)
  • Re: Still Help Needed: i want to make a firewall Patrick S. Harper (Apr 15)
    • Re: Still Help Needed: i want to make a firewall Jason (Apr 15)
  • <Possible follow-ups>
  • Still Help Needed: i want to make a firewall Junaid (Apr 15)
  • RE: Still Help Needed: i want to make a firewall bmcdowell (Apr 15)
  • RE: Still Help Needed: i want to make a firewall Robert Reid (Apr 15)
    • RE: Still Help Needed: i want to make a firewall Michael Steele (Apr 16)
      • RE: Still Help Needed: i want to make a firewall Mike Mentges (Apr 16)
      • RE: Still Help Needed: i want to make a firewall Matt Kettler (Apr 16)
      • RE: Still Help Needed: i want to make a firewall Michael Steele (Apr 16)
      • RE: Still Help Needed: i want to make a firewall Rich Adamson (Apr 17)
  • RE: Still Help Needed: i want to make a firewall Horta, Benny (Apr 16)
  • RE: Still Help Needed: i want to make a firewall Mirko Matytschak (Apr 17)
  • RE: Still Help Needed: i want to make a firewall Robert Reid (Apr 17)
  • RE: Still Help Needed: i want to make a firewall James Bly (Apr 17)
  • RE: Still Help Needed: i want to make a firewall Robert Reid (Apr 17)
    • RE: Still Help Needed: i want to make a firewall Michael Steele (Apr 17)
      • RE: Still Help Needed: i want to make a firewall Paul Schmehl (Apr 17)
      • RE: Still Help Needed: i want to make a firewall Matt Kettler (Apr 17)
  • RE: Still Help Needed: i want to make a firewall Donofrio, Lewis (Apr 17)
• SID 1042 and WebDAV Scott, Joshua (Apr 15)
• [Fwd: CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability] Jose Vicente Nunez Z (Apr 15)
• stream4 vulnerability Erick Mechler (Apr 15)
• RE: Windump doesn't work now. L. Christopher Luther (Apr 15)
• New stream 4 messages in 2.0 Russell Fulton (Apr 15)
  • Re: New stream 4 messages in 2.0 Chris Green (Apr 21)
  • <Possible follow-ups>
  • RE: New stream 4 messages in 2.0 Slighter, Tim (Apr 21)
• RE: {SPAM} Still Help Needed: i want to make a fire wall Robert Reid (Apr 15)
• Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler (Apr 15)
• some strange alerts dawnshade (Apr 15)
  • <Possible follow-ups>
  • some strange alerts dawnshade (Apr 16)
• Need to MAKE/DEVELOP my own firewall Junaid (Apr 16)
  • Re: {SPAM} Need to MAKE/DEVELOP my own firewall Matt Kettler (Apr 16)
• How to handle BPDU packet in Snort? Mzhuzeus (Apr 16)
  • Re: How to handle BPDU packet in Snort? Chris Green (Apr 21)
    • Re: How to handle BPDU packet in Snort? twig les (Apr 21)
• can I remove asn1_decode preprocessor? Clayton Mascarenhas (Apr 16)
  • Re: can I remove asn1_decode preprocessor? Paul B. Poh (Apr 16)
• plz help preethi suvarna (Apr 16)
  • <Possible follow-ups>
  • RE: plz help Semerjian, Ohanes (Apr 17)
  • plz help smitha rao (Apr 22)
    • Re: plz help Tantravahi Venkata Aditya (Apr 23)
      • Re: plz help Matt Schillinger (Apr 23)
  • plz help Gaurav Kumar (Jun 16)
    • RE: plz help Chris N. (Jun 16)
  • RE: plz help Esler, Joel Contractor (Jun 16)
• False positives portscan2 bob gunzel (Apr 16)
• AW: plz help Poppi, Sandro (Apr 16)
• what version of SPADE to use with Snort? BHR Hana (Apr 16)
  • Re: what version of SPADE to use with Snort? James Hoagland (Apr 16)
• Confiremation of BO needed! Edin Dizdarevic (Apr 16)
  • Re: Confiremation of BO needed! Edin Dizdarevic (Apr 16)
• no portscan traffic Gosswiler Bjoern (Apr 16)
• AW: no portscan traffic Poppi, Sandro (Apr 16)
• snort-inline error Kathy A (Apr 16)
• snort, postgres, acid Jason (Apr 16)
• snort 2.0 errors michaeltone1975 (Apr 16)
• Acid vs Fwlogwatch Drew Cutter (Apr 16)
• Oracle Compromise (Tftp + Netcat) Dusty Hall (Apr 16)
• OpenPcap( ) error with snort 2.0 Storment, Brandon (Apr 16)
• Acid slowness Comcast (Apr 16)
  • Re: Acid slowness Mike Mentges (Apr 16)
  • <Possible follow-ups>
  • Re: Acid slowness Dusty Hall (Apr 16)
  • Re: Acid slowness JP Vossen (Apr 16)
  • Re: Acid slowness Dusty Hall (Apr 17)
  • RE: Acid slowness francisv (Apr 21)
  • Re: Acid slowness Dusty Hall (Apr 22)
• portscan target filter ? Charles Gillet (Apr 16)
  • <Possible follow-ups>
  • RE: portscan target filter ? L. Christopher Luther (Apr 22)
    • Re: portscan target filter ? Charles Gillet (Apr 23)
  • RE: portscan target filter ? L. Christopher Luther (Apr 23)
• Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release David Benham (Apr 16)
  • Re: Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release Frank Knobbe (Apr 16)
• Re: Your message to Snort-users awaits moderator approval smitha rao (Apr 16)
• Portscan2 ignorehosts Artur Bittencourt (Apr 16)
  • <Possible follow-ups>
  • RE: Portscan2 ignorehosts L. Christopher Luther (Apr 22)
• Snort Advisory: Integer Overflow in Stream4 Brian Caswell (Apr 16)
• Re: Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release] Jason (Apr 16)
• install snort on RH linux victor (Apr 16)
  • Re: install snort on RH linux Mike Mentges (Apr 16)
  • <Possible follow-ups>
  • Re: install snort on RH linux Ty Bodell (Apr 16)
• RSA Conference 2003 Michael Steele (Apr 16)
  • Re: RSA Conference 2003 mcmurry jim (Apr 17)
    • RE: RSA Conference 2003 Michael Steele (Apr 17)
• Securing a Snort machine Elvira_Byrnes (Apr 16)
  • Re: Securing a Snort machine Patrick S. Harper (Apr 16)
  • <Possible follow-ups>
  • RE: Securing a Snort machine Elvira_Byrnes (Apr 16)
    • Re: Securing a Snort machine Michael Anderson (Apr 17)
    • RE: Securing a Snort machine Matt Kettler (Apr 17)
      • Re: Securing a Snort machine Saad Kadhi (Apr 18)
      • Performance Bottleneck Daniel R. Miessler (Apr 18)
  • RE: Securing a Snort machine Elvira_Byrnes (Apr 16)
  • RE: Securing a Snort machine Semerjian, Ohanes (Apr 17)
  • RE: Securing a Snort machine Semerjian, Ohanes (Apr 17)
  • Re: Securing a Snort machine M M (Apr 17)
  • RE: Securing a Snort machine Dean Scott (Apr 17)
  • RE: Securing a Snort machine Elvira_Byrnes (Apr 22)
• RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Elvira_Byrnes (Apr 17)
  • RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler (Apr 17)
  • snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Mike Chandler (Apr 19)
    • RE: snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Paul D. Shaffer (Apr 19)
      • RE: snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Mike Chandler (Apr 19)
      • Snort and MySQL - Do they benefit from multiple processors ??? Daniel R. Miessler (Apr 19)
      • PureSecure using Snort 2.x now... Daniel R. Miessler (Apr 19)
• udpflood attack ! Liuhy (Apr 17)
  • Re: udpflood attack ! Matt Kettler (Apr 17)
• emty logs Bart Decker (Apr 17)
• Creating a new rule David Cintron (Apr 17)
• Installations of Snort on linux hu ming (Apr 17)
• Snort on Wireless Sadanapalli, Pradeep Kumar (MED, TCS) (Apr 17)
  • Re: Snort on Wireless Jason (Apr 17)
  • Re: Snort on Wireless Michael Santos (Apr 17)
    • Re: Snort on Wireless Bennett Todd (Apr 17)
  • Re: Snort on Wireless Chris Green (Apr 21)
    • Re: Snort on Wireless Bennett Todd (Apr 21)
  • <Possible follow-ups>
  • RE: Snort on Wireless Philip Davidson (Apr 17)
  • Re: Snort on Wireless Brent Wrisley (Apr 22)
  • snort on wireless Vaidehi Kasarekar (May 31)
• empty logs..how come ?? Bart Decker (Apr 17)
  • Re: empty logs..how come ?? Matt Kettler (Apr 17)
• Two items that are hard to digest... Michael Steele (Apr 17)
  • Re: Two items that are hard to digest... Sam Evans (Apr 17)
    • RE: Two items that are hard to digest... Michael Steele (Apr 17)
      • Re: Two items that are hard to digest... Michael Anderson (Apr 17)
      • RE: Two items that are hard to digest... Michael Steele (Apr 17)
      • RE: Two items that are hard to digest... Matt Kettler (Apr 17)
      • RE: Two items that are hard to digest... Michael Steele (Apr 17)
      • RE: Two items that are hard to digest... Matt Kettler (Apr 17)
      • Re: Two items that are hard to digest... Chris Reid (Apr 17)
      • Re: Two items that are hard to digest... Sam Evans (Apr 17)
      • Re: Two items that are hard to digest... Chris Reid (Apr 17)
      • Clarification: Two items that are hard to digest... Michael Steele (Apr 17)
      • Re: Clarification: Two items that are hard to digest... Matt Kettler (Apr 17)
      • Re: Where's Waldo^H^H^H^H^HErek Erek Adams (Apr 21)
      • Re: Re: Where's Waldo^H^H^H^H^HErek David Alonso De La Vega Tapage (Apr 21)
      • RE: Two items that are hard to digest... Michael Steele (Apr 17)
    • Re: Two items that are hard to digest... Jose Vicente Nunez Z (Apr 17)
  • Re: Two items that are hard to digest... Edin Dizdarevic (Apr 17)
  • Re: Two items that are hard to digest... Matt Kettler (Apr 17)
    • RE: Two items that are hard to digest... Michael Steele (Apr 17)
      • RE: Two items that are hard to digest... Matt Kettler (Apr 17)
      • RE: Two items that are hard to digest... Michael Steele (Apr 17)
      • Re: Two items that are hard to digest... Erick Mechler (Apr 17)
  • <Possible follow-ups>
  • RE: Two items that are hard to digest... Matt Kettler (Apr 17)
• Snort 2.0 Ma, Kenneth K. (Apr 17)
  • Re: Snort 2.0 Mike Mentges (Apr 17)
    • Re: Snort 2.0 Mike Mentges (Apr 17)
  • RE: Snort 2.0 Michael Steele (Apr 17)
  • Re: Snort 2.0 Michael Anderson (Apr 17)
• Editing rules within Webmin Paul Jacobs (Apr 17)
  • <Possible follow-ups>
  • Editing rules within Webmin Robin Brown (Apr 17)
• Alert file exceeds 2GB Dusty Hall (Apr 17)
  • Re: Alert file exceeds 2GB Erick Mechler (Apr 17)
    • Re: Alert file exceeds 2GB Erek Adams (Apr 21)
• Snort Alert Content Telnet kaihansen (Apr 17)
• Configure Error in snort 2.0.0 David Alonso De La Vega Tapage (Apr 17)
  • <Possible follow-ups>
  • Re: Configure Error in snort 2.0.0 Neil Dickey (Apr 17)
    • Re: Configure Error in snort 2.0.0 David Alonso De La Vega Tapage (Apr 17)
    • Re: Configure Error in snort 2.0.0 David Alonso De La Vega Tapage (Apr 17)
  • RE: Configure Error in snort 2.0.0 Schmehl, Paul L (Apr 17)
• Procedure to upgrade snort 1.9.1 to 2.0 on linux 8.0 Sudhakar Gummadi (Apr 17)
• FW: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Vicky Rode (Apr 17)
  • <Possible follow-ups>
  • Fw: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors James-lists (Apr 17)
• Cert Advisory and now no SNMP traps. larosa, vjay (Apr 17)
  • Re: Cert Advisory and now no SNMP traps. Kevin J. Schmidt (Apr 17)
  • Re: Cert Advisory and now no SNMP traps. Chris Green (Apr 21)
• RE: (Off List) Two items that are hard to digest... Michael Steele (Apr 17)
  • <Possible follow-ups>
  • RE: (Off List) Two items that are hard to digest... L. Christopher Luther (Apr 17)
• unknown preprocessor "asn1_decode" Kit Massengill (Apr 17)
  • Re: unknown preprocessor "asn1_decode" Matt Kettler (Apr 17)
  • <Possible follow-ups>
  • RE: unknown preprocessor "asn1_decode" SRH-Lists (Apr 17)
• Email Alert for Windows - Testers Needed Michael Steele (Apr 17)
• Users and Groups for Snort rules - files Kit Massengill (Apr 17)
  • <Possible follow-ups>
  • Re: Users and Groups for Snort rules - files Neil Dickey (Apr 17)
• Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Glenn Forbes Fleming Larratt (Apr 17)
  • Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Chris Reid (Apr 17)
• Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Matt Kettler (Apr 17)
  • Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Rich Adamson (Apr 18)
• generating an alert Rick S. (Apr 17)
  • RE: generating an alert Michael Steele (Apr 17)
    • RE: generating an alert Rick S. (Apr 17)
• Upgrade snort 1.9.1 to 2.0 on Linux 8 (No alerts) Sudhakar Gummadi (Apr 17)
  • RE: Upgrade snort 1.9.1 to 2.0 on Linux 8 (No alerts) Michael Steele (Apr 17)
• Benchmarking snort Michael L. Artz (Apr 17)
  • Re: Benchmarking snort Bennett Todd (Apr 17)
• snort 2.x.x RPM Michael Mansour (Apr 18)
• time problem TAYLAN KIRAN (Apr 18)
  • Re: time problem Matt Kettler (Apr 18)
• (spp_stream4) TTL LIMIT Exceeded John Hally (Apr 18)
• Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? (fwd) Glenn Forbes Fleming Larratt (Apr 18)
• strange behavior with ACID Slighter, Tim (Apr 18)
• MySql-Acid logging Cilin (Apr 18)
  • Re: MySql-Acid logging Rolf Brusletto (Apr 18)
  • RE: MySql-Acid logging Michael Steele (Apr 18)
  • Re: MySql-Acid logging Shawn Duffy (Apr 18)
  • <Possible follow-ups>
  • RE: MySql-Acid logging Elvira_Byrnes (Apr 22)
• RH8 + Snort 2.0.0 Segmentation Fault on startup James Garrison (Apr 18)
  • Re: RH8 + Snort 2.0.0 Segmentation Fault on startup James Garrison (Apr 18)
• Attention Windows Users : Install Complete IDS Solution on Windows - New Updates! Michael Steele (Apr 18)
• historical records of Snort logs? Ryan Finnesey (Apr 18)
  • Re: historical records of Snort logs? Paul Schmehl (Apr 19)
    • RE: historical records of Snort logs? Toby Miller (Apr 19)
  • Re: historical records of Snort logs? Skip Carter (Apr 19)
• Snort 2.0.0 RPMs? Ty Bodell (Apr 18)
• Re: snort 2.x.x RPM (Michael Mansour) Ralf Spenneberg (Apr 19)
• multiple files off of stdin? Michael L. Artz (Apr 19)
  • Re: multiple files off of stdin? Phil Wood (Apr 19)
    • Re: multiple files off of stdin? Michael L. Artz (Apr 19)
  • Re: multiple files off of stdin? Chris Green (Apr 23)
• RE: PureSecure using Snort 2.x now... Robert Reid (Apr 19)
• Sample Pass rules Always Bishan (Apr 20)
• Snort Security ? How to ? Always Bishan (Apr 20)
  • Re: Snort Security ? How to ? d_greenjr (Apr 20)
    • Re: Snort Security ? How to ? {correctios} d_greenjr (Apr 22)
• Pass rule not passing preprocessors Always Bishan (Apr 20)
  • Re: Pass rule not passing preprocessors Bennett Todd (Apr 20)
  • Re: Pass rule not passing preprocessors Chris Green (Apr 21)
• Snort 2.0 dropping packets Always Bishan (Apr 20)
  • Re: Snort 2.0 dropping packets Bennett Todd (Apr 20)
  • Re: Snort 2.0 dropping packets Edin Dizdarevic (Apr 20)
    • Re: Snort 2.0 dropping packets Gary Flynn (Apr 21)
      • Re: Snort 2.0 dropping packets Bennett Todd (Apr 21)
  • <Possible follow-ups>
  • Re: Snort 2.0 dropping packets Neil Dickey (Apr 21)
    • Re: Snort 2.0 dropping packets Edin Dizdarevic (Apr 21)
      • Re: Snort 2.0 dropping packets Bennett Todd (Apr 21)
• Byte_jump & byte_check mjanssens (Apr 20)
• new features of snort 2.0 fa007883 (Apr 20)
• Snort 2.0.0 upgraded failed miserably Bill Frische (Apr 20)
• Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Roman Danyliw (Apr 20)
  • Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Kevin J. Schmidt (Apr 21)
• mrtg machine Ben Whittaker (Apr 20)
  • Rule help Please Ben Whittaker (Apr 21)
  • <Possible follow-ups>
  • RE: mrtg machine Slighter, Tim (Apr 21)
• detecting http-tunnel traffic Derya Sezen (Apr 20)
• iptables vs snort vs portsentry order Sonia Hamilton (Apr 20)
• BPF filter Liuhy (Apr 21)
  • Re: BPF filter Chris Reid (Apr 21)
  • Re: BPF filter Edin Dizdarevic (Apr 21)
• snort -r output Tay Chee Yong (Apr 21)
  • Re: snort -r output John Sage (Apr 21)
  • Re: snort -r output twig les (Apr 21)
• Re: New stream 4 messages in 2.0 (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Re: How to handle BPDU packet in Snort? (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Re: New stream 4 messages in 2.0 (test) Alex Polevoy (Apr 21)
• Re: A little pass rule help (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• threaded Matt Schillinger (Apr 21)
• Re: Cert Advisory and now no SNMP traps. (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Re: Pass rule not passing preprocessors (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Re: snort rules flow option (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Problems with ACID Slighter, Tim (Apr 21)
  • Re: Problems with ACID Marc Spitzer (Apr 21)
• Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes (Apr 21)
  • Re: Installing Snort with PHP, MySQL, ACID,etc David Alonso De La Vega Tapage (Apr 21)
  • Re: Installing Snort with PHP, MySQL, ACID,etc Patrick S. Harper (Apr 21)
    • Re: Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes (Apr 22)
      • Re: Installing Snort with PHP, MySQL, ACID,etc Patrick S. Harper (Apr 22)
  • <Possible follow-ups>
  • RE: Installing Snort with PHP, MySQL, ACID,etc Slighter, Tim (Apr 21)
    • Re: Installing Snort with PHP, MySQL, ACID,etc David Alonso De La Vega Tapage (Apr 21)
  • RE: Installing Snort with PHP, MySQL, ACID,etc Slighter, Tim (Apr 21)
    • Re: Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes (Apr 22)
• Snort 2.0 and Barnyard 0.1.0 Francis Vidal (Apr 21)
  • Re: Snort 2.0 and Barnyard 0.1.0 Andrew R. Baker (Apr 22)
    • RE: Snort 2.0 and Barnyard 0.1.0 Francis Vidal (Apr 22)
• Re: "Saving State" in Snort (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Re: Snort on Wireless (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)
• Snort on an Voice over IP Network Snow Jacob C KPWA (Apr 21)
• snort 2.0.0 with mysql .. David Alonso De La Vega Tapage (Apr 21)
  • <Possible follow-ups>
  • RE: snort 2.0.0 with mysql .. Slighter, Tim (Apr 21)
    • Re: snort 2.0.0 with mysql .. David Alonso De La Vega Tapage (Apr 21)
• ERROR: Please activate spp_conversation before trying to activate spp_portscan2 Kit Massengill (Apr 21)
  • <Possible follow-ups>
  • Re: ERROR: Please activate spp_conversation before trying to activate spp_portscan2 Neil Dickey (Apr 21)
• re: snort 2.0.0 with mysql Mike Chandler (Apr 21)
  • Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage (Apr 21)
    • Re: snort 2.0.0 with mysql Mike Chandler (Apr 21)
      • Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage (Apr 21)
      • Re: snort 2.0.0 with mysql Mike Chandler (Apr 22)
      • Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage (Apr 22)
  • <Possible follow-ups>
  • re: snort 2.0.0 with mysql David Powell (Apr 22)
    • re: snort 2.0.0 with mysql twig les (Apr 22)
    • Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage (Apr 22)
• Newbie question Chris (Apr 21)
  • Re: Newbie question Erick Mechler (Apr 21)
  • Re: Newbie question (FAQ 4.3 update requested) Matt Kettler (Apr 21)
  • <Possible follow-ups>
  • RE: Newbie question Potts, Ross A. (Apr 23)
  • Newbie Question Wilcoxen, Scott (Apr 25)
  • RE: Newbie Question Pacheco, Michael F. (Apr 25)
  • RE: Newbie Question Wilcoxen, Scott (Apr 27)
• Re: Pascal Painparay [pascal.painparay () tdf fr] Slighter, Tim (Apr 21)
• Re: Re: Pascal Painparay [pascal.painparay () tdf fr] Matt Kettler (Apr 21)
• preprocessor definition in snort manual!?!?!? Derya Sezen (Apr 21)
  • Re: preprocessor definition in snort manual!?!?!? Matt Kettler (Apr 21)
• Re: snort -r output (Absent jusqu'au 29/07/2002) twig les (Apr 21)
• snort breakdown Hanumantha R. Manchala (Apr 21)
  • Re: snort breakdown Bennett Todd (Apr 21)
• Updated Snort Enterprise Implementation Guide Steven J. Scott (Apr 21)
• Define sealth eth0 David Alonso De La Vega Tapage (Apr 21)
• unscribe BENZ LEE (Apr 21)
• flexresp problem Reet (Apr 22)
  • Re: flexresp problem Muenz, Michael (Apr 22)
    • Re: flexresp problem Reet (Apr 22)
      • Re: flexresp problem Muenz, Michael (Apr 22)
      • Re: flexresp problem Reet (Apr 22)
• snot Jill Tovey (Apr 22)
• snort + email + alert Mario Karcevski (Apr 22)
  • Re: snort + email + alert Matt Kettler (Apr 22)
  • <Possible follow-ups>
  • Re: snort + email + alert Patrice . Arnal (Apr 25)
• Strange ICMP Log Ron Shuck (Apr 22)
  • <Possible follow-ups>
  • FW: Strange ICMP Log Ron Shuck (Apr 22)
• Snort DB schema for Postgresql has wrong data type "datetime" Roberto Suarez Soto (Apr 22)
• snort 2 / mysql / static/ undefined reference to uncompress Mike Caughran (Apr 22)
  • Re: snort 2 / mysql / static/ undefined reference to uncompress David Alonso De La Vega Tapage (Apr 22)
  • <Possible follow-ups>
  • Re: snort 2 / mysql / static/ undefined reference to uncompress Mike Caughran (Apr 23)
• Fuzzy Matching in Snort Thoplaop (Apr 22)
• smb alerts Chris (Apr 22)
• Invalid Iterface... Mohammad Alimohammadi (Apr 22)
  • <Possible follow-ups>
  • RE: Invalid Iterface... L. Christopher Luther (Apr 22)
    • RE: Invalid Iterface... Mohammad Alimohammadi (Apr 22)
      • RE: Invalid Iterface... Michael Steele (Apr 22)
  • RE: Invalid Iterface... L. Christopher Luther (Apr 22)
  • Re: Invalid Iterface... Thomas Schweikle (Apr 22)
• Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
  • RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
    • RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
  • <Possible follow-ups>
  • RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
  • RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
    • RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi (Apr 22)
      • Re: Invalid Iterface with snort 2.0.0... Chris Reid (Apr 22)
      • RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
  • RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
    • RE: Invalid Iterface with snort 2.0.0... Michael Steele (Apr 22)
  • RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther (Apr 22)
• SNMP? larosa, vjay (Apr 22)
  • Kazaa P2P Rules Allan Dover (Apr 22)
    • Re: Kazaa P2P Rules Sam Evans (Apr 22)
  • Re: SNMP? Glenn Mansfield Keeni (Apr 23)
    • Re: SNMP? Martin Olsson (May 23)
  • <Possible follow-ups>
  • RE: SNMP? larosa, vjay (Apr 23)
• Re: German Book covering Snort Ralf Spenneberg (Apr 22)
• Snort 2.0 as a Windows Service?? kerberos K (Apr 22)
  • RE: Snort 2.0 as a Windows Service?? Michael Steele (Apr 22)
  • <Possible follow-ups>
  • RE: Snort 2.0 as a Windows Service?? Uhte, Russ (Apr 22)
  • RE: Snort 2.0 as a Windows Service?? kerberos K (Apr 22)
    • RE: Snort 2.0 as a Windows Service?? Erek Adams (Apr 23)
      • RE: Snort 2.0 as a Windows Service?? Michael Steele (Apr 23)
      • RE: Snort 2.0 as a Windows Service?? Erek Adams (Apr 23)
      • RE: Snort 2.0 as a Windows Service?? Erek Adams (Apr 23)
  • RE: Snort 2.0 as a Windows Service?? Uhte, Russ (Apr 23)
    • RE: Snort 2.0 as a Windows Service?? Michael Steele (Apr 23)
  • RE: Snort 2.0 as a Windows Service?? Uhte, Russ (Apr 23)
  • RE: Snort 2.0 as a Windows Service?? Michael Steele (Apr 23)
• snort/syslog/Win2k Julian Brown (Apr 22)
  • RE: snort/syslog/Win2k Michael Steele (Apr 22)
    • RE: snort/syslog/Win2k Julian Brown (Apr 22)
  • <Possible follow-ups>
  • RE: snort/syslog/Win2k L. Christopher Luther (Apr 22)
• options for consideration Slighter, Tim (Apr 22)
  • <Possible follow-ups>
  • RE: options for consideration L. Christopher Luther (Apr 22)
    • Re: options for consideration Allan Dover (Apr 23)
• new user, great product, but ... Allen, Garrett (Apr 22)
  • Re: new user, great product, but ... twig les (Apr 22)
  • Re: new user, great product, but ... Erek Adams (Apr 23)
  • <Possible follow-ups>
  • RE: new user, great product, but ... Allen, Garrett (Apr 22)
    • RE: new user, great product, but ... twig les (Apr 22)
    • Re: new user, great product, but ... Michael Anderson (Apr 22)
  • Re: new user, great product, but ... Neil Dickey (Apr 22)
  • RE: new user, great product, but ... Allen, Garrett (Apr 22)
• snort logs timestamp Romildo Wildgrube (Apr 22)
  • Re: snort logs timestamp Erek Adams (Apr 23)
  • <Possible follow-ups>
  • Re: snort logs timestamp Roman Danyliw (Apr 23)
• RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Elvira_Byrnes (Apr 22)
  • RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Patrick S. Harper (Apr 23)
    • Fixed My Problems with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler (Apr 23)
• Snortcenter 1.0 + Snort 2.0 Michael (Apr 23)
• upgrade Rajagopal, Sriram(TSD) (Apr 23)
  • <Possible follow-ups>
  • Re: upgrade Neil Dickey (Apr 23)
• Taking out the traffic on ports 22 and 443 suggestive? Edin Dizdarevic (Apr 23)
  • Re: Taking out the traffic on ports 22 and 443 suggestive? Erek Adams (Apr 23)
  • Re: Taking out the traffic on ports 22 and 443 suggestive? Alberto Gonzalez (Apr 23)
    • Re: Taking out the traffic on ports 22 and 443 suggestive? Edin Dizdarevic (Apr 23)
  • Re: Taking out the traffic on ports 22 and 443 suggestive? Brian (Apr 24)
    • Re: Taking out the traffic on ports 22 and 443 suggestive? Brian (Apr 24)
• Strange Alerts Brett . Gillett (Apr 23)
  • <Possible follow-ups>
  • Re: Strange Alerts Neil Dickey (Apr 23)
    • Re: Strange Alerts Artur Bittencourt (Apr 23)
      • Re: Strange Alerts Erek Adams (Apr 23)
      • Re: Strange Alerts David Alonso De La Vega Tapage (Apr 23)
  • Re: Strange Alerts Neil Dickey (Apr 23)
  • Re: Strange Alerts Brett . Gillett (Apr 23)
  • RE: Strange Alerts Allen, Garrett (Apr 23)
  • Re: Strange Alerts Brett . Gillett (Apr 23)
• HTTP traffic not being scanned after upgrade from 1.9.1 to 2.0.0 Kevin Van Der Hart (Apr 23)
  • Re: HTTP traffic not being scanned after upgrade from 1.9.1 to 2.0.0 Erek Adams (Apr 23)
• Protocol/Service/Source Bytes/Dest bytes needed Malcolm Rodgers (Apr 23)
  • Re: Protocol/Service/Source Bytes/Dest bytes needed Bamm Visscher (Apr 23)
• Barnyard writing cleartext MySQL-password to /var/log/messages!!! Edin Dizdarevic (Apr 23)
• swatch alternatives? Chris (Apr 23)
  • Re: swatch alternatives? Jim Prewett (Apr 23)
    • Re: swatch alternatives? Andreas Östling (Apr 25)
  • <Possible follow-ups>
  • RE: swatch alternatives? Nelson, Ben (Apr 23)
  • RE: swatch alternatives? Slighter, Tim (Apr 23)
• Recall: Question about Snort/ACID/MySQL and how they play togethe r Snow Jacob C KPWA (Apr 23)
• Question about Snort/ACID/MySQL and how they play together Snow Jacob C KPWA (Apr 23)
  • RE: Question about Snort/ACID/MySQL and how they play together Michael Steele (Apr 23)
  • Re: Question about Snort/ACID/MySQL and how they play together Erek Adams (Apr 24)
  • <Possible follow-ups>
  • Question about Snort/ACID/MySQL and how they play together Snow Jacob C KPWA (Apr 23)
  • RE: Question about Snort/ACID/MySQL and how they play together Michael Steele (Apr 25)
• RE: Question about Snort/ACID/MySQL and how they pl ay together L. Christopher Luther (Apr 23)
  • <Possible follow-ups>
  • RE: Question about Snort/ACID/MySQL and how they pl ay together L. Christopher Luther (Apr 25)
• Re: Snort 2.0 Upgrade - Sensor is very chatty Brett . Gillett (Apr 23)
  • <Possible follow-ups>
  • Snort 2.0 Upgrade - Sensor is very chatty Pacheco, Michael F. (Apr 23)
  • FW: Snort 2.0 Upgrade - Sensor is very chatty Pacheco, Michael F. (Apr 23)
• Snort not seeing all traffic? Patrick Jones (Apr 23)
  • Re: Snort not seeing all traffic? Matt Kettler (Apr 23)
    • RE: Snort not seeing all traffic? PJ-ML (Apr 24)
      • Re: Snort not seeing all traffic? Erick Mechler (Apr 24)
      • Snort is not seeing all traffic... PJ-ML (May 07)
      • Re: Snort is not seeing all traffic... Matt Kettler (May 08)
      • Re: Snort is not seeing all traffic... PJ-ML (May 08)
    • Message not available
      • Re: Snort not seeing all traffic? Erick Mechler (Apr 24)
      • Re: Snort not seeing all traffic? PJ (Apr 24)
      • Re: Snort not seeing all traffic? Erick Mechler (Apr 24)
  • <Possible follow-ups>
  • Re: Snort not seeing all traffic? PJ (Apr 24)
• chroot problems with Red Hat Advanced server Chapman, Justin T (Apr 23)
  • Re: chroot problems with Red Hat Advanced server Charles Philip Chan (Apr 23)
  • <Possible follow-ups>
  • RE: chroot problems with Red Hat Advanced server Chapman, Justin T (Apr 23)
  • RE: chroot problems with Red Hat Advanced server Chapman, Justin T (Apr 24)
    • Re: chroot problems with Red Hat Advanced server Charles Philip Chan (Apr 24)
• Relation between events and rules set. Julio Jaime (Apr 23)
  • Re: Relation between events and rules set. John Sage (Apr 23)
  • <Possible follow-ups>
  • RE: Relation between events and rules set. Julio Jaime (Apr 24)
    • Re: Relation between events and rules set. David Alonso De La Vega Tapage (Apr 24)
  • RE: Relation between events and rules set. bmcdowell (Apr 24)
  • RE: Relation between events and rules set. Julio Jaime (Apr 24)
    • Re: Relation between events and rules set. David Alonso De La Vega Tapage (Apr 24)
  • RE: Relation between events and rules set. Julio Jaime (Apr 24)
  • RE: Relation between events and rules set. Julio Jaime (Apr 25)
    • Re: Relation between events and rules set. David Alonso De La Vega Tapage (Apr 25)
• RE: Justin Chapman Sanderson, Josh (Apr 23)
• home_net and ext_net question Mike Zupan (Apr 23)
  • <Possible follow-ups>
  • Re: home_net and ext_net question Neil Dickey (Apr 23)
  • RE: home_net and ext_net question L. Christopher Luther (Apr 23)
  • RE: home_net and ext_net question Everist, Benjamin S. (NASWI) (Apr 24)
    • RE: home_net and ext_net question Matt Kettler (Apr 24)
  • RE: home_net and ext_net question L. Christopher Luther (Apr 25)
  • RE: home_net and ext_net question Matt Kettler (Apr 25)
  • RE: home_net and ext_net question L. Christopher Luther (Apr 25)
  • RE: home_net and ext_net question Neil Dickey (Apr 25)
    • RE: home_net and ext_net question Matt Kettler (Apr 25)
• Too little traffic being seen! Adrian . Mink (Apr 23)
  • Re: Too little traffic being seen! Matt Kettler (Apr 23)
  • Re: Too little traffic being seen! John Sage (Apr 23)
  • <Possible follow-ups>
  • RE: Too little traffic being seen! Adrian . Mink (Apr 24)
• [Fwd: Snort <=1.9.1 exploit] Jose Vicente Nunez Z (Apr 23)
• WARNING: Not IPv4 datagram! Jeremia d. (Apr 23)
  • <Possible follow-ups>
  • RE: WARNING: Not IPv4 datagram! Petriz, Pablo (Apr 24)
• Only Smtp traffic Sh J (Apr 23)
  • Re: Only Smtp traffic Chris Green (Apr 24)
• upgrading snort version Rajagopal, Sriram(TSD) (Apr 23)
  • Re: upgrading snort version David Alonso De La Vega Tapage (Apr 24)
• Snort v2 rule order help (long) JP Vossen (Apr 23)
• tag keyword for TCP sessions Emmanuel Dardaine (Apr 24)
• portscan preprocessor and scan rules Fabrizio Tivano (Apr 24)
• Problem logging to postgres Roger D. Vargas (Apr 24)
  • <Possible follow-ups>
  • RE: Problem logging to postgres Emmanuel Dardaine (Apr 24)
  • RE: Problem logging to postgres Roger D. Vargas (Apr 24)
    • RE: Problem logging to postgres Frank Knobbe (Apr 24)
      • RE: Problem logging to postgres Frank Knobbe (Apr 24)
      • RE: Problem logging to postgres Roger D. Vargas (Apr 25)
      • RE: Problem logging to postgres Frank Knobbe (Apr 25)
      • RE: Problem logging to postgres Roger D. Vargas (Apr 25)
  • RE: Problem logging to postgres Hutchinson, Andrew (Apr 25)
    • RE: Problem logging to postgres Roger D. Vargas (Apr 25)
      • RE: Problem logging to postgres Frank Knobbe (Apr 25)
      • RE: Problem logging to postgres Roger D. Vargas (Apr 25)
      • RE: Problem logging to postgres Frank Knobbe (Apr 25)
      • RE: Problem logging to postgres Roger D. Vargas (Apr 25)
      • RE: Problem logging to postgres Frank Knobbe (Apr 25)
• Fw: problem with snort inline -unknown option -Q parikshit (Apr 24)
• Hogwash x Redhat Luiz Alberto Cataldo Jr (Apr 24)
• SnortSam Firewall Port Lance Worthington (Apr 24)
  • Re: SnortSam Firewall Port Frank Knobbe (Apr 24)
• search method lowmem Gerhard Brauer (Apr 24)
  • Re: search method lowmem Chris Green (Apr 24)
• [ANN] HenWen 2.0! Nick Zitzmann (Apr 24)
• Mike Sands/ITS/Element K is out of the office. Mike_Sands (Apr 24)
  • <Possible follow-ups>
  • Mike Sands/ITS/Element K is out of the office. Mike_Sands (Apr 24)
• VPN and UDP alerts Allan Dover (Apr 24)
  • <Possible follow-ups>
  • Re: VPN and UDP alerts Neil Dickey (Apr 25)
    • Promiscuous interface hacks? Paul Schmehl (May 01)
      • Re: Promiscuous interface hacks? Frank Knobbe (May 01)
      • Re: Promiscuous interface hacks? Paul Schmehl (May 01)
      • Re: Promiscuous interface hacks? Matt Kettler (May 01)
      • Re: Promiscuous interface hacks? Paul Schmehl (May 01)
      • Re: Promiscuous interface hacks? Matt Kettler (May 01)
      • Re: Promiscuous interface hacks? Paul Schmehl (May 02)
      • Re: Promiscuous interface hacks? Frank Knobbe (May 01)
      • Re: Promiscuous interface hacks? Paul Schmehl (May 02)
  • RE: VPN and UDP alerts Slighter, Tim (Apr 25)
    • Re: VPN and UDP alerts Allan Dover (Apr 28)
  • Re: VPN and UDP alerts Neil Dickey (Apr 25)
    • Re: VPN and UDP alerts Allan Dover (Apr 29)
  • RE: VPN and UDP alerts SRH-Lists (Apr 29)
• segmentation fault... Filipe Dantas (Apr 24)
• Port for MYsql David Alonso De La Vega Tapage (Apr 24)
• RE: Fw: problem with snort inline -unknown option - Q Slighter, Tim (Apr 24)
  • Re: Fw: problem with snort inline -unknown option -Q parikshit (Apr 24)
  • Re: Fw: problem with snort inline -unknown option -Q parikshit (Apr 24)
  • <Possible follow-ups>
  • RE: Fw: problem with snort inline -unknown option - Q Slighter, Tim (Apr 25)
• Win32 Misconfiguration Julian Brown (Apr 24)
  • RE: Win32 Misconfiguration Michael Steele (Apr 24)
• Question about Snort/ACID/MySQL and portscans Snow Jacob C KPWA (Apr 24)
  • RE: Question about Snort/ACID/MySQL and portscans Michael Steele (Apr 24)
  • <Possible follow-ups>
  • RE: Question about Snort/ACID/MySQL and portscans Slighter, Tim (Apr 25)
• OT - Spam bmcdowell (Apr 24)
  • Re: OT - Spam Matt Kettler (Apr 24)
  • Re: OT - Spam mikem (Apr 24)
    • Re: OT - Spam Julian Brown (Apr 25)
    • Re: OT - Spam Thomas Templin (Apr 25)
      • RE: OT - Spam Michael Steele (Apr 25)
  • OT: list archives and e-mail addresses (Re: OT - Spam) Andrew R. Baker (Apr 25)
  • <Possible follow-ups>
  • Re: OT - Spam JP Vossen (Apr 24)
• PHP install David Powell (Apr 24)
• stream4 reassembly seems to lose last packet Daniel OKeefe (Apr 24)
• Automatic Update of the Rule-base using SnortCenter Atul Shrivastava (Apr 25)
• Test data logs available? Shwaine (Apr 25)
• AW: Test data logs available? Poppi, Sandro (Apr 25)
• pass rule Gosswiler Bjoern (Apr 25)
• spp_portscan / unknown IP Gosswiler Bjoern (Apr 25)
• AW: pass rule Poppi, Sandro (Apr 25)
• Snort Rules Bajamundi, Ricardo P (Apr 25)
• swatch alternatives - sec raft na (Apr 25)
• No longer seeing exploit traffic on version 2.0.0 Lloyd_Ardoin (Apr 25)
  • Re: No longer seeing exploit traffic on version 2.0.0 Chris Green (Apr 28)
• snort 2.0.0 on Tru64 5.1 Darryl Cook (Apr 25)
  • snort 2.0.0 on Tru64 5.1 Darryl Cook (Apr 24)
• Netbios rules and keeping snort quiet about them ;) James Nonya (Apr 25)
• snmp support under rh 8 Roger D. Vargas (Apr 25)
  • Re: snmp support under rh 8 Florin Andrei (Apr 25)
    • Re: snmp support under rh 8 Roger D. Vargas (Apr 25)
      • Re: snmp support under rh 8 Florin Andrei (Apr 25)
• segmantation fault Filipe Dantas (Apr 25)
  • Re: segmantation fault Erek Adams (Apr 29)
    • Re: segmantation fault Filipe Dantas (Apr 29)
• what is rstatd? Shashank Bhide (Apr 25)
  • Re: what is rstatd? Matt Kettler (Apr 25)
    • FreeBSD-5 / Snort 2.0 Installation Document David Markle (Apr 25)
• snort -A unsock feature Yuri Leikind (Apr 25)
• is there a 2.0 build that is mysql compatible Allen, Garrett (Apr 25)
  • RE: is there a 2.0 build that is mysql compatible David Markle (Apr 25)
  • <Possible follow-ups>
  • RE: is there a 2.0 build that is mysql compatible JP Vossen (Apr 25)
• Allow me to field a question Slighter, Tim (Apr 25)
• RE: MySQL & ACID Issues Slighter, Tim (Apr 25)
• Book soon available Slighter, Tim (Apr 25)
  • Re: Book soon available twig les (Apr 25)
  • Re: Book soon available Chris Green (Apr 28)
  • <Possible follow-ups>
  • RE: Book soon available Slighter, Tim (Apr 28)
• It worked! Roger D. Vargas (Apr 25)
• Snort (any version) with Barnyard logging payload in hex Edin Dizdarevic (Apr 25)
  • Re: Snort (any version) with Barnyard logging payload in hex Andrew R. Baker (Apr 28)
• Mysql question jared (Apr 25)
  • RE: Mysql question David Markle (Apr 25)
  • <Possible follow-ups>
  • RE: Mysql question David Markle (Apr 25)
• Hi Im new to Snort and I keep getting wierd errors....please help ! Gill, Rob (Apr 25)
• Re: Hi Im new to Snort and I keep getting wierd errors....please help ! Matt Kettler (Apr 25)
• A Friday afternoon hoho Michael Northup (Apr 25)
• RE: Question about Snort/ACID/MySQL + Barnyard and how they play together Matt Yackley (Apr 25)
• trying snort as nids of prelude smitha rao (Apr 26)
• setting up a mirroring port at switch smitha rao (Apr 26)
  • Re: setting up a mirroring port at switch d_greenjr (Apr 26)
  • <Possible follow-ups>
  • RE: setting up a mirroring port at switch Matt Yackley (Apr 26)
  • Re: setting up a mirroring port at switch smitha rao (Apr 29)
• snort architecture... Mohammad Alimohammadi (Apr 26)
  • Re: snort architecture... twig les (Apr 26)
• Snort 2.0 isn't alerting Lloyd_Ardoin (Apr 26)
  • Re: Snort 2.0 isn't alerting John Sage (Apr 27)
  • Re: Snort 2.0 isn't alerting Glenn Forbes Fleming Larratt (Apr 30)
• (snort_decoder): Truncated Tcp Options Jason Beveridge (Apr 26)
  • Re: (snort_decoder): Truncated Tcp Options MH (Apr 27)
• snort.conf problems stormshadow (Apr 26)
  • <Possible follow-ups>
  • RE: snort.conf problems L. Christopher Luther (Apr 27)
• Is there a program to test snort rules? Joe Horton (Apr 26)
  • RE: Is there a program to test snort rules? Michael Steele (Apr 26)
  • Re: Is there a program to test snort rules? Paul B. Poh (Apr 28)
    • RE: Is there a program to test snort rules? Brian Laing (Apr 28)
• Barnyard Shell Script Jason Linden (Apr 26)
  • Re: Barnyard Shell Script Andrew R. Baker (Apr 28)
    • RE: Barnyard Shell Script Jason Linden (Apr 29)
  • <Possible follow-ups>
  • Barnyard Shell Script Jason Linden (Apr 27)
• unsubscribe Lieberg, Mark (Apr 27)
• what does this command do? stormshadow (Apr 27)
  • <Possible follow-ups>
  • RE: what does this command do? L. Christopher Luther (Apr 28)
• Need Help Installing snort on OpenBSD JOE & ANGIE (Apr 27)
  • Re: Need Help Installing snort on OpenBSD MH (Apr 28)
  • Re: Need Help Installing snort on OpenBSD Andy Sutton (Apr 28)
  • <Possible follow-ups>
  • RE: Need Help Installing snort on OpenBSD Andy Sutton (Apr 28)
• Snort and Bastille Linux Elvira_Byrnes (Apr 27)
• log file Tom Murdock (Apr 27)
• Demarc Bart Decker (DCS) (Apr 28)
• Re: Demarc (Bart Decker (DCS) (Snort-users digest, Vol 1 #3115 - 5 msgs) Ralf Spenneberg (Apr 28)
• Flex Resp Is Resetting The Wrong Port Andy Wood (Apr 28)
• Tutorial on Bpf filters Always Bishan (Apr 28)
  • Re: Tutorial on Bpf filters Edin Dizdarevic (Apr 28)
  • Re: Tutorial on Bpf filters twig les (Apr 28)
  • Re: Tutorial on Bpf filters MH (Apr 28)
• Realtime alerts Always Bishan (Apr 28)
• Firewall vs IDS Always Bishan (Apr 28)
  • <Possible follow-ups>
  • Re: Firewall vs IDS Neil Dickey (Apr 28)
  • RE: Firewall vs IDS Brian M. Diehl (Apr 28)
    • Re: Firewall vs IDS Simon Gray (Apr 29)
• Automated snort tuner Always Bishan (Apr 28)
  • Re: Automated snort tuner Bennett Todd (Apr 28)
  • Re: Automated snort tuner Matt Kettler (Apr 28)
• Snort upgrade from 1.9.1 to 2.0.0 Lloyd_Ardoin (Apr 28)
  • <Possible follow-ups>
  • Re: Snort upgrade from 1.9.1 to 2.0.0 Neil Dickey (Apr 28)
• New Release of snort_inline! Rob McMillen (Apr 28)
• newbie question on Stream4 preprocessing - missing last packet Dan O'Keefe (Apr 28)
• Looking for opinions... Wilcoxen, Scott (Apr 28)
  • <Possible follow-ups>
  • RE: Looking for opinions... L. Christopher Luther (Apr 28)
• postgres schema error Martin A. Brooks (Apr 28)
  • Re: postgres schema error Frank Knobbe (Apr 28)
    • Re: postgres schema error Martin A. Brooks (Apr 28)
• Snort-inline Slighter, Tim (Apr 28)
• one other item Slighter, Tim (Apr 28)
• how to get snort to ignore kazaa peter moody (Apr 28)
• Stumped larosa, vjay (Apr 28)
  • <Possible follow-ups>
  • RE: Stumped larosa, vjay (Apr 28)
  • RE: Stumped Friesz, Ross (Apr 28)
• Net_SSLeay updated Makefile.PL for RH9 David Powell (Apr 28)
  • Re: Net_SSLeay updated Makefile.PL for RH9 David T Hollis (Apr 28)
• No memory error Sutton, Andrew (Apr 28)
  • <Possible follow-ups>
  • RE: No memory error SRH-Lists (Apr 28)
  • RE: No memory error Sutton, Andrew (Apr 28)
    • RE: No memory error Erek Adams (Apr 29)
• false alarm with snort 2.0, why? Holger Marzen (Apr 28)
  • <Possible follow-ups>
  • Re: false alarm with snort 2.0, why? Matt Kettler (Apr 28)
    • Re: false alarm with snort 2.0, why? Holger Marzen (Apr 29)
• Noob question about different parts of a rule stormshadow (Apr 28)
  • Re: Noob question about different parts of a rule Matt Kettler (Apr 28)
  • <Possible follow-ups>
  • RE: Noob question about different parts of a rule Schmehl, Paul L (Apr 28)
  • RE: Noob question about different parts of a rule L. Christopher Luther (Apr 28)
• Making snort smarter... Tobias Rice (Apr 28)
  • Re: Making snort smarter... Paul Schmehl (Apr 28)
    • Re: Making snort smarter... Jason Haar (Apr 29)
      • Re: Making snort smarter... Paul Schmehl (Apr 29)
      • Re: Making snort smarter... Jason Haar (Apr 29)
      • Re: Making snort smarter... Jason Haar (Apr 29)
  • <Possible follow-ups>
  • RE: Making snort smarter... bmcdowell (Apr 29)
    • RE: Making snort smarter... Paul Schmehl (Apr 29)
      • Re: Making snort smarter... Jason (Apr 29)
  • RE: Making snort smarter... bmcdowell (Apr 29)
    • RE: Making snort smarter... Paul Schmehl (Apr 29)
  • Re: Making snort smarter... JP Vossen (Apr 29)
• Trouble with pass rule Carl (Apr 28)
  • <Possible follow-ups>
  • Re: Trouble with pass rule Neil Dickey (Apr 29)
    • Re: Trouble with pass rule Carl (Apr 29)
• log the content Derya Sezen (Apr 28)
  • <Possible follow-ups>
  • RE: log the content Snow Jacob C KPWA (Apr 29)
• Alert.ids log file not being created Michael Steele (Apr 28)
  • <Possible follow-ups>
  • Alert.ids log file not being created Michael Steele (Apr 29)
  • RE: Alert.ids log file not being created Snow Jacob C KPWA (Apr 29)
    • RE: Alert.ids log file not being created Michael Steele (Apr 29)
• false alarm or not ? Liuhy (Apr 29)
• Snort 2.0.0 & syslog MLH (Apr 29)
  • Re: Snort 2.0.0 & syslog Simon Gray (Apr 29)
    • Re: Snort 2.0.0 & syslog MLH (Apr 29)
      • Re: Snort 2.0.0 & syslog MLH (Apr 30)
      • Re: Snort 2.0.0 & syslog (solved) Hubert Adgié (Apr 30)
• (spp_conversation) Bad IP protocol Mike Koponick (Apr 29)
• Disabling two alert messages Jukka Juslin (Apr 29)
  • Re: Disabling two alert messages Erick Mechler (Apr 29)
  • <Possible follow-ups>
  • Disabling two alert messages Jukka Juslin (Apr 29)
• FW: Not logging to MYSQL Jeremy Campbell (Apr 29)
  • <Possible follow-ups>
  • Not logging to MYSQL Jeremy Campbell (Apr 29)
    • Re: Not logging to MYSQL Erick Mechler (Apr 29)
• Difference between distance and within Madhu Joshi (Apr 29)
  • Re: Difference between distance and within Erick Mechler (Apr 29)
  • Re: Difference between distance and within Brian (Apr 30)
• Setting up snort to syslog diffrent priority's Jason A. Kates (Apr 29)
  • Re: Setting up snort to syslog diffrent priority's Erek Adams (Apr 29)
  • <Possible follow-ups>
  • RE: Setting up snort to syslog diffrent priority's L. Christopher Luther (Apr 29)
• New to Snort Yijia_Zhou (Apr 29)
• sidestep Jill Tovey (Apr 29)
  • Re: sidestep Matt Kettler (Apr 29)
• Re: Not logging to MYSQL Snort-users digest, Vol 1 #3122 - 13 msgs Ralf Spenneberg (Apr 29)
• Re: Alert.ids log file not being created Snort-users digest, Vol 1 #3122 - 13 msgs Ralf Spenneberg (Apr 29)
• XML output support for snort 2.0 David Stubblefield (Apr 29)
• Snort 2.0.0 logging everything when using (session: printable) McKim, Tim (Apr 29)
• re: Snort 2.0.0 logging everything when using (session:printable) Gary Flynn (Apr 29)
• php is too old !?!? Filipe Dantas (Apr 29)
  • Re: php is too old !?!? David Alonso De La Vega Tapage (Apr 29)
    • Re: php is too old !?!? Filipe Dantas (Apr 29)
      • Re: php is too old !?!? David Alonso De La Vega Tapage (Apr 29)
  • <Possible follow-ups>
  • RE: php is too old !?!? SRH-Lists (Apr 29)
    • RE: php is too old !?!? Filipe Dantas (Apr 30)
• Frag Preprocessor Preventing Log Parsing Gary Flynn (Apr 29)
• porno rules Bryan Irvine (Apr 29)
  • Re: porno rules Matt Kettler (Apr 29)
    • Re: porno rules Bryan Irvine (Apr 29)
      • Broken config directive? or just me? Sam Evans (Apr 29)
      • Re: Broken config directive? or just me? Matt Kettler (Apr 29)
      • Re: Broken config directive? or just me? Chris Green (Apr 30)
  • Re: porno rules Bryan Irvine (Apr 29)
    • Re: porno rules Matt Kettler (Apr 29)
  • <Possible follow-ups>
  • Re: porno rules Neil Dickey (Apr 29)
    • Re: porno rules Matt Kettler (Apr 29)
• Question on /var/log/snort directory stormshadow (Apr 29)
  • Re: Question on /var/log/snort directory Matt Kettler (Apr 29)
  • <Possible follow-ups>
  • Re: Question on /var/log/snort directory Neil Dickey (Apr 29)
  • RE: Question on /var/log/snort directory Slighter, Tim (Apr 29)
• catch the http-tunnel traffic with snort Derya Sezen (Apr 29)
• RE: porno rules [OT] bmcdowell (Apr 29)
  • Re: porno rules [OT] David Alonso De La Vega Tapage (Apr 30)
• Snort Filtering Michale (Apr 29)
  • Re: Snort Filtering Matt Kettler (Apr 29)
  • <Possible follow-ups>
  • Re: Snort Filtering Neil Dickey (Apr 29)
    • Re[2]: Snort Filtering Michale (Apr 29)
      • Re: Re[2]: Snort Filtering twig les (Apr 29)
  • RE: Snort Filtering L. Christopher Luther (Apr 29)
  • Re: Re[2]: Snort Filtering Neil Dickey (Apr 29)
• Re: porno rules -- portscan2 &c Neil Dickey (Apr 29)
  • Re: porno rules -- portscan2 &c Skip Carter (Apr 29)
    • Re: portscan2 effectiveness. Matt Kettler (Apr 29)
• OT: Drinking game - Content filter replies? Matt Kettler (Apr 29)
  • Re: OT: Drinking game - Content filter replies? Skip Carter (Apr 29)
  • Re: OT: Drinking game - Content filter replies? Erek Adams (Apr 30)
    • Re: OT: Drinking game - Content filter replies? Matt Kettler (Apr 30)
• APPLET catching Derya Sezen (Apr 29)
• False positives due to stream4 issue? Jason Haar (Apr 29)
  • Re: False positives due to stream4 issue? Matt Kettler (Apr 29)
    • Re: False positives due to stream4 issue? Jason Haar (Apr 29)
• Installing Snort2.0 w/ MySQL support snort (Apr 29)
  • Re: Installing Snort2.0 w/ MySQL support David Alonso De La Vega Tapage (Apr 30)
  • <Possible follow-ups>
  • RE: Installing Snort2.0 w/ MySQL support SecurityAdmin (Apr 30)
• regex support problem Derya Sezen (Apr 29)
  • Re: regex support problem Matt Kettler (Apr 29)
• Role of snort.conf regarding rules? (noob) stormshadow (Apr 29)
  • Re: Role of snort.conf regarding rules? (noob) Erek Adams (Apr 30)
  • <Possible follow-ups>
  • RE: Role of snort.conf regarding rules? (noob) L. Christopher Luther (Apr 30)
• Unable to open rules file: snort.conf error stormshadow (Apr 30)
  • Re: Unable to open rules file: snort.conf error d_greenjr (Apr 30)
  • Re: Unable to open rules file: snort.conf error Erek Adams (Apr 30)
• Quick(noob) question on rules. Role of snort.conf? Ryan C. Sebastian (Apr 30)
• snort 2.0.0 under visual C++ Ronan Horgan (Apr 30)
  • Re: snort 2.0.0 under visual C++ Erek Adams (Apr 30)
    • Re: snort 2.0.0 under visual C++ Chris Reid (Apr 30)
• RE: Quick(noob) question on rules. Role of snort.co nf? Bruyere, Michel (Apr 30)
  • <Possible follow-ups>
  • RE: Quick(noob) question on rules. Role of snort.co nf? L. Christopher Luther (Apr 30)
• Can snort add a rule to iptables? Eduardo Faria (Apr 30)
  • Re: Can snort add a rule to iptables? Erek Adams (Apr 30)
  • Re: Can snort add a rule to iptables? Matt Kettler (Apr 30)
• Re: portscan2 effectiveness. Neil Dickey (Apr 30)
• RE: re: Snort 2.0.0 logging everything when using ( session:printable) McKim, Tim (Apr 30)
• sql.rules and instanat messenging James Nonya (Apr 30)
• Snort 2.0 changes? Joseph Gresham (Apr 30)
  • Re: Snort 2.0 changes? Demetri Mouratis (Apr 30)
• Sid 466 David Powell (Apr 30)
  • Re: Sid 466 Matt Kettler (Apr 30)
  • Re: Sid 466 Erick Mechler (Apr 30)
  • <Possible follow-ups>
  • RE: Sid 466 Semerjian, Ohanes (May 01)
• Wrong port numbers - Snort or ACID bug - how to fix? Jerry . L . Rose (Apr 30)
• Help with Hogwash on OpenBSD JOE & ANGIE (Apr 30)
  • Re: Help with Hogwash on OpenBSD Matt Kettler (Apr 30)
• Snort 2.0 not logging any alerts stormshadow (Apr 30)
  • Re: Snort 2.0 not logging any alerts Matt Kettler (Apr 30)
• Email for Michael Steele - Please redirect - Read Inside Michael Steele (Apr 30)
  • Acid user security Jason Linden (May 01)
• RE: Wrong port numbers - Snort or ACID bug - how to fix? Semerjian, Ohanes (May 01)
• How config Preprocessor (other than the portscan PP) to ignore c ertain hosts? Brad . Watkins (May 01)
  • Re: How config Preprocessor (other than the portscan PP) to ignore c ertain hosts? Erek Adams (May 01)
• SQL ALert Logging Wilcoxen, Scott (May 01)
• RE: Promiscuous interface hacks? Slighter, Tim (May 01)
  • snort decoder /dev/null (May 01)
  • <Possible follow-ups>
  • Re: Promiscuous interface hacks? Carl (May 02)
• RE: snort decoder Andy Wood (May 01)
• Rule Order Ron Shuck (May 01)
  • Re: Rule Order Allan Dover (May 02)
  • <Possible follow-ups>
  • RE: Rule Order Ron Shuck (May 02)
• Win32, output alert_syslog: host=xxxx broken? JP Vossen (May 01)
  • Re: Win32, output alert_syslog: host=xxxx broken? Rich Adamson (May 01)
    • Fixed: Win32, output alert_syslog: host=xxxx broken? JP Vossen (May 01)
• NEWBIE-Using Enterprise Snort document el_wyrm (May 01)
• False Positives on POP3 USER & PASS overflow attempt? James M. Driskell (May 01)
• Snort - Logsurfer examples Matt Howell (May 01)
  • Message not available
    • Re: Snort - Logsurfer examples Matt Howell (May 05)
  • <Possible follow-ups>
  • Re: Snort - Logsurfer examples Matt Howell (May 01)
• snort_decoder Bryan Irvine (May 01)
  • Re: snort_decoder Erick Mechler (May 01)
  • Re: snort_decoder MH (May 02)
• T/TCP resources -- answer for Andy Wood Richard Bejtlich (May 01)
  • <Possible follow-ups>
  • RE: T/TCP resources -- answer for Andy Wood Andy Wood (May 01)
    • RE: T/TCP resources -- answer for Andy Wood MH (May 02)
• Packet Contents using IDS Mode Tay Chee Yong (May 02)
• packet traces to test snort Budi Rahardjo (May 02)
  • Re: packet traces to test snort Erek Adams (May 02)
  • Re: packet traces to test snort snort-users-admin (May 05)
  • Re: packet traces to test snort snort-users-admin (May 06)
  • Re: packet traces to test snort snort-users-admin (May 06)
  • <Possible follow-ups>
  • Re: packet traces to test snort Eric Arnoth (May 06)
• RPC + snort Jill Tovey (May 02)
• Anyone know of a Snort signature for the Deborm worm? Gill, Rob (May 02)
• Portscan2 woes Robin Brown (May 02)
  • Re: Portscan2 woes Matt Kettler (May 02)
    • Re: Portscan2 woes Erek Adams (May 02)
  • <Possible follow-ups>
  • FW: Portscan2 woes Gavin Lowe (May 02)
  • FW: Portscan2 woes Robin Brown (May 02)
• What NICs are people using? Gordon Cunningham (May 02)
  • Re: What NICs are people using? Terence Runge (May 02)
    • RE: What NICs are people using? Gordon Cunningham (May 02)
      • Re: What NICs are people using? Terence Runge (May 02)
  • Re: What NICs are people using? Bennett Todd (May 05)
    • RE: What NICs are people using? Gordon Cunningham (May 05)
  • <Possible follow-ups>
  • RE: What NICs are people using? JP Vossen (May 03)
    • Re: What NICs are people using? David Alonso De La Vega Tapage (May 06)
• Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS) (May 02)
  • Re: Snort with DHCP Erek Adams (May 02)
    • Re: Snort with DHCP David Alonso De La Vega Tapage (May 02)
  • <Possible follow-ups>
  • RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS) (May 02)
    • RE: Snort with DHCP Erek Adams (May 02)
  • RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS) (May 02)
    • RE: Snort with DHCP Erek Adams (May 02)
  • RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS) (May 02)
    • RE: Snort with DHCP Erek Adams (May 03)
• Archieving Snort Data - Best time David Alonso De La Vega Tapage (May 02)
• Lightweight Intrusion Detection for Networks paper Phillip Lynn (May 02)
  • Re: Lightweight Intrusion Detection for Networks paper Erek Adams (May 02)
• RE: Sid 466 (Semerjian, Ohanes) David Powell (May 02)
• snort 2.0 on redhat 9.0 Anthony Watters (May 03)
  • Re: snort 2.0 on redhat 9.0 Patrick S. Harper (May 03)
  • <Possible follow-ups>
  • RE: snort 2.0 on redhat 9.0 LAKHANI, AAMIR (May 05)
    • RE: snort 2.0 on redhat 9.0 Patrick S. Harper (May 05)
• Merging Snort capture files (take 2) JP Vossen (May 04)
• Snort 1.9.1 logging to mysql 3.23 ERROR Ron Hartmann (May 04)
• What are the possible search-method directives? JP Vossen (May 04)
  • Re: What are the possible search-method directives? Erek Adams (May 05)
    • Re: What are the possible search-method directives? JP Vossen (May 05)
      • Re: What are the possible search-method directives? Erek Adams (May 05)
• snort 2.0: is icmp type missing from syslog format? Michael Scheidell (May 05)
• ssp_conversion BAD IP protocol, why? Mike Koponick (May 05)
  • Re: ssp_conversion BAD IP protocol, why? Erek Adams (May 05)
  • <Possible follow-ups>
  • Re: ssp_conversion BAD IP protocol, why? Neil Dickey (May 05)
  • RE: ssp_conversion BAD IP protocol, why? Mike Koponick (May 06)
• snort v2.0 logging to mysql database Semerjian, Ohanes (May 05)
  • Re: snort v2.0 logging to mysql database Erek Adams (May 05)
  • <Possible follow-ups>
  • RE: snort v2.0 logging to mysql database Semerjian, Ohanes (May 06)
  • RE: snort v2.0 logging to mysql database Semerjian, Ohanes (May 06)
• Updated install document for RedHat 9 and Snort 2 Patrick S. Harper (May 05)
• http decoding Derya Sezen (May 05)
• ACID Error: Error (p) connecting to DB Paul Pearston (May 05)
  • RE: ACID Error: Error (p) connecting to DB Michael Steele (May 05)
    • RE: ACID Error: Error (p) connecting to DB Paul Pearston (May 05)
  • <Possible follow-ups>
  • RE: ACID Error: Error (p) connecting to DB Slighter, Tim (May 05)
    • RE: ACID Error: Error (p) connecting to DB Paul Pearston (May 05)
  • RE: ACID Error: Error (p) connecting to DB David Powell (May 05)
  • Re: ACID Error: Error (p) connecting to DB Yijia_Zhou (May 06)
  • Re: ACID Error: Error (p) connecting to DB David Powell (May 06)
• Snort sensor on a Firewall sireesha gaddipati (May 05)
  • RE: Snort sensor on a Firewall Michael Steele (May 05)
    • RE: Snort sensor on a Firewall sireesha gaddipati (May 05)
      • RE: Snort sensor on a Firewall Rafeeq Rehman (May 05)
      • RE: Snort sensor on a Firewall Matt Kettler (May 05)
    • RE: Snort sensor on a Firewall Rafeeq Rehman (May 05)
• Send data to MySQL and Alert file Anthony Seung (May 05)
  • RE: Send data to MySQL and Alert file Rafeeq Rehman (May 05)
  • Re: Send data to MySQL and Alert file Erek Adams (May 05)
  • <Possible follow-ups>
  • RE: Send data to MySQL and Alert file L. Christopher Luther (May 05)
  • Re: Send data to MySQL and Alert file Yijia_Zhou (May 06)
• Sensor agent in SnortCenter David Powell (May 05)
  • <Possible follow-ups>
  • Re: Sensor agent in SnortCenter Shawn Truax (May 06)
• SNORT On IIS 6.0 and windows 2003 Enterprise Cory D. (May 05)
• SnortCenter (Php issue-?) Kuriscak, Ronald (May 05)
• RE: Snort-users digest, Vol 1 #3147 - 3 msgs David Powell (May 05)
• snortcenter question James M. Driskell (May 05)
• Multiple snorts same monitoring point bacolod85 (May 05)
• it's a test mail. Liuhy (May 05)
• RE: Automated snort tuner - IDEA? Scott, Joshua (May 06)
• unsubscribe <benz=me> [liqs () neusoft com] BENZ LEE (May 06)
  • Re: unsubscribe <benz=me> [liqs () neusoft com] BENZ LEE (May 06)
    • Re: {SPAM} Re: unsubscribe <benz=me> [liqs () neusoft com] Matt Kettler (May 07)
• Portscan Traffic (0%) Gosswiler Bjoern (May 06)
• making a rule for passing data on a source network David Powell (May 06)
  • tcpreplay Hanumantha R. Manchala (May 06)
    • Re: tcpreplay Matt Kettler (May 06)
      • Re: tcpreplay Edin Dizdarevic (May 06)
      • RE: tcpreplay Matt Foster (May 07)
    • Re: tcpreplay Edin Dizdarevic (May 06)
• SMTP ETRN overflow attempt NO JUNK MAIL (May 06)
  • Re: SMTP ETRN overflow attempt Matt Kettler (May 06)
• SNORTCENTER connecting to MySQL!!!! Pedro Cunha (May 06)
• Snort/Linux Newbie Mark Kirkbride (May 06)
  • Re: Snort/Linux Newbie Patrick S. Harper (May 06)
  • <Possible follow-ups>
  • Re: Snort/Linux Newbie Michael Hughes (May 06)
• disable /var/log/snort logging Nick White (May 06)
  • Re: disable /var/log/snort logging Anderson Johnston (May 06)
  • <Possible follow-ups>
  • RE: disable /var/log/snort logging Nick White (May 07)
    • Re: disable /var/log/snort logging Bamm Visscher (May 08)
  • RE: disable /var/log/snort logging Joesph Bowling (May 07)
  • RE: disable /var/log/snort logging L. Christopher Luther (May 07)
  • RE: disable /var/log/snort logging Nick White (May 08)
  • RE: disable /var/log/snort logging Nick White (May 08)
    • Re: disable /var/log/snort logging Bamm Visscher (May 08)
  • RE: disable /var/log/snort logging L. Christopher Luther (May 08)
  • RE: disable /var/log/snort logging L. Christopher Luther (May 08)
  • RE: disable /var/log/snort logging Nick White (May 08)
• Rule Type view David Powell (May 06)
• New Snort Book - Snort 2.0 Intrusion Detection Brian Caswell (May 06)
• test mail Liuhy (May 07)
• Snort 2 inline, demarc -puresecure ? Christophe Zwecker (May 07)
• Solaris/hme problems Paul Carroll (May 07)
• Sourcefire and ACID DeBerry, Casey (May 07)
  • RE: Snort agent? Jeronimo Bezerra - Rede/Bol (May 09)
• problem in setting up snort Anu Raz (May 07)
  • <Possible follow-ups>
  • RE: problem in setting up snort L. Christopher Luther (May 07)
• DNS Help/ SID 1948 Everist, Benjamin S. (NASWI) (May 07)
  • <Possible follow-ups>
  • RE: DNS Help/ SID 1948 Vanish Pattni (DSL AK) (May 07)
    • RE: DNS Help/ SID 1948 Demetri Mouratis (May 07)
      • Re: DNS Help/ SID 1948 Mathias Gygax (May 07)
  • RE: DNS Help/ SID 1948 Joesph Bowling (May 07)
• Apache for snort LAKHANI, AAMIR (May 07)
  • Re: Apache for snort David Alonso De La Vega Tapage (May 07)
    • Re: Apache for snort shrek-m () gmx de (May 08)
  • <Possible follow-ups>
  • Re: Apache for snort JP Vossen (May 07)
  • RE: Re: Apache for snort LAKHANI, AAMIR (May 08)
    • Re: Apache for snort shrek-m () gmx de (May 09)
  • RE: Re: Apache for snort Slighter, Tim (May 08)
• 2 instances of Snort running concurrently Elvira_Byrnes (May 07)
  • <Possible follow-ups>
  • 2 instances of Snort running concurrently Elvira_Byrnes (May 08)
• Sniffer Mode Jeff Jirka (May 07)
  • <Possible follow-ups>
  • RE: Sniffer Mode L. Christopher Luther (May 12)
• RE :2 instances of Snort running concurrently Elvira_Byrnes (May 07)
• public key Tyler Hudak (May 08)
• error while connecting snort to mysql kamblesantosh (May 08)
  • Re: error while connecting snort to mysql David Alonso De La Vega Tapage (May 08)
  • Re: error while connecting snort to mysql Patrick S. Harper (May 08)
  • <Possible follow-ups>
  • RE: error while connecting snort to mysql Elvira_Byrnes (May 08)
• snort 2.0 mysql logging &'s >'s and <'s michaeltone1975 (May 08)
• Snort missing traffic...? PJ-ML (May 08)
  • Message not available
    • Re: Snort missing traffic...? PJ-ML (May 08)
      • Re: Snort missing traffic...? PJ-ML (May 08)
      • Re: Snort missing traffic...? Rich Adamson (May 08)
  • <Possible follow-ups>
  • RE: Snort missing traffic...? Ponte, Paul F (May 08)
• Perl interpreter for Snort rules / CanSecWest talk Christian Kreibich (May 08)
• [Snort-Users] new to snort and intrusion detection Jonathan Jesse (May 08)
  • Re: [Snort-Users] new to snort and intrusion detection Michael Boman (May 08)
  • <Possible follow-ups>
  • RE: [Snort-Users] new to snort and intrusion detection L. Christopher Luther (May 08)
  • RE: [Snort-Users] new to snort and intrusion detection Cloppert, Michael (May 09)
• Redhat 8 John Hally (May 08)
  • Re: Redhat 8 Patrick S. Harper (May 08)
• alert log file name Erik Tank (May 08)
• Re: Snort is not seeing all traffic... Joesph Bowling (May 08)
  • Re: Snort is not seeing all traffic... PJ-ML (May 09)
  • Re: Snort is not seeing all traffic... PJ-ML (May 09)
  • <Possible follow-ups>
  • Re: Snort is not seeing all traffic... Joesph Bowling (May 09)
• Snortcenter and v2? Kevin Peuhkurinen (May 09)
• Anyone Use 3Com Gigabit Fiber-SX NIC? John Crain (May 09)
  • <Possible follow-ups>
  • RE: Anyone Use 3Com Gigabit Fiber-SX NIC? Ricardo, Gerson (May 09)
    • RE: Anyone Use 3Com Gigabit Fiber-SX NIC? John Crain (May 09)
  • RE: Anyone Use 3Com Gigabit Fiber-SX NIC? Ricardo, Gerson (May 09)
• Guardian with Snort - Help Imran Ahmad (May 09)
  • Re: Guardian with Snort - Help Snortman (Jun 04)
• possible Snort 2.0 bug Shoshin (May 09)
  • Re: possible Snort 2.0 bug Matt Kettler (May 09)
• Sigs for MSN Messenger. David Gianndrea (May 09)
  • Re: Sigs for MSN Messenger. Brian (May 20)
• Re: A question about flow:established keyword Risto Vaarandi (May 09)
  • Re: A question about flow:established keyword Risto Vaarandi (May 09)
• info cristal_ball (May 09)
  • Re: info Patrick S. Harper (May 09)
• What data does "-A unsock" really send? Emmanuel Guiton (May 09)
  • Re: What data does "-A unsock" really send? Paul B. Poh (May 09)
• snort-decoder John Hally (May 09)
  • <Possible follow-ups>
  • snort-decoder John Hally (May 12)
  • Re: snort-decoder Matt Kettler (May 12)
• Check for NO TCP Flags set? Sheahan, Paul (May 09)
  • Re: Check for NO TCP Flags set? Chris Green (May 09)
  • <Possible follow-ups>
  • Re: Check for NO TCP Flags set? MH (May 09)
  • Re: Check for NO TCP Flags set? Matt Kettler (May 09)
• RE: Snort agent? Joesph Bowling (May 09)
• Need recommendations for good books on the security topic Bjørn Rasmussen (May 09)
  • Re: Need recommendations for good books on the security topic Shawn Duffy (May 10)
  • Re: [Users] Need recommendations for good books on the security topic Haitham (May 11)
  • Re: [Users] Need recommendations for good books on the security topic Andreas Steffen (May 12)
• Announcing sp_perl Jeff Nathan (May 10)
  • Re: [Snort-sigs] Announcing sp_perl Chris Green (May 12)
  • RE-Announcing sp_perl Brian (May 13)
• RE: Need recommendations for good books Richard Bejtlich (May 11)
• Acid shows sensors as 0 Saquib Khan (May 11)
  • Re: Acid shows sensors as 0 Patrick S. Harper (May 11)
• Evading IDS Joe Horton (May 11)
• packets cristal_ball (May 12)
  • Tracing certain file requests ... Jon Baer (May 12)
• Logging facilities... peter . grosse-hering (May 12)
• ACID problem: PHP Fatal error: Cannot instantiate non-existent class (adodb) Edin Dizdarevic (May 12)
  • Re: ACID problem: PHP Fatal error: Cannot instantiate non-existent class (adodb) David Alonso De La Vega Tapage (May 12)
• Re: AW: ACID problem: PHP Fatal error: Cannot instanti ate non-existent class (adodb) Edin Dizdarevic (May 12)
• Accessing SnortCenter LAKHANI, AAMIR (May 12)
  • <Possible follow-ups>
  • RE: Accessing SnortCenter LAKHANI, AAMIR (May 12)
    • RE: Accessing SnortCenter Paul Pearston (May 12)
• writing signatures Robert Quenville (May 12)
  • RE: writing signatures Matt Nelson (May 12)
• Fizzer Worm Signature Ty Bodell (May 12)
  • Re: Fizzer Worm Signature Michael Bell (May 13)
  • <Possible follow-ups>
  • Re: Fizzer Worm Signature Hudak, Tyler (May 13)
• Bus error on sparc Michael Bell (May 12)
  • Re: Bus error on sparc Michael Bell (May 13)
    • Re: Bus error on sparc Michael Bell (May 14)
      • Re: Bus error on sparc Michael Bell (May 14)
      • Re: Bus error on sparc Michael Bell (May 14)
      • Re: Bus error on sparc Andrew R. Baker (May 15)
      • Re: Bus error on sparc Michael Bell (May 16)
      • Re: Re: [Snort-users] Bus error on sparc Andrew R. Baker (May 16)
• Newbie - log and alert - what is the difference? Jon Paterson (May 13)
  • Re: Newbie - log and alert - what is the difference? Joerg Weber (May 13)
• Snort+Real Secure Gustavo Tamae (May 13)
• Newbie Stefan Kohn (May 13)
• Running Acid for the first time Saquib Khan (May 13)
• signature update Jochen Vogel (May 13)
• Snort 2.0 + mysql, Make problems Mahdi Kefayati (May 13)
• Anyone Using a Compaq/HP ProLiant DL360? John Crain (May 13)
  • <Possible follow-ups>
  • Re: Anyone Using a Compaq/HP ProLiant DL360? Chris Mann (May 13)
  • RE: Anyone Using a Compaq/HP ProLiant DL360? Ghercoias, Catalin (May 13)
• Question on acid - Rules question Snow Jacob C KPWA (May 13)
• HOWTO Ignore specific IP addresses Michael Parkinson (May 13)
  • Re: HOWTO Ignore specific IP addresses Demetri Mouratis (May 13)
  • Re: HOWTO Ignore specific IP addresses Edin Dizdarevic (May 13)
  • Re: HOWTO Ignore specific IP addresses Dragos Ruiu (May 13)
  • <Possible follow-ups>
  • RE: HOWTO Ignore specific IP addresses Steven Rudolph (May 13)
• Fizzer Virus Signature Jeremy Junginger (May 13)
  • <Possible follow-ups>
  • Fizzer Virus Signature Jeremy Junginger (May 13)
    • Re: Fizzer Virus Signature Chris Keladis (May 14)
  • RE: Fizzer Virus Signature L. Christopher Luther (May 13)
  • RE: Fizzer Virus Signature operator (May 14)
    • Re: Fizzer Virus Signature Jason Haar (May 14)
• Re: Multiple interfaces? and SNort 2.0 Ueli Kistler (May 13)
• Couldn't resolve hostname HOME_NET Carlos Felix (May 13)
  • <Possible follow-ups>
  • Re: Couldn't resolve hostname HOME_NET Neil Dickey (May 13)
    • Re: Couldn't resolve hostname HOME_NET Carlos Felix (May 13)
  • RE: Couldn't resolve hostname HOME_NET Schmehl, Paul L (May 13)
  • RE: Couldn't resolve hostname HOME_NET L. Christopher Luther (May 13)
• snmp trap handler Josh Restivo (May 13)
  • <Possible follow-ups>
  • RE: snmp trap handler larosa, vjay (May 13)
• Questionable snort data downloaded from incidents.org for practical Don Murdoch (May 13)
• MS-SQL ping attempt is illegal or not? sb ch (May 13)
• False Alarm - still not solved Holger Marzen (May 14)
• Snort 2.0 + MySQL + SMBalerts question Dirk Stubbs (May 14)
  • <Possible follow-ups>
  • RE: Snort 2.0 + MySQL + SMBalerts question L. Christopher Luther (May 14)
• how to use snort in a switched environment Jeremy Rodriguez (May 14)
  • Re: how to use snort in a switched environment Erek Adams (May 14)
  • Re: how to use snort in a switched environment Carlos Felix (May 14)
    • Message not available
      • RE: how to use snort in a switched environment Carlos Felix (May 14)
    • Re: how to use snort in a switched environment Carlos Felix (May 14)
  • <Possible follow-ups>
  • Re: how to use snort in a switched environment Les Addison (May 14)
    • Re: how to use snort in a switched environment Matt Schillinger (May 14)
• How to log as ASCII? peter . grosse-hering (May 14)
  • Re: How to log as ASCII? Erek Adams (May 14)
• Snort on-line detection rate? 方 磊 (May 14)
  • Re: Snort on-line detection rate? Erek Adams (May 14)
• Snort sensor agent sireesha gaddipati (May 14)
  • Re: Snort sensor agent larc (May 14)
    • Re: Snort sensor agent sireesha gaddipati (May 14)
• SnortCenter 1.0-RC1 released larc (May 14)
• Dangerous to use custom ruletypes? Martin Olsson (May 14)
  • Re: Dangerous to use custom ruletypes? Erek Adams (May 14)
    • Re: Dangerous to use custom ruletypes? Martin Olsson (May 14)
  • <Possible follow-ups>
  • Re: Dangerous to use custom ruletypes? Neil Dickey (May 14)
• interface initialization d . sherred (May 14)
  • Re: interface initialization twig les (May 14)
  • Re: interface initialization security people (May 14)
  • RE: interface initialization David Markle (May 14)
• announcing a new spo_xml Roman Danyliw (May 14)
  • <Possible follow-ups>
  • Re: announcing a new spo_xml Roman Danyliw (May 14)
• using snortcenter agents on multiple interface sensor? Horta, Benny (May 14)
• dump of IPSEC and PPTP dreamwvr () dreamwvr com (May 14)
  • Re: dump of IPSEC and PPTP Matt Kettler (May 14)
• SnortCenter v1.0-RC1 David Powell (May 14)
  • Re: SnortCenter v1.0-RC1 larc (May 15)
    • unsubscribe Black Jack (May 15)
  • Re: SnortCenter v1.0-RC1 stefan dens (May 15)
• Rule code Jan van den Berg (May 14)
• Disabling flow control from command line Roberto Suarez Soto (May 15)
• Snort Alerts Ted Sanft (May 15)
• Hi, Derek Sherred (May 15)
  • Re: Hi, Jason Boykin (May 15)
  • Re: Hi, Erek Adams (May 15)
  • Re: Hi, David Alonso De La Vega Tapage (May 16)
    • IP Header Data Type Preference David Markle (May 16)
      • Re: IP Header Data Type Preference Paul B. Poh (May 16)
      • Re: IP Header Data Type Preference Brian (May 16)
      • Re: IP Header Data Type Preference Michael L. Artz (May 18)
• Snort 2.0.0, Running but no activity. No logging Ilo Lorusso (May 15)
• syslog output plugin José M. Fandiño (May 15)
  • <Possible follow-ups>
  • RE: syslog output plugin L. Christopher Luther (May 15)
• Switch TAP placement question. Brei, Matt (May 15)
  • Re: Switch TAP placement question. Erek Adams (May 15)
• 3 questions on rules Garrett . Allen (May 15)
  • Re: 3 questions on rules Erek Adams (May 15)
    • Re: 3 questions on rules Brian (May 15)
      • Re: 3 questions on rules Erek Adams (May 15)
  • <Possible follow-ups>
  • RE: 3 questions on rules Garrett . Allen (May 15)
    • RE: 3 questions on rules Erek Adams (May 15)
  • RE: 3 questions on rules Garrett . Allen (May 15)
• Snort's config detection: options Ueli Kistler (May 15)
• Snort Reporting Tools Vendl, Mark E. (May 15)
  • Re: Snort Reporting Tools Terence Runge (May 15)
    • Re: Snort Reporting Tools Jason Boykin (May 15)
      • Re: Snort Reporting Tools jeremy chartier (May 16)
• Segfault IntelliSTAR Security (May 15)
  • Re: Segfault Chris Timmons (May 15)
  • Re: Segfault Erek Adams (May 15)
    • Re: Segfault Chris Timmons (May 15)
• Using RESP with two Eth interfaces Andrew Cogger (May 15)
  • Re: Using RESP with two Eth interfaces Jeff Nathan (May 15)
• Snort MySQL database Elvira_Byrnes (May 15)
  • <Possible follow-ups>
  • RE: Snort MySQL database Nelson, Ben (May 15)
  • RE: Snort MySQL database Elvira_Byrnes (May 15)
  • RE: Snort MySQL database Elvira_Byrnes (May 15)
• Where is the bottleneck? 方 磊 (May 15)
  • RE: Where is the bottleneck? Yiming Gong (May 15)
• Snort with MySQL,ACID Elvira_Byrnes (May 15)
  • Re: Snort with MySQL,ACID operator (May 15)
  • <Possible follow-ups>
  • RE: Snort with MySQL,ACID Elvira_Byrnes (May 16)
• SnortReport Elvira_Byrnes (May 16)
• Log to database don't work. mnemonic (May 16)
  • Re: Log to database don't work. Jan Gruber (May 16)
  • <Possible follow-ups>
  • Log to database don't work. mnemonic (May 16)
  • log to database don't work. dm (May 16)
• DB Problem (long lines) Jan Gruber (May 16)
  • Re: DB Problem (long lines) Jan Gruber (May 16)
  • <Possible follow-ups>
  • DB Problem (long lines) Jan Gruber (May 16)
• $HTTP_SERVERS variable Brian.Kiefel (May 16)
• SnortSnarf uses Mike Koponick (May 16)
• Log to DB don't work Dmitri Manushin (May 16)
  • Re: Log to DB don't work Erek Adams (May 16)
• Snort Signature Updates Steve An (May 16)
  • Re: Snort Signature Updates Erek Adams (May 16)
• how do you delete a dbase to upgrade snortcenter? Horta, Benny (May 16)
  • RE: how do you delete a dbase to upgrade snortcenter? David Markle (May 16)
• Who can explain this?where is the bottleneck? rocky (May 16)
  • Re: Who can explain this?where is the bottleneck? Edin Dizdarevic (May 16)
  • <Possible follow-ups>
  • RE: Who can explain this?where is the bottleneck? Ricardo, Gerson (May 16)
• Postgres VS mysql performance Horta, Benny (May 16)
• how would you log failed windows logins etc? Horta, Benny (May 16)
  • RE: how would you log failed windows logins etc? Gavin Lowe (May 16)
• ACID 1.0 RC1 - Archive Problem Chris Kuivenhoven (May 16)
  • RE: ACID 1.0 RC1 - Archive Problem Chris (May 16)
  • <Possible follow-ups>
  • ACID 1.0 RC1 - Archive Problem Chris Kuivenhoven (May 19)
• SID 1549 alerts -- what the heck is this ? Fritsche, Jeff (May 16)
  • <Possible follow-ups>
  • Re: SID 1549 alerts -- what the heck is this ? Matt Kettler (May 16)
• RE: IP Header Data Type Preference L. Christopher Luther (May 16)
• Problem with flow:established Michael Schwartzkopff (May 17)
• ACID' error Tom Murdock (May 17)
• Strange Alert discrepancy reading from log-file Daniel Clark (May 17)
• can't use the connection after the start of snort payothlh (May 18)
  • <Possible follow-ups>
  • Re: can't use the connection after the start of snort Javier Liendo (May 18)
    • Re: can't use the connection after the start of snort payothlh (May 18)
  • can't use the connection after the start of snort jjeux (May 19)
  • can't use the connection after the start of snort jjeux (May 19)
• ignore this payothlh (May 18)
  • Re: ignore this Patrick S. Harper (May 18)
• snort-replay problem-urgent Vaidehi Kasarekar (May 18)
  • Re: snort-replay problem-urgent Andreas Östling (May 19)
• no longer connection after starting snort jjeux (May 19)
  • Re: no longer connection after starting snort Rich Adamson (May 19)
• Snort.conf & stealth mode francesco (May 19)
  • <Possible follow-ups>
  • Snort.conf & stealth mode francesco (May 23)
    • Re: Snort.conf & stealth mode Demetri Mouratis (May 23)
    • Re: Snort.conf & stealth mode Erek Adams (May 23)
• Rules just don't show up in SNortcenter Matthew McCarty (May 19)
  • Re: Rules just don't show up in SNortcenter Joerg Weber (May 20)
  • Re: Rules just don't show up in SNortcenter Daniel Clark (May 20)
• Tips for using ACID in a mult-admin environment? Williams Jon (May 19)
  • Re: Tips for using ACID in a mult-admin environment? Anthony Kim (May 30)
• Syslog,MySql, IDS Center /Eagle X McBurnett, Jim (May 19)
  • Re: Syslog,MySql, IDS Center /Eagle X Ueli Kistler (May 19)
  • Re: Syslog,MySql, IDS Center /Eagle X Ueli Kistler (May 19)
  • <Possible follow-ups>
  • RE: Syslog,MySql, IDS Center /Eagle X McBurnett, Jim (May 19)
• Snort output redirection buffered JP Vossen (May 19)
  • Re: Snort output redirection buffered Chris Green (May 19)
• Snort_decoder question Hobgood, Frankie (May 19)
• Alerts and packet capture - MYSQL Snow Jacob C KPWA (May 19)
  • Re: Alerts and packet capture - MYSQL Erek Adams (May 19)
  • <Possible follow-ups>
  • Alerts and packet capture - MYSQL Snow Jacob C KPWA (May 19)
• ACID displaying 0 Sensors Kuriscak, Ronald (May 19)
  • RE: ACID displaying 0 Sensors Brian Gregorcy (May 20)
• Can I do the flow equiv of "Flags:S"? Jason Haar (May 19)
  • Re: Can I do the flow equiv of "Flags:S"? Matt Kettler (May 20)
• fnord plugin Michael L. Artz (May 19)
• SnortSnarf Elvira_Byrnes (May 19)
  • <Possible follow-ups>
  • RE: SnortSnarf Potts, Ross A. (May 20)
• AW: Syslog,MySql, IDS Center /Eagle X Freddie Soerensen (May 20)
  • Re: AW: Syslog,MySql, IDS Center /Eagle X Ueli Kistler (May 20)
• pb with ports... phelles (May 20)
  • Re: pb with ports... payothlh (May 20)
  • Re: pb with ports... Matt Kettler (May 20)
    • Re: pb with ports... Glenn Forbes Fleming Larratt (May 20)
• ICMP Ping NMAP troubleshooting Stephen W. Thomas (May 20)
  • Re: ICMP Ping NMAP troubleshooting Erek Adams (May 20)
  • Re: ICMP Ping NMAP troubleshooting Simon Gray (May 20)
  • <Possible follow-ups>
  • RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas (May 20)
    • RE: ICMP Ping NMAP troubleshooting Erek Adams (May 20)
  • RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas (May 20)
  • RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas (May 20)
    • RE: ICMP Ping NMAP troubleshooting [snort-users-admin () lists sourceforge net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List] ['snort' in Pass-Through List] Erek Adams (May 20)
• Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Roy S. Rapoport (May 20)
  • Re: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Chris Green (May 20)
    • Re: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Roy S. Rapoport (May 20)
• AW: SnortSnarf Poppi, Sandro (May 20)
• AW: AW: Syslog,MySql, IDS Center /Eagle X Freddie Soerensen (May 20)
• RE: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC ) SRH-Lists (May 20)
• Trouble Snorting with Multiple Interfaces Travis Rodak (May 20)
  • Re: Trouble Snorting with Multiple Interfaces David Alonso De La Vega Tapage (May 21)
  • RE: Trouble Snorting with Multiple Interfaces Gordon Cunningham (May 22)
• Re: Snort & Acid Colin . Slevin (May 21)
  • Re: Re: Snort & Acid Erek Adams (May 21)
  • <Possible follow-ups>
  • Snort & Acid Colin . Slevin (May 21)
  • Snort & Acid Colin . Slevin (May 21)
    • Re: Snort & Acid Erek Adams (May 21)
  • Re: Snort & Acid Colin . Slevin (May 22)
    • Re: Snort & Acid Erek Adams (May 21)
  • Re: Snort & Acid Colin . Slevin (May 22)
• error with mysql gaojiang (May 21)
  • Re: error with mysql Erek Adams (May 21)
  • <Possible follow-ups>
  • RE: error with mysql Tinsley Paul (May 21)
  • RE: error with mysql Jonathan Jesse (May 21)
• Newbie looking for help Atkins, Dwane P (May 21)
• Re: My Linux libpcap Phil Wood (May 21)
• Acid database lost events, help!!! Brei, Matt (May 21)
  • <Possible follow-ups>
  • RE: Acid database lost events, help!!! Tinsley Paul (May 21)
  • RE: Acid database lost events, help!!! Brei, Matt (May 21)
  • RE: Acid database lost events, help!!! Tinsley Paul (May 21)
• Some help with barnyard needed Nicholas Delo (May 21)
  • Re: Some help with barnyard needed Andrew R. Baker (May 21)
  • Re: Some help with barnyard needed Erek Adams (May 21)
  • Re: Some help with barnyard needed Edin Dizdarevic (May 21)
  • <Possible follow-ups>
  • RE: Some help with barnyard needed SRH-Lists (May 21)
• is there an ftp site to fetch rules Garrett . Allen (May 21)
  • Re: is there an ftp site to fetch rules Jon Baer (May 21)
  • Re: is there an ftp site to fetch rules Bamm Visscher (May 21)
  • Re: is there an ftp site to fetch rules Matt Kettler (May 21)
  • Re: is there an ftp site to fetch rules George Theall (May 21)
  • <Possible follow-ups>
  • RE: is there an ftp site to fetch rules Garrett . Allen (May 21)
  • RE: is there an ftp site to fetch rules Schmehl, Paul L (May 21)
• Rule order--almost works? JP Vossen (May 21)
  • <Possible follow-ups>
  • RE: Rule order--almost works? Ron Shuck (May 21)
• Problem & Solution - Snort binary log file timestamps screwed up Cloppert, Michael (May 21)
• Very basic question Ryan Koster (May 21)
  • Re: Very basic question Demetri Mouratis (May 21)
  • <Possible follow-ups>
  • Re: Very basic question Matt Kettler (May 21)
  • RE: Very basic question Tinsley Paul (May 21)
• Snort alerts to SNMP Paul . Fiero (May 21)
  • Re: Snort alerts to SNMP Rafeeq Rehman (May 21)
    • Re: Snort alerts to SNMP Roy S. Rapoport (May 21)
      • Re: Snort alerts to SNMP Rafeeq Rehman (May 21)
• Sguil-0.2 Released Bamm Visscher (May 21)
  • Re: Sguil-0.2 Released fatb (May 21)
    • Re: Sguil-0.2 Released Bamm Visscher (May 21)
• IDS Pricing Comcast (May 21)
  • RE: IDS Pricing Brian Gregorcy (May 21)
    • RE: IDS Pricing twig les (May 21)
  • RE: IDS Pricing Chris (May 21)
• IDMEF Plugin Timothy Lelesi (May 21)
• Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Chris (May 21)
  • Re: Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Sumit Dhar (May 21)
  • <Possible follow-ups>
  • Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Steve Nutt (May 22)
• Distributed Snort management Nelson, Ben (May 21)
  • Re: Distributed Snort management Michael L. Artz (May 21)
  • Re: Distributed Snort management Richard DeYoung (May 21)
  • <Possible follow-ups>
  • Re: Distributed Snort management Shawn Truax (May 23)
• AW: IDMEF Plugin Poppi, Sandro (May 22)
• central logging and buffering Jochen Vogel (May 22)
  • Re: central logging and buffering Edin Dizdarevic (May 22)
    • Re: central logging and buffering Jason Haar (May 22)
• error Snort + MySQL Kim Depover (May 22)
• Misfiring Rule SID1948 Steve Halligan (May 22)
• fail to access mysql honda (May 22)
• Starter Doubts Marcelo Ribeiro (May 22)
  • <Possible follow-ups>
  • RE: Starter Doubts Jose Fernandes (IT) (May 22)
    • switched environment M. Yu (May 22)
• Best External_Net setting Stephen W. Thomas (May 22)
  • Re: Best External_Net setting Erek Adams (May 22)
  • Re: Best External_Net setting Roy S. Rapoport (May 22)
• AW: Starter Doubts Poppi, Sandro (May 22)
• False Alerts 1882 id check returned userid Lance Worthington (May 22)
  • <Possible follow-ups>
  • RE: False Alerts 1882 id check returned userid Stephen W. Thomas (May 23)
• way for test snort ? payothlh (May 22)
  • RE: way for test snort ? Matt Nelson (May 22)
  • Re: way for test snort ? Nicholas Bachmann (May 22)
    • RE: way for test snort ? Brian Laing (May 27)
  • Re: way for test snort ? David Alonso De La Vega Tapage (May 23)
  • <Possible follow-ups>
  • RE: way for test snort ? Johan Sunnerstig (May 23)
    • Re: way for test snort ? payothlh (May 23)
• Can snort create actual traffic? (imp) Vaidehi Kasarekar (May 22)
  • Re: Can snort create actual traffic? (imp) security people (May 23)
  • Re: Can snort create actual traffic? (imp) Erek Adams (May 23)
• Any Fortune 500 users out there Andy S Shrock (May 23)
  • Re: Any Fortune 500 users out there Nicholas Bachmann (May 23)
• MySQL error during SNORT setup Arnold Trauth (May 23)
  • RE: MySQL error during SNORT setup Brian Gregorcy (May 23)
  • Re: MySQL error during SNORT setup Guillaume Rix (May 23)
  • <Possible follow-ups>
  • RE: MySQL error during SNORT setup Hutchinson, Andrew (May 23)
  • RE: MySQL error during SNORT setup Slighter, Tim (May 23)
  • RE: MySQL error during SNORT setup L. Christopher Luther (May 23)
• Suggestions....... Remo Mattei (May 23)
• Portscan2 dies ... Neil Dickey (May 23)
• error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs (May 23)
  • Re: error snort + MySQL - SAME PROBLEM HERE. Kenneth G. Arnold (May 23)
  • <Possible follow-ups>
  • Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs (May 23)
    • Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic (May 23)
  • Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs (May 23)
    • Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic (May 23)
  • Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs (May 23)
  • Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic (May 23)
  • Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs (May 23)
• (spp_stream4) STEALTH ACTIVITY (unknown) detection Everist, Benjamin S. (NASWI) (May 23)
• unknown output plugin: 'alert_syslog' Jeff Dickens (May 23)
  • Re: unknown output plugin: 'alert_syslog' Matt Kettler (May 23)
• Creating ACID tables in MySQL database Arnold Trauth (May 23)
  • Re: Creating ACID tables in MySQL database Jon Baer (May 23)
• Quick Poll: RH9 + Snort + MySQL + ACID Snort Y (May 23)
  • Re: Quick Poll: RH9 + Snort + MySQL + ACID IntelliSTAR Security (May 23)
    • Re: Quick Poll: RH9 + Snort + MySQL + ACID Snort Y (May 24)
  • Re: Quick Poll: RH9 + Snort + MySQL + ACID security people (May 23)
  • Re: Quick Poll: RH9 + Snort + MySQL + ACID Craig Paterson (May 23)
  • <Possible follow-ups>
  • Re: Quick Poll: RH9 + Snort + MySQL + ACID Ty Bodell (May 24)
• Snort documentation Michael Conlen (May 23)
  • Re: Snort documentation Erek Adams (May 25)
• Barnyard Dumping To Wrong Directory Pawloski, Kevin (May 23)
• stealth mode and openbsd 3.3 Bert Beaudin (May 23)
  • Re: stealth mode and openbsd 3.3 MH (May 24)
  • Re: stealth mode and openbsd 3.3 Erek Adams (May 27)
• ettercap sig? Jon Baer (May 23)
• A Working Logsurfer Example for Snort 2.0 Matt Howell (May 23)
  • Re: A Working Logsurfer Example for Snort 2.0 Edin Dizdarevic (May 23)
• SNORT / Shadow config setting question Raven, Mark (May 23)
  • Re: SNORT / Shadow config setting question Erek Adams (May 27)
• Improved snortd init script JP Vossen (May 23)
• Snort bug in syslog output? JP Vossen (May 23)
• Updated: Improved snortd init script JP Vossen (May 23)
• Windows Users: Attention to New Support Site... Michael Steele (May 23)
• libpcap not found by configure James Schnack (May 23)
  • <Possible follow-ups>
  • libpcap not found by configure James Schnack (May 27)
    • Re: libpcap not found by configure payothlh (May 27)
  • Re: libpcap not found by configure James Schnack (May 28)
  • Re: libpcap not found by configure James Schnack (May 28)
• Stealth syslog to remote server Carol Overes (May 24)
  • <Possible follow-ups>
  • RE: Stealth syslog to remote server JP Vossen (May 24)
• turn off some logging Jonathan (May 24)
• Truncated Tcp Options? Sh J (May 24)
  • Re: Truncated Tcp Options? MH (May 26)
• How to install Snort on Jaguar 10.2.6? George Mogiljansky (May 24)
• stream4 reassembly bug Yonah Russ (May 25)
• functionality question Eric Garnel (May 25)
  • <Possible follow-ups>
  • RE: functionality question bmcdowell (May 27)
• Sorry if repost - can I use Snort with Jaguar? George Mogiljansky (May 25)
  • Re: Sorry if repost - can I use Snort with Jaguar? Jason (May 25)
• Problems with logging to mysql db Donnie Green (May 25)
  • Re: Problems with logging to mysql db Shawn Duffy (May 26)
  • <Possible follow-ups>
  • Problems with logging to mysql db d_greenjr (May 26)
    • Re: Problems with logging to mysql db David Alonso De La Vega Tapage (May 26)
• Netmask not specified Robert Golovniov (May 26)
  • Re: Netmask not specified Ciprian Badescu (May 26)
• openbsd 3.3 sparc64 snort 2.0 core dump. Benjamin Ash (May 26)
• RE: using SNORT with Jaguar George Mogiljansky (May 26)
  • Re: using SNORT with Jaguar Jason (May 25)
  • Re: RE: using SNORT with Jaguar Nick Zitzmann (May 26)
• [Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]] Glenn Mansfield Keeni (May 27)
  • Re: [Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]] Jose Vicente Nunez Z (May 27)
• arpspoof verbose output in 2.0? Arey, Jeff (May 27)
  • Re: arpspoof verbose output in 2.0? Jeff Nathan (May 28)
• SNORT and Shadow setting question mark (May 27)
• multiple interfaces on a Snort sensor francesco (May 27)
  • Re: multiple interfaces on a Snort sensor Edin Dizdarevic (May 27)
• strange behavior in rule processing? lpj0508 (May 27)
• snort 2.0 run error Semerjian, Ohanes (May 27)
• Snort can't determine the hostname correctly when lauch by a script IDS snort (May 27)
• OT(Sorta): Querying acid/snort db from third party software Jason (May 27)
• Embedded Snort? Michael Whitley (May 27)
• Elkern Worm Lorraine Cannavale (May 27)
  • Re: Elkern Worm Terence Runge (May 27)
  • <Possible follow-ups>
  • Re: Elkern Worm Kenneth G. Arnold (May 27)
• Snortcenter / byte_jump Matthew Southworth (May 27)
  • Re: Snortcenter / byte_jump Joerg Weber (May 28)
  • Re: Snortcenter / byte_jump Joerg Weber (May 30)
  • <Possible follow-ups>
  • Re: Snortcenter / byte_jump Reeves, Michael (GEAE, Compaq) (Jun 04)
    • Re: Snortcenter / byte_jump larc (Jun 04)
• 1.9.1 versus 2.0.x John Sage (May 27)
  • Re: 1.9.1 versus 2.0.x Chris Green (May 27)
    • Re: 1.9.1 versus 2.0.x John Sage (May 27)
• Snort + IPv6 jhorgan (May 27)
  • <Possible follow-ups>
  • Re: Snort + IPv6 Matt Kettler (May 27)
• Re: Snort-snmp for snort-2.0.0 David Powell (May 27)
  • Re: Snort-snmp for snort-2.0.0 Glenn Mansfield Keeni (May 27)
    • Snort Event Ids on win2000 C Wells (May 27)
      • RE: Snort Event Ids on win2000 Michael Steele (May 27)
• [Fwd: [Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]]] Glenn Mansfield Keeni (May 27)
• snort - barnyard and acid Russell Fulton (May 27)
• RE: Snort Event Ids on win2000 Joe Kinsella (May 28)
  • RE: Snort Event Ids on win2000 Michael Steele (May 28)
  • <Possible follow-ups>
  • RE: Snort Event Ids on win2000 Joe Kinsella (May 28)
    • RE: Snort Event Ids on win2000 Michael Steele (May 28)
      • Re: Snort Event Ids on win2000 Chris Reid (May 28)
      • Re: Snort Event Ids on win2000 Michael A. Davis (May 28)
• cannot start snort sensor Jeremy Bartels (May 28)
  • Re: cannot start snort sensor Erick Mechler (May 28)
• how to start snort service on win2000 pro successfully? qxw14 (May 28)
  • RE: how to start snort service on win2000 pro successfully? Michael Steele (May 28)
• Openbsd 3.3 snort no log output Duncan Matthew Stirling (May 28)
  • Re: Openbsd 3.3 snort no log output Erek Adams (May 28)
• what's the meaning of "ERROR: OpenPcap() FSM compilation failed:" qxw14 (May 28)
• RE: Snort-users digest, Vol 1 #3204 - 10 msgs Ron Shuck (May 28)
• [Snort-users]: posting the packet's time BHR Hana (May 28)
• Arrrghhh!....help..me... Tim (May 28)
  • Re: Arrrghhh!....help..me... Demetri Mouratis (May 28)
• Contd'..Arrrghhh!....help..me... Tim (May 28)
• no log for the entire network Milko Ilari (May 29)
  • Re: no log for the entire network Erek Adams (May 29)
• ERROR: curl: (6) name lookup time-outed Jeremy Bartels (May 29)
• Arrrghhh!!...help..me... Tim (May 29)
  • Re: Arrrghhh!!...help..me... Erek Adams (May 29)
    • Re: Arrrghhh!!...help..me... Jason Boykin (May 29)
• unknown sids Bernard Robbins (May 29)
  • Re: unknown sids Erick Mechler (May 29)
• Jaguar user (i.e. newbie) question George Mogiljansky (May 29)
• unable to start snort Nick Scheider (May 29)
  • Re: unable to start snort Shawn Duffy (May 29)
  • RE: unable to start snort Brian Gregorcy (May 29)
    • RE: unable to start snort Chris (May 29)
  • <Possible follow-ups>
  • RE: unable to start snort Pacheco, Michael F. (May 29)
  • RE: unable to start snort Nick Scheider (May 29)
    • Detecting Connections Faiz Ahmad Shuja (May 29)
• Firing off Abuse email based on Snort Traffic Matt Howell (May 29)
  • Re: Firing off Abuse email based on Snort Traffic Matt Kettler (May 29)
    • RE: Firing off Abuse email based on Snort Traffic Chris (May 29)
      • RE: Firing off Abuse email based on Snort Traffic dave (May 29)
    • Re: Firing off Abuse email based on Snort Traffic Matt Howell (May 29)
      • Re: Firing off Abuse email based on Snort Traffic Erek Adams (May 29)
      • Re: Firing off Abuse email based on Snort Traffic Matt Howell (May 29)
      • Re: Firing off Abuse email based on Snort Traffic Skip Carter (May 29)
      • Re: Firing off Abuse email based on Snort Traffic Budi Rahardjo (May 29)
      • Re: Firing off Abuse email based on Snort Traffic Michael H. Warfield (May 29)
    • Re: Firing off Abuse email based on Snort Traffic Frank Knobbe (May 29)
    • Re: [OT] Firing off Abuse email based on Snort Traffic Matt Kettler (May 30)
      • Re: [OT] Firing off Abuse email based on Snort Traffic Matt Howell (May 30)
      • Re: [OT] Firing off Abuse email based on Snort Traffic james (May 30)
  • RE: Firing off Abuse email based on Snort Traffic Nicholas Delo (May 29)
  • Re: Firing off Abuse email based on Snort Traffic Mark Rowlands (May 29)
  • Re: Firing off Abuse email based on Snort Traffic Todd Holloway (May 30)
  • <Possible follow-ups>
  • RE: Firing off Abuse email based on Snort Traffic bmcdowell (May 29)
    • RE: Firing off Abuse email based on Snort Traffic Matt Howell (May 29)
  • RE: Firing off Abuse email based on Snort Traffic Donofrio, Lewis (May 29)
  • Re: Firing off Abuse email based on Snort Traffic scheidell (May 30)
• Windows vs Linux for Snort Performance? Jonathan Jesse (May 29)
• Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Williams Jon (May 29)
  • Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Bamm Visscher (May 29)
  • RE: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) dave (May 29)
  • Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Brian (May 29)
  • Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Erek Adams (May 29)
  • <Possible follow-ups>
  • RE: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Jonathan Jesse (May 30)
• Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Matt Kettler (May 29)
• Is there a bug in "nocase"? Jason Haar (May 29)
• SnortCenter Configuration Roy S. Rapoport (May 30)
  • Re: SnortCenter Configuration Roy S. Rapoport (May 30)
    • Re: Re: SnortCenter Configuration Joerg Weber (May 30)
      • Re: Re: SnortCenter Configuration Roy S. Rapoport (May 30)
  • Re: SnortCenter Configuration Joerg Weber (May 30)
• byte_test:5,<,65537,0,relative,string; Martin Olsson (May 30)
  • Re: byte_test:5,<,65537,0,relative,string; Brian (May 30)
• is it possible to extend my partition without losing my dbases? Horta, Benny (May 30)
  • Re: is it possible to extend my partition without losing my dbases? Guillaume Rix (May 30)
  • Re: is it possible to extend my partition without losing my dbases? Erek Adams (May 30)
    • Re: is it possible to extend my partition without losing my dbases? Roy S. Rapoport (May 30)
• Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) bmcdowell (May 30)
  • <Possible follow-ups>
  • RE: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) Chris (May 30)
• RE: is it possible to extend my partition without l osing my dbases? Philip Davidson (May 30)
• RE: is it possible to extend my partition without l osing my dbases? L. Christopher Luther (May 30)
• Snort 2.0 and SNMP - Plugin error Mike Koponick (May 30)
  • Re: Snort 2.0 and SNMP - Plugin error Erek Adams (May 30)
  • <Possible follow-ups>
  • RE: Snort 2.0 and SNMP - Plugin error Mike Koponick (Jun 01)
• RE: Foreign Attacks (was Re: Firing off Abuse emai l based on Snort Traffic) Pacheco, Michael F. (May 30)
  • Re: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) OT Allan Dover (Jun 04)
  • <Possible follow-ups>
  • RE: Foreign Attacks (was Re: Firing off Abuse emai l based on Snort Traffic) Jared Ingersoll (Jun 01)
• RE: libpcap-2003.05.29 requirement for Snort PaulinVT (May 30)
• spp_stream4 Steath activity John Hally (May 30)
• How to ingnore a specific host(s) ? CGhercoias (May 30)
  • Re: How to ingnore a specific host(s) ? Erek Adams (May 30)
  • Re: How to ingnore a specific host(s) ? Shawn Duffy (May 30)
    • Re: How to ingnore a specific host(s) ? Edin Dizdarevic (May 30)
  • <Possible follow-ups>
  • RE: How to ingnore a specific host(s) ? CGhercoias (May 30)
• Tagging into the DB and back out again Sean Wheeler (May 30)
• RE: Tips for using ACID in a mult-admin environment ? Williams Jon (May 30)
• Virus Rules Gone? Steve An (May 30)
  • Re: Virus Rules Gone? Erek Adams (May 30)
  • <Possible follow-ups>
  • Virus Rules Gone? Steve An (May 30)
    • Re: Virus Rules Gone? Matt Kettler (May 30)
• Noob question on snort.conf storm (May 31)
  • RE: Noob question on snort.conf Michael Steele (May 31)
  • Re: Noob question on snort.conf Erek Adams (Jun 01)
  • Re: Noob question on snort.conf John Sage (Jun 07)
• Snortsam Wilcoxen, Scott (May 31)
  • Re: Snortsam Frank Knobbe (Jun 01)
• bpf filter by interface Yonah Russ (Jun 01)
  • Re: bpf filter by interface Erek Adams (Jun 01)
• cleanning all Alerts Julio Steffen Jr. (Jun 01)
  • Re: cleanning all Alerts Patrick S. Harper (Jun 01)
• Auto-updation on rule base from internet in SnortCenter Atul Shrivastava (Jun 01)
  • <Possible follow-ups>
  • Auto-updation on rule base from internet in SnortCenter Atul Shrivastava (Jun 06)
• How do keep update my rules in Snort 2.0 over Windows 2000? Javier Romero (Jun 01)
  • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Jon Baer (Jun 01)
    • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Erek Adams (Jun 01)
      • RE: How do keep update my rules in Snort 2.0 over Windows 2000? Michael Steele (Jun 02)
      • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Roy S. Rapoport (Jun 02)
      • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Erek Adams (Jun 02)
      • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Roy S. Rapoport (Jun 02)
  • <Possible follow-ups>
  • Re: How do keep update my rules in Snort 2.0 over Windows 2000? Javier Romero (Jun 03)
• Kontiki Download Manager caused NMAP Ping alerts Arey, Jeff (Jun 01)
• write rule documentation, get a t-shirt Brian (Jun 01)
  • Re: [Snort-sigs] write rule documentation, get a t-shirt Giles Coochey (Jun 04)
    • Re: [Snort-sigs] write rule documentation, get a t-shirt Brian (Jun 01)
• barnyard config error Guy Witney Krocker (Jun 01)
  • Re: barnyard config error Bamm Visscher (Jun 01)
• Ignoring certain hosts storm (Jun 01)
  • Re: Ignoring certain hosts Erek Adams (Jun 02)
• Snort Config W2K Steven Williams (Jun 01)
  • RE: Snort Config W2K Michael Steele (Jun 01)
  • <Possible follow-ups>
  • RE: Snort Config W2K Steven Williams (Jun 02)
    • RE: Snort Config W2K Michael Steele (Jun 02)
  • RE: Snort Config W2K L. Christopher Luther (Jun 02)
• Writing rules Patrice . Arnal (Jun 02)
  • <Possible follow-ups>
  • Re: Writing rules Matt Kettler (Jun 02)
• Ugh@snort Ryan Vennell (Jun 02)
  • Re: Ugh@snort Shawn Duffy (Jun 02)
• Was my host hijacked? Luiz-Otavio Zorzella (Jun 02)
  • Re: Was my host hijacked? Matt Kettler (Jun 02)
    • Re: Was my host hijacked? Luiz-Otavio Zorzella (Jun 02)
  • <Possible follow-ups>
  • Was my host hijacked? zorzella (Jun 04)
• session: printable in local.rules logs ALL traffic McKim, Tim (Jun 02)
• Updating Rules Win2K solutions Scot ~~~ (Jun 02)
  • Re: Updating Rules Win2K solutions Ueli Kistler (Jun 02)
• 3 quick questions storm (Jun 02)
  • <Possible follow-ups>
  • 3 quick questions storm (Jun 03)
• What am I Protecting Against? Roy S. Rapoport (Jun 02)
  • Re: What am I Protecting Against? james (Jun 02)
    • Re: What am I Protecting Against? Roy S. Rapoport (Jun 03)
      • Re: What am I Protecting Against? james (Jun 03)
  • Re: What am I Protecting Against? Nicholas Bachmann (Jun 04)
  • <Possible follow-ups>
  • RE: What am I Protecting Against? Wilcoxen, Scott (Jun 02)
• RE: [SMISPAM4] RE: Snort Config W2K Steven Williams (Jun 02)
  • RE: [SMISPAM4] RE: Snort Config W2K Michael Steele (Jun 02)
• Experience with snort-based IDS like PacketAlarm? Eduardo Rodrigue (Jun 03)
  • Re: Experience with snort-based IDS like PacketAlarm? Patrick S. Harper (Jun 03)
  • <Possible follow-ups>
  • Re: Experience with snort-based IDS like PacketAlarm? Miles Carpenter (Jun 05)
• Snort On win2k server Hamish McDermid (Jun 03)
  • <Possible follow-ups>
  • RE: Snort On win2k server Francois CONTAT (Jun 03)
  • RE: Snort On win2k server Snow Jacob C KPWA (Jun 03)
• Configuring Snort on LAN Robert Golovniov (Jun 03)
  • <Possible follow-ups>
  • Re: Configuring Snort on LAN JP Vossen (Jun 03)
• Linux Documentation Nick Scheider (Jun 03)
  • Re: Linux Documentation Erek Adams (Jun 03)
  • <Possible follow-ups>
  • RE: Linux Documentation Francois CONTAT (Jun 03)
  • RE: Linux Documentation Schmehl, Paul L (Jun 03)
• snort will not log to mysql Hans Steinraht (Jun 03)
  • Re: snort will not log to mysql Edin Dizdarevic (Jun 03)
    • Re: snort will not log to mysql Hans Steinraht (Jun 04)
  • Re: snort will not log to mysql Bamm Visscher (Jun 04)
    • Re: snort will not log to mysql Hans Steinraht (Jun 05)
  • <Possible follow-ups>
  • Re: snort will not log to mysql Ron Shuck (Jun 05)
• my email Petrit Podrimja (Jun 03)
• Ping David Alonso De La Vega Tapage (Jun 03)
  • Re: Ping Matt Kettler (Jun 03)
    • Re: Ping David Alonso De La Vega Tapage (Jun 04)
• snort 2.0 performance evaluation Terence R.T. Liu (Jun 03)
  • Re: snort 2.0 performance evaluation Jeff Nathan (Jun 03)
  • <Possible follow-ups>
  • RE: snort 2.0 performance evaluation James R. Hendrick (Jun 03)
• Libpcap packet statistics larosa, vjay (Jun 03)
• SnortSnarf Demo? Tobias Rice (Jun 03)
  • Re: SnortSnarf Demo? James Hoagland (Jun 03)
  • <Possible follow-ups>
  • RE: SnortSnarf Demo? Potts, Ross A. (Jun 04)
• [OT] What sites do you use to research IP's? bmcdowell (Jun 03)
  • <Possible follow-ups>
  • RE: [OT] What sites do you use to research IP's? L. Christopher Luther (Jun 03)
  • RE: [OT] What sites do you use to research IP's? bmcdowell (Jun 03)
  • RE: [OT] What sites do you use to research IP's? Robert Reid (Jun 03)
• Parsing SID field Todd A. Jacobs (Jun 03)
  • Re: Parsing SID field Erek Adams (Jun 03)
  • Re: Parsing SID field Erick Mechler (Jun 03)
  • Re: Parsing SID field Brian (Jun 03)
  • Re: Parsing SID field Jeff Nathan (Jun 03)
  • <Possible follow-ups>
  • RE: Parsing SID field Tinsley Paul (Jun 03)
• RE: [SMISPAM4] RE: [SMISPAM4] RE: Snort Config W2K Steven Williams (Jun 03)
  • <Possible follow-ups>
  • RE: [SMISPAM4] RE: [SMISPAM4] RE: Snort Config W2K Steven Williams (Jun 04)
• Topology and placement question JF (Jun 03)
• ACID / PHP / MYSQL -- help! Jon Paterson (Jun 04)
  • Re: ACID / PHP / MYSQL -- help! Simon Gray (Jun 04)
  • Re: ACID / PHP / MYSQL -- help! Jon Baer (Jun 04)
  • RE: ACID / PHP / MYSQL -- help! Faiz Ahmad Shuja (Jun 04)
  • <Possible follow-ups>
  • RE: ACID / PHP / MYSQL -- help! Mike Koponick (Jun 05)
• Re: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) OT Allan Dover (Jun 04)
• FW: MySQL error Chris (Jun 04)
  • RE: FW: MySQL error Faiz Ahmad Shuja (Jun 04)
  • <Possible follow-ups>
  • MySQL error Romano, Chris (Jun 05)
• SCAN UPnP service discover attempt Mark Williamson (Jun 04)
  • RE: SCAN UPnP service discover attempt Thomas T. Evans, III (Jun 04)
    • Re: SCAN UPnP service discover attempt Mark Williamson (Jun 04)
  • Re: SCAN UPnP service discover attempt Joerg Weber (Jun 04)
  • <Possible follow-ups>
  • RE: SCAN UPnP service discover attempt Bruyere, Michel (Jun 04)
    • Re: SCAN UPnP service discover attempt Mark Williamson (Jun 04)
    • Re: SCAN UPnP service discover attempt Mark Williamson (Jun 04)
  • RE: SCAN UPnP service discover attempt Schmehl, Paul L (Jun 04)
  • RE: SCAN UPnP service discover attempt bmcdowell (Jun 04)
  • RE: SCAN UPnP service discover attempt Garrett . Allen (Jun 04)
• UnPlug n Pray Mark Williamson (Jun 04)
• question on distributed snort collection Garrett . Allen (Jun 04)
  • Re: question on distributed snort collection Bamm Visscher (Jun 04)
  • <Possible follow-ups>
  • RE: question on distributed snort collection Williams Jon (Jun 04)
• IFACE -i any problem Marcus Robb (Jun 04)
  • Re: IFACE -i any problem Edin Dizdarevic (Jun 04)
  • Re: IFACE -i any problem Edin Dizdarevic (Jun 04)
• Scan dedected as WEB-MISC whisker tab splice attack Darrin Powell (Jun 04)
• Installation question Tim Slininger (Jun 04)
  • <Possible follow-ups>
  • RE: Installation question Francois CONTAT (Jun 05)
• No detail or contents in acid and barnyard Russell Fulton (Jun 04)
  • Re: No detail or contents in acid and barnyard Bamm Visscher (Jun 05)
  • <Possible follow-ups>
  • RE: No detail or contents in acid and barnyard Nelson, Ben (Jun 05)
• snort not start at boot Stepanishev Roman (Jun 05)
  • Re: snort not start at boot Roman Stepanishev (Jun 05)
  • <Possible follow-ups>
  • RE: snort not start at boot Schmehl, Paul L (Jun 05)
• Gigabit NIC's and snort hardware required?? Zach Forsyth (Jun 05)
  • Re: Gigabit NIC's and snort hardware required?? Roy S. Rapoport (Jun 05)
  • Re: Gigabit NIC's and snort hardware required?? Bennett Todd (Jun 05)
  • <Possible follow-ups>
  • RE: Gigabit NIC's and snort hardware required?? Zach Forsyth (Jun 05)
    • Re: Gigabit NIC's and snort hardware required?? Bennett Todd (Jun 06)
  • RE: Gigabit NIC's and snort hardware required?? Zach Forsyth (Jun 09)
• barnyard with postgres compile problem Jochen Vogel (Jun 05)
  • Re: barnyard with postgres compile problem Edin Dizdarevic (Jun 05)
  • Re: barnyard with postgres compile problem Bamm Visscher (Jun 05)
• Rules not working? Erik Tank (Jun 05)
  • Re: Rules not working? Joerg Weber (Jun 05)
  • Re: Rules not working? Matt Kettler (Jun 05)
• AW: barnyard with postgres compile problem Jochen Vogel (Jun 05)
  • Re: AW: barnyard with postgres compile problem Edin Dizdarevic (Jun 05)
• Acid problem Chris (Jun 05)
  • <Possible follow-ups>
  • Re: Acid problem guillaume rix - Sun Microsystems - Velizy France (Jun 05)
  • RE: Acid problem Chris (Jun 05)
    • Re: Acid problem payothlh (Jun 05)
  • FW: RE: Acid problem Chris (Jun 05)
  • RE: Acid problem Romano, Chris (Jun 06)
• Connecting through Snortcenter Ryan Koster (Jun 05)
  • Re: Connecting through Snortcenter Roy S. Rapoport (Jun 05)
• UPnP service discover attempt Mark Williamson (Jun 05)
  • <Possible follow-ups>
  • RE: UPnP service discover attempt bmcdowell (Jun 05)
  • RE: UPnP service discover attempt David Beeson (Jun 05)
  • RE: UPnP service discover attempt David Beeson (Jun 06)
  • RE: UPnP service discover attempt David Beeson (Jun 06)
• Signatures Vuppala, Vijaybhasker (EM, GECIS) (Jun 05)
  • Re: Signatures Michael Boman (Jun 05)
• Re: Snort-users digest, Vol 1 #3238 - 10 msgs djmurd (Jun 05)
• ACID Updates + Development Jon Baer (Jun 05)
• Newbie question (sorta): implementing a replacement SNORT box Greg Webster (Jun 05)
• 802.1q Monitoring Ron Shuck (Jun 05)
  • Re: 802.1q Monitoring Bennett Todd (Jun 06)
    • Re: 802.1q Monitoring Chris Green (Jun 06)
      • Re: 802.1q Monitoring Jeff Nathan (Jun 06)
  • Re: 802.1q Monitoring Jeff Nathan (Jun 06)
  • <Possible follow-ups>
  • RE: 802.1q Monitoring Ron Shuck (Jun 06)
    • Re: 802.1q Monitoring Chris Green (Jun 06)
• Using ACID to view OpenBSD's pf logs Jyri Hovila (Jun 05)
• snort hosted on server vs. a tap on network Tom Fulton (Jun 05)
  • Re: snort hosted on server vs. a tap on network Roy S. Rapoport (Jun 06)
    • RE: snort hosted on server vs. a tap on network Tom Fulton (Jun 06)
• SMB login Failure Andy Wood (Jun 05)
  • <Possible follow-ups>
  • RE: SMB login Failure Horta, Benny (Jun 09)
• undefined reference uncompress in libmysqlclient Robert Kane (Jun 05)
• ACID updates + developement Jon Baer (Jun 06)
  • Re: ACID updates + developement Simon Gray (Jun 06)
• Web Cgi finger question Ryan Sebastian (Jun 06)
  • Re: Web Cgi finger question Snortman (Jun 06)
    • RE: Web Cgi finger question Ryan Sebastian (Jun 09)
  • <Possible follow-ups>
  • RE: Web Cgi finger question adam.w.hogan (Jun 06)
• Timestamp Question Sh J (Jun 06)
  • Re: Timestamp Question Anthony Kim (Jun 06)
• stupid question Chris (Jun 06)
  • Re: stupid question John Sage (Jun 07)
    • Re: stupid question james (Jun 07)
    • Re: stupid question Jeff Nathan (Jun 08)
  • <Possible follow-ups>
  • RE: stupid question Chris (Jun 09)
• Snort drops packets! Vögeli Urs, voegeurs (Jun 06)
  • Re: Snort drops packets! Edin Dizdarevic (Jun 06)
• Fiber taps? Sven Fichtner (Jun 06)
  • Re: Fiber taps? Bennett Todd (Jun 06)
  • <Possible follow-ups>
  • RE: Fiber taps? larosa, vjay (Jun 06)
• ATTACK-RESPONSES id check returned userid Charles Douvier (Jun 06)
  • Re: ATTACK-RESPONSES id check returned userid Edin Dizdarevic (Jun 06)
  • <Possible follow-ups>
  • ATTACK-RESPONSES id check returned userid Roelf Schreurs (Jun 17)
  • RE: ATTACK-RESPONSES id check returned userid Hudak, Tyler (Jun 17)
• [snort] ATTACK-RESPONSES id check returned userid (cont.) Charles Douvier (Jun 06)
• W32.Bugbear.B@mm signature CGhercoias (Jun 06)
• Eric Van den Bossche is out of the office. Eric Van den Bossche (Jun 06)
• Re: [OT] Eric Van den Bossche is out of the office. Matt Kettler (Jun 06)
  • Re: [OT] Eric Van den Bossche is out of the office. Edin Dizdarevic (Jun 06)
• Snort on separate machine stealth interface Paolo Meridiani (Jun 06)
• Snort alerts caused by possible legit traffic? NismoSkyline (Jun 07)
  • Re: Snort alerts caused by possible legit traffic? John Sage (Jun 07)
• SnortCenter Mandrake 9.1 Steve Rector (Jun 07)
• ACID Problem (page not found...) Uso (Jun 07)
  • Re: ACID Problem (page not found...) Jon Baer (Jun 07)
• ACID features + development Jon Baer (Jun 07)
• Is this guy really on the list? John Sage (Jun 07)
  • Re: Is this guy really on the list? NismoSkyline (Jun 07)
    • Re: [OT] Is this guy really on the list? Matt Kettler (Jun 08)
      • Re: [OT] Is this guy really on the list? Andrew R. Baker (Jun 09)
      • Re: [OT] Is this guy really on the list? John Sage (Jun 09)
      • Re: [OT] Is this guy really on the list? Robert Kane (Jun 10)
      • Re: [OT] Is this guy really on the list? Matt Kettler (Jun 10)
      • Re: [OT] Is this guy really on the list? NismoSkyline (Jun 10)
      • Re: [OT] Is this guy really on the list? Robert Kane (Jun 11)
      • Message not available
      • Problems installing SNORT Robert Kane (Jun 11)
      • Re: Problems installing SNORT Roy S. Rapoport (Jun 11)
• SnortWatch. Any docs with detailed installation? NismoSkyline (Jun 08)
• some commented rules default? sb ch (Jun 08)
  • Re: some commented rules default? John Sage (Jun 08)
• Problems with Acid and MySQL edward . hawkins (Jun 09)
  • Re: Problems with Acid and MySQL Jon Baer (Jun 09)
• Alerts Vuppala, Vijaybhasker (EM, GECIS) (Jun 09)
• Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto (Jun 09)
  • <Possible follow-ups>
  • RE: Problems with Snort and MySQL on FreeBSD 5 Schmehl, Paul L (Jun 09)
  • RE: Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto (Jun 09)
    • RE: Problems with Snort and MySQL on FreeBSD 5 twig les (Jun 09)
  • RE: Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto (Jun 09)
• how to uninsall Gaurav Kumar (Jun 09)
  • Re: how to uninsall John Sage (Jun 09)
    • Message not available
      • Re: how to uninsall John Sage (Jun 09)
• Oinkmaster questions Philip Davidson (Jun 09)
  • Re: [Snort-sigs] Oinkmaster questions Russell Fulton (Jun 09)
    • Re: Re: [Snort-sigs] Oinkmaster questions Anthony Kim (Jun 09)
  • <Possible follow-ups>
  • RE: Oinkmaster questions Schmehl, Paul L (Jun 09)
• NYC Snort users group? Jon Baer (Jun 09)
  • <Possible follow-ups>
  • RE: NYC Snort users group? Keith Pachulski (Jun 09)
    • RE: NYC Snort users group? Clarke (Jun 10)
    • Re: NYC Snort users group? www.nycsnort.org Jon Baer (Jun 10)
• ACID And MYSQL John Ceballos-contr (Jun 09)
  • <Possible follow-ups>
  • RE: ACID And MYSQL Schmehl, Paul L (Jun 09)
  • RE: ACID And MYSQL John Ceballos-contr (Jun 09)
  • RE: ACID And MYSQL Schmehl, Paul L (Jun 09)
  • RE: ACID And MYSQL John Ceballos-contr (Jun 13)
  • RE: ACID And MYSQL Schmehl, Paul L (Jun 13)
  • RE: ACID And MYSQL John Ceballos-contr (Jun 13)
• unsubscribe zeroone () wel com 김영일 (Jun 09)
• Notes regarding success with snort 2.0 on low end hardware Matt Kettler (Jun 09)
  • <Possible follow-ups>
  • RE: Notes regarding success with snort 2.0 on low end hardware Petriz, Pablo (Jun 17)
    • RE: Notes regarding success with snort 2.0 on low end hardware Matt Kettler (Jun 17)
  • RE: Notes regarding success with snort 2.0 on low end hardware Petriz, Pablo (Jun 17)
• Starting Snort sgent based Snort at boot time Mahdi Kefayati (Jun 09)
• firewall rules modification based on snort logs Gaurav Kumar (Jun 10)
  • Re: firewall rules modification based on snort logs Matt Kettler (Jun 10)
    • Re: firewall rules modification based on snort logs Frank Knobbe (Jun 10)
      • many 'NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt' Ciprian Badescu (Jun 11)
      • Re: firewall rules modification based on snort logs Matt Kettler (Jun 11)
  • <Possible follow-ups>
  • RE: firewall rules modification based on snort logs John Hally (Jun 10)
• AW: firewall rules modification based on snort logs Poppi, Sandro (Jun 10)
• installation issues Chris Lewis (Jun 10)
  • Re: installation issues Roy S. Rapoport (Jun 10)
• RE: Re: [Snort-sigs] Oinkmaster questions Philip Davidson (Jun 10)
  • Re: Re: [Snort-sigs] Oinkmaster questions Andreas Östling (Jun 11)
    • Re: Re: [Snort-sigs] Oinkmaster questions Anthony Kim (Jun 11)
• whats coming after snort 2.0 any ideas? Horta, Benny (Jun 10)
• ACID installation woes Jim Overholser (Jun 10)
  • RE: ACID installation woes Michael Steele (Jun 11)
• variable question Mike Ellis (Jun 10)
  • Re: variable question Matt Kettler (Jun 10)
• Regarding web-iis rule NOT triggering Ashley Thomas (Jun 10)
• Writing a Rule, need help Don Cook (Jun 10)
• Portscan -> Tag ? Sven Bolt (Jun 10)
• snort 2.0.0 rules msmythe (Jun 10)
  • Re: snort 2.0.0 rules Matt Kettler (Jun 10)
    • snort 2.0.0 rules msmythe (Jun 11)
      • Re: snort 2.0.0 rules Matt Kettler (Jun 11)
• How do people generally trigger alerts? Jason Haar (Jun 10)
• ACID question 2 Esler, Joel Contractor (Jun 11)
  • Re: ACID question 2 Simon Gray (Jun 11)
  • Re: ACID question 2 Ciprian Badescu (Jun 11)
  • Re: ACID question 2 Joerg Weber (Jun 11)
  • Re: ACID question 2 Guillaume Rix (Jun 12)
  • <Possible follow-ups>
  • RE: ACID question 2 Esler, Joel Contractor (Jun 11)
    • Re: ACID question 2 Roy S. Rapoport (Jun 11)
• AW: ACID Poppi, Sandro (Jun 11)
• bad IP traffic operator (Jun 11)
  • <Possible follow-ups>
  • Re: bad IP traffic Matt Kettler (Jun 20)
• [EXCHANGE-SA () nrtc org: ScanMail Message: To Sender Match eManager setting and take actio n.] Roy S. Rapoport (Jun 11)
• Barnyard Config Error - Possible Answer tforeman (Jun 11)
• Barnyard run problems tforeman (Jun 11)
  • Re: Barnyard run problems Erek Adams (Jun 11)
  • <Possible follow-ups>
  • RE: Barnyard run problems SRH-Lists (Jun 11)
    • RE: Barnyard run problems Erek Adams (Jun 11)
  • RE: Barnyard run problems tforeman (Jun 11)
• RE: many 'NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt' Everist, Benjamin S. (NASWI) (Jun 11)
• re: Pass rule question lindsay . hunt (Jun 11)
  • <Possible follow-ups>
  • RE: re: Pass rule question adam.w.hogan (Jun 11)
  • re: pass rule question lindsay . hunt (Jun 12)
  • re: Pass Rule question lindsay . hunt (Jun 12)
    • Re: re: Pass Rule question Kenneth G. Arnold (Jun 12)
    • Re: re: Pass Rule question Erek Adams (Jun 13)
      • Re: re: Pass Rule question Ciprian Badescu (Jun 27)
      • Re: re: Pass Rule question Erek Adams (Jun 27)
      • Re: re: Pass Rule question Ciprian Badescu (Jun 29)
• Riddle me this. larosa, vjay (Jun 11)
• ACID - No Alerts found.....sometimes Scott O. (Jun 11)
  • Re: ACID - No Alerts found.....sometimes Joerg Weber (Jun 12)
• errors running ACID in a Win2K configuration Francesco (Jun 11)
  • RE: errors running ACID in a Win2K configuration Michael Steele (Jun 11)
• Snort snmp plugin Lee Nelson Civ AFRL/IFGA (Jun 11)
• error meant msmythe (Jun 11)
  • Re: error meant Matt Kettler (Jun 11)
  • <Possible follow-ups>
  • error meant msmythe (Jun 11)
  • Re: error meant msmythe (Jun 11)
    • Re: error meant Matt Kettler (Jun 11)
• RE: [OT] Is this guy really on the list? Schmehl, Paul L (Jun 11)
• Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Gus Faulk (Jun 11)
  • Re: Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Matt Kettler (Jun 11)
    • Re: Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Gus Faulk (Jun 12)
• Snort statistics - packet drops Zach Forsyth (Jun 11)
  • Re: Snort statistics - packet drops Martin Olsson (Jun 16)
  • <Possible follow-ups>
  • Re: Snort statistics - packet drops Matt Kettler (Jun 12)
  • RE: Snort statistics - packet drops Jaya Shankar (Jun 19)
    • RE: Snort statistics - packet drops Erek Adams (Jun 19)
• ACID, Barnyard, Snort install guide Chris Paul (Jun 12)
• Snort doen't write to mysql kaihansen (Jun 12)
  • Message not available
    • Re: Snort doen't write to mysql kaihansen (Jun 12)
      • Message not available
      • Re: Snort doen't write to mysql Daniele Gallarato (Jun 12)
• Cached Rule Files? Grime, Richard S (Jun 12)
• Mysql Esler, Joel Contractor (Jun 12)
  • Re: Mysql Roy S. Rapoport (Jun 12)
  • <Possible follow-ups>
  • RE: Mysql LaRose, Dallas (Jun 12)
  • RE: Mysql Esler, Joel Contractor (Jun 12)
    • RE: Mysql Erek Adams (Jun 13)
• How to lock down a RedHat box running Snort? Walzer, Jeff (Jun 12)
  • Re: How to lock down a RedHat box running Snort? Mark Ehle (Jun 12)
  • Re: How to lock down a RedHat box running Snort? Paul Gillingwater (Jun 12)
    • Re: How to lock down a RedHat box running Snort? Jason Boykin (Jun 12)
      • Re: How to lock down a RedHat box running Snort? Anthony Kim (Jun 12)
      • Re: Sourcefire (was Locking down Redhat) Paul Gillingwater (Jun 12)
    • Re: How to lock down a RedHat box running Snort? Roy S. Rapoport (Jun 12)
  • <Possible follow-ups>
  • RE: How to lock down a RedHat box running Snort? SRH-Lists (Jun 12)
  • RE: How to lock down a RedHat box running Snort? Everist, Benjamin S. (NASWI) (Jun 12)
• Port mirroring on 3com switch Petriz, Pablo (Jun 12)
  • Re: Port mirroring on 3com switch Carlos Felix (Jun 12)
  • Re: Port mirroring on 3com switch Erek Adams (Jun 13)
    • Re: Port mirroring on 3com switch Daniel A. Melo (Jun 13)
  • <Possible follow-ups>
  • RE: Port mirroring on 3com switch Jose Fernandes (IT) (Jun 12)
• Question about rule 733 Luke Randall (Jun 12)
• SNMP plug-in problems (repost) Lee Nelson Civ AFRL/IFGA (Jun 12)
• sourcefire RNA Luo, Philip (Jun 12)
  • Re: sourcefire RNA Martin Roesch (Jun 14)
• Ignored x duplicate alerts (ACID, MySQL, Snort) Ron Shuck (Jun 12)
• Output plugin msmythe (Jun 12)
• JPGRAPH/ACID/$ChartLib_path ???? Tim (Jun 12)
  • RE: JPGRAPH/ACID/$ChartLib_path ???? D@7@K|N& (Jun 12)
    • Re: JPGRAPH/ACID/$ChartLib_path ???? Roy S. Rapoport (Jun 12)
  • RE: JPGRAPH/ACID/$ChartLib_path ???? Michael Steele (Jun 12)
    • IP queries on multiple pages with ACID Ciprian Badescu (Jun 13)
  • Re: JPGRAPH/ACID/$ChartLib_path ???? Michael Moore (Jun 13)
• Easy question John Deagan (Jun 12)
  • Re: Easy question Joerg Weber (Jun 13)
  • <Possible follow-ups>
  • RE: Easy question Hutchinson, Andrew (Jun 13)
• Promiscious mode + Win2k darniot benjamin (Jun 13)
  • Re: Promiscious mode + Win2k Erek Adams (Jun 13)
  • RE: Promiscious mode + Win2k Michael Steele (Jun 13)
• smb alerts problem Gaurav Kumar (Jun 13)
  • Re: smb alerts problem Joerg Weber (Jun 13)
  • Re: smb alerts problem K Anderson (Jun 13)
• RE: errors running ACID in a Win2K configuration - A follow up Francesco (Jun 13)
  • <Possible follow-ups>
  • RE: errors running ACID in a Win2K configuration - A follow up francesco (Jun 17)
• ACID Update Whois Cache Problem Brian Blake (Jun 13)
• Re: Snort-users digest, Vol 1 #3257 - 5 msgs Don Cook (Jun 13)
• Fwd: Snort 1.9.1 error that runs on AIX 4.3 Richard Powell (Jun 13)
• Capturing incoming packets? guano (Jun 13)
  • Re: Capturing incoming packets? Erek Adams (Jun 13)
    • Re: Capturing incoming packets? guano (Jun 13)
      • Re: Capturing incoming packets? Erek Adams (Jun 14)
      • Re: Capturing incoming packets? guano (Jun 14)
      • Re: Capturing incoming packets? Erek Adams (Jun 16)
• New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville (Jun 13)
  • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele (Jun 14)
    • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville (Jun 14)
      • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele (Jun 14)
    • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville (Jun 14)
      • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville (Jun 14)
      • RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele (Jun 14)
• Nothing Logged into mysql Rohit (Jun 14)
  • <Possible follow-ups>
  • RE: Nothing Logged into mysql Esler, Joel Contractor (Jun 14)
    • Re: Nothing Logged into mysql Rohit (Jun 14)
  • RE: Nothing Logged into mysql Esler, Joel Contractor (Jun 14)
    • Re: Nothing Logged into mysql Rohit (Jun 14)
• statically compile Jeremy Hefner (Jun 14)
• Acid/PHP/MySQL/Apache working ... But one more question Esler, Joel Contractor (Jun 14)
  • RE: Acid/PHP/MySQL/Apache working ... But one more question Michael Steele (Jun 14)
• Action stats: Logged 0 Alerts 0 Rohit (Jun 14)
  • Re: Action stats: Logged 0 Alerts 0 David Alonso De La Vega Tapage (Jun 16)
• snort not sending alerts Gaurav Kumar (Jun 14)
• RE: Acid/PHP/MySQL/Apache working ... But one more question Esler, Joel Contractor (Jun 14)
• snort not sending alerts to windows worstations Gaurav Kumar (Jun 15)
  • Re: snort not sending alerts to windows worstations K Anderson (Jun 15)
• Any Commercial Snorts besides Demarc? Uso (Jun 15)
  • Re: Any Commercial Snorts besides Demarc? Angela Dickinson (Jun 15)
    • RE: Any Commercial Snorts besides Demarc? Michael Steele (Jun 15)
• how to disable "Short UDP packet, length field" alert? sb ch (Jun 15)
  • Re: how to disable "Short UDP packet, length field" alert? Erek Adams (Jun 16)
• ACID_DB_SETUP question Chris Wong (Jun 15)
• Demarc: Snort binary does not exist or is not executable at specified location Uso (Jun 15)
• ACID --with-gd Jan van den Berg (Jun 15)
• SnortCenter and the Snort2.0 fixes Joerg Weber (Jun 16)
  • Re: SnortCenter and the Snort2.0 fixes Daniel A. Melo (Jun 17)
    • Re: SnortCenter and the Snort2.0 fixes Brian (Jun 17)
    • Re: SnortCenter and the Snort2.0 fixes Michael (Jun 18)
      • Re: SnortCenter and the Snort2.0 fixes Roy S. Rapoport (Jun 18)
• Hogwash Redhat 7.3 Gordon McDowall (Jun 16)
• ANNOUNCEMENT: Eagle X v2.0 available on http://www.engagesecurity.com Ueli Kistler (Jun 16)
  • Eagle X v2.0 cristal_ball (Jun 17)
    • Re: Eagle X v2.0 Ueli Kistler (Jun 17)
      • performance concern Francisco Morosini (Jun 17)
      • Re: performance concern Erek Adams (Jun 17)
      • Re: performance concern Matt Kettler (Jun 17)
  • Questions about Eagle X v2.0 LucAdmin (Jun 19)
• ANNOUNCEMENT: IDScenter 1.1 RC3 released on www.engagesecurity.com Ueli Kistler (Jun 16)
• Taps PPowenski (Jun 16)
• AW: Taps Poppi, Sandro (Jun 16)
  • Re: Taps Bennett Todd (Jun 16)
• Re: Snort-users digest, Vol 1 #3266 - 11 msgs (Out Of Office) Joseph Koval (Jun 16)
• variable problem Brian Hughes (Jun 16)
  • Re: variable problem Erek Adams (Jun 16)
    • RE: variable problem Jim Cervantes (Jun 16)
      • RE: variable problem Erek Adams (Jun 17)
    • Re: variable problem Matt Kettler (Jun 17)
  • <Possible follow-ups>
  • RE: variable problem adam.w.hogan (Jun 16)
  • RE: variable problem Brian Hughes (Jun 17)
• Help with Config Idea Ferguson, Michael (Jun 16)
• File size limit exceeded Joecat28 (Jun 16)
  • <Possible follow-ups>
  • File size limit exceeded Joecat28 (Jun 17)
    • Re: File size limit exceeded Mathias Gygax (Jun 17)
    • Re: File size limit exceeded Erek Adams (Jun 17)
  • File Size Limit Exceeded Matt Geiger (Jun 24)
    • Re: File Size Limit Exceeded Erek Adams (Jun 24)
      • FAQ entry Rich Adamson (Jun 24)
• statistics that Snort can do Francesco (Jun 16)
  • Re: statistics that Snort can do Brian (Jun 16)
  • Re: statistics that Snort can do Erek Adams (Jun 16)
  • <Possible follow-ups>
  • RE: statistics that Snort can do Kreimendahl, Chad J (Jun 16)
    • Re: statistics that Snort can do Terence Runge (Jun 17)
• [OT] RE: Re: Snort-users digest, Vol 1 #3266 - 11 m sgs (Out Of Office) Everist, Benjamin S. (NASWI) (Jun 16)
• ACID Duplicate entry error?? Jon Paterson (Jun 16)
• Question about "SCAN SOCKS Proxy attempt" alert . Chris Wong (Jun 16)
  • RE: Question about "SCAN SOCKS Proxy attempt" alert . Michael Steele (Jun 16)
• leftover unified output files/barnyard operation Chris Paul (Jun 17)
• unified logging Jochen Vogel (Jun 17)
• PHP Installation problem Vuppala, Vijaybhasker (EM, GECIS) (Jun 17)
  • Re: PHP Installation problem Muenz, Michael (Jun 17)
  • Re: PHP Installation problem David Alonso De La Vega Tapage (Jun 17)
  • <Possible follow-ups>
  • RE: PHP Installation problem Esler, Joel Contractor (Jun 17)
• Sorry for such question, but ... magre (Jun 17)
  • Re: Sorry for such question, but ... Erek Adams (Jun 17)
• Database compatibility Vuppala, Vijaybhasker (EM, GECIS) (Jun 17)
  • Re: Database compatibility Erek Adams (Jun 17)
  • <Possible follow-ups>
  • RE: Database compatibility Schmehl, Paul L (Jun 17)
• Combining NIC interfaces on FreeBSD Richard Bejtlich (Jun 17)
• I have a problem... Tommy (Jun 17)
• Clearing the snort database Michael . Mulholland (Jun 17)
  • <Possible follow-ups>
  • RE: Clearing the snort database Schmehl, Paul L (Jun 17)
  • RE: Clearing the snort database LaRose, Dallas (Jun 17)
  • RE: Clearing the snort database PPowenski (Jun 19)
• DDoS?? almost 40k 'TCP Data Offset is less than 5!' alerts in 30 mins lpj0508 (Jun 17)
• New Feature based on MAC address filterig (Possible !!!!!) Atul Shrivastava (Jun 17)
  • Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) Frank Knobbe (Jun 16)
    • Re: Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) David Alonso De La Vega Tapage (Jun 17)
  • Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) Michael Boman (Jun 16)
• Cleveland, Ohio Area Snort User's Group billford (Jun 17)
• Making Snort Rules More "Sensitive" Rich Lichvar (Jun 17)
  • Re: Making Snort Rules More "Sensitive" Erek Adams (Jun 17)
    • RE: Making Snort Rules More "Sensitive" D@7@K|N& (Jun 17)
  • RE: Making Snort Rules More "Sensitive" D@7@K|N& (Jun 17)
  • <Possible follow-ups>
  • RE: Making Snort Rules More "Sensitive" L. Christopher Luther (Jun 17)
• Default configuration on Win32 .. Not detecting SubSeven? Mark G. Spencer (Jun 17)
• Depth and multi content rule help. larosa, vjay (Jun 17)
  • Re: [Snort-sigs] Depth and multi content rule help. Chris Green (Jun 18)
• RE: [Snort-sigs] Depth and multi content rule help. SRH-Lists (Jun 17)
  • <Possible follow-ups>
  • RE: [Snort-sigs] Depth and multi content rule help. Steve Halligan (Jun 19)
• snort-2.0.0 fails to start Rick Waegner (Jun 17)
  • Re: snort-2.0.0 fails to start Roy S. Rapoport (Jun 17)
• Alerts not showing up in ACID Nick Scheider (Jun 17)
  • RE: Alerts not showing up in ACID Mark Wills (Jun 19)
• spp_stream4 Stealth Activity detect John Hally (Jun 17)
  • <Possible follow-ups>
  • RE: spp_stream4 Stealth Activity detect Esler, Joel Contractor (Jun 17)
• Best HP-UX 11.0 ANSI C compile options? Ray Randolph (Jun 17)
• SUMMARY: snort-2.0.0 fails to start Rick Waegner (Jun 17)
• Snort-2.0 "buglet"? Wrong error on out-of-memory error Jason Haar (Jun 17)
• Cross-device link ?? Schmehl, Paul L (Jun 17)
  • Re: Cross-device link ?? Andreas Östling (Jun 17)
• Total Cost of Ownership for Snort Implementation? Nicholas Brawn (Jun 17)
  • Re: Total Cost of Ownership for Snort Implementation? Bennett Todd (Jun 18)
    • Re: Total Cost of Ownership for Snort Implementation? Derek Glidden (Jun 18)
      • Re: Total Cost of Ownership for Snort Implementation? twig les (Jun 18)
• WinSnort: Packets Statistics not showing Uso (Jun 18)
• Rules optimization Vuppala, Vijaybhasker (EM, GECIS) (Jun 18)
  • Re: Rules optimization Erek Adams (Jun 18)
    • AW: Rules optimization Sean Wheeler (Jun 19)
  • <Possible follow-ups>
  • Re: Rules optimization Matt Kettler (Jun 18)
  • RE: Rules optimization Vuppala, Vijaybhasker (EM, GECIS) (Jun 20)
    • RE: Rules optimization Erek Adams (Jun 20)
• snort_inline rule problem Gordon McDowall (Jun 18)
  • <Possible follow-ups>
  • RE: snort_inline rule problem Gordon McDowall (Jun 18)
• install 2.0.0 Julien VARLET (Jun 18)
  • Re: install 2.0.0 Roy S. Rapoport (Jun 18)
• Portscan2 Preprocessor Rodney Green (Jun 18)
  • <Possible follow-ups>
  • RE: Portscan2 Preprocessor Esler, Joel Contractor (Jun 18)
    • Re: Portscan2 Preprocessor Rodney Green (Jun 18)
• Questions on source John Deagan (Jun 18)
• Snort with three interfaces attached to diferent network segment artiman (Jun 18)
  • RE: Snort with three interfaces attached to diferent network segment Mike Feetham (Jun 18)
  • Re: Snort with three interfaces attached to diferent network segment Erek Adams (Jun 18)
  • Re: Snort with three interfaces attached to diferent network segment Bennett Todd (Jun 18)
  • Re: Snort with three interfaces attached to diferent network segment Craig Paterson (Jun 18)
• offset help. larosa, vjay (Jun 18)
  • <Possible follow-ups>
  • RE: offset help. larosa, vjay (Jun 19)
    • RE: offset help. Ciprian Badescu (Jun 19)
  • RE: offset help. larosa, vjay (Jun 19)
• Problems with AICD seeing Sensors Allyn Baskerville (Jun 18)
• snort processes Derya Sezen (Jun 18)
  • Re: snort processes Matt Kettler (Jun 18)
    • Re: snort processes Derya Sezen (Jun 19)
  • Re: snort processes Erek Adams (Jun 19)
  • <Possible follow-ups>
  • RE: snort processes Esler, Joel Contractor (Jun 19)
• snort 2.0.0 logging problem? sb ch (Jun 18)
  • Re: snort 2.0.0 logging problem? Erek Adams (Jun 19)
  • <Possible follow-ups>
  • Re: snort 2.0.0 logging problem? sb ch (Jun 19)
    • Re: snort 2.0.0 logging problem? Erek Adams (Jun 20)
• slow Rodney Green (Jun 18)
  • Re: slow Chris Green (Jun 19)
    • Re: slow Matt Kettler (Jun 19)
      • Re: slow Rodney Green (Jun 19)
      • Re: slow Matt Kettler (Jun 19)
      • Re: slow Rodney Green (Jun 19)
      • Re: slow Roy S. Rapoport (Jun 19)
      • Re: slow Roy S. Rapoport (Jun 19)
      • Re: slow Rodney Green (Jun 19)
      • Re: slow Roy S. Rapoport (Jun 19)
      • Re: slow twig les (Jun 19)
      • RE: slow Paul D. Shaffer (Jun 19)
      • Re: slow Roy S. Rapoport (Jun 19)
      • Re: slow Jeff Nathan (Jun 23)
      • snortcenter + postgres? Jason Boykin (Jun 23)
• eth0 interface does not log? anyone? hallian hallian (Jun 18)
  • Re: eth0 interface does not log? anyone? Erek Adams (Jun 19)
• Re: eth0 interface does not log? anyone? (fwd) Ciprian Badescu (Jun 19)
• snortsam and debian Hans Steinraht (Jun 19)
  • Re: snortsam and debian Erek Adams (Jun 19)
• Sylog-ng _and_ Mysql with Snort 2.0.0 Thomas Bechtold (Jun 19)
  • Re: Sylog-ng _and_ Mysql with Snort 2.0.0 Erek Adams (Jun 19)
  • <Possible follow-ups>
  • Re: Sylog-ng _and_ Mysql with Snort 2.0.0 Thomas Bechtold (Jun 19)
• ACID/mysql/snort install D@7@K|N& (Jun 19)
  • Re: ACID/mysql/snort install Erek Adams (Jun 19)
  • Re: ACID/mysql/snort install list (Jun 19)
  • Re: ACID/mysql/snort install Rodney Green (Jun 19)
  • <Possible follow-ups>
  • RE: ACID/mysql/snort install Esler, Joel Contractor (Jun 19)
  • RE: ACID/mysql/snort install Francois CONTAT (Jun 19)
    • Re: ACID/mysql/snort install Guillaume Rix (Jun 19)
  • RE: ACID/mysql/snort install Dean Davis (Jun 19)
• log to utf8 Chuong Dao (Jun 19)
• [no subject] Juergen Anthamatten (Jun 19)
• IDScenter 1.1 RC3 update Ueli Kistler (Jun 19)
• stream4 - simple experiment CHARLES ASMUTH (Jun 19)
  • Re: stream4 - simple experiment Matt Kettler (Jun 19)
• a problem installing winPcap guhu bindaas (Jun 19)
  • RE: a problem installing winPcap dave (Jun 19)
• Snort Users Yahoo Group Rodney Green (Jun 19)
  • Message not available
    • Re: Snort Users Yahoo Group Rodney Green (Jun 19)
      • Re: Snort Users Yahoo Group Chris Mann (Jun 19)
      • Re: Snort Users Yahoo Group Michael Anderson (Jun 19)
  • Re: Snort Users Yahoo Group Brian (Jun 19)
    • Re: Snort Users Yahoo Group Rodney Green (Jun 19)
      • Re: Snort Users Yahoo Group Brian (Jun 19)
      • Re: Snort Users Yahoo Group payothlh (Jun 19)
      • Re: Snort Users Yahoo Group Matt Kettler (Jun 19)
      • Re: Snort Users Yahoo Group Roy S. Rapoport (Jun 19)
      • Re: Snort Users Yahoo Group Jeff Nathan (Jun 20)
      • Re: Snort Users Yahoo Group Roy S. Rapoport (Jun 21)
      • Re: Snort Users Yahoo Group Jeff Nathan (Jun 22)
      • Re: Snort Users Yahoo Group Jeff Nathan (Jun 22)
  • <Possible follow-ups>
  • RE: Snort Users Yahoo Group LaRose, Dallas (Jun 19)
    • Re: Snort Users Yahoo Group Bennett Todd (Jun 19)
  • RE: Snort Users Yahoo Group Sadanapalli, Pradeep Kumar (MED, TCS) (Jun 19)
• no RPM's? Daniel Wittenberg (Jun 19)
  • Re: no RPM's? Bennett Todd (Jun 19)
• Window Size Andy Wood (Jun 19)
  • Re: Window Size Phil Wood (Jun 19)
• Slow? Why mail? Tobias Rice (Jun 19)
  • Re: Slow? Why mail? Chris Mann (Jun 19)
    • Re: Slow? Why mail? twig les (Jun 19)
    • Re: Slow? Why mail? Mark Rowlands (Jun 20)
      • Re: Slow? Why mail? Chris Green (Jun 20)
  • Re: Slow? Why mail? Bennett Todd (Jun 19)
  • Re: Slow? Why mail? Roy S. Rapoport (Jun 19)
  • Re: Slow? Why mail? Frank Knobbe (Jun 19)
  • <Possible follow-ups>
  • RE: Slow? Why mail? Everist, Benjamin S. (NASWI) (Jun 20)
• remote interface monitoring Everett Ward (Jun 19)
  • Re: remote interface monitoring Erek Adams (Jun 19)
• using "react" on w32 snort ... Jon Baer (Jun 19)
  • Re: using "react" on w32 snort ... Erek Adams (Jun 19)
    • Re: using "react" on w32 snort ... Rich Adamson (Jun 20)
      • Re: using "react" on w32 snort ... Jeff Nathan (Jun 23)
• what causes packet drops with low cpu usage Horta, Benny (Jun 20)
  • <Possible follow-ups>
  • RE: what causes packet drops with low cpu usage Garrett . Allen (Jun 20)
  • Re: what causes packet drops with low cpu usage Matt Kettler (Jun 20)
• Acid quickie David (Jun 20)
  • <Possible follow-ups>
  • Re: Acid quickie Zack Jordan (Jun 23)
  • RE: Acid quickie Schmehl, Paul L (Jun 23)
• ACID duplicate Key error?? Jon Paterson (Jun 20)
  • <Possible follow-ups>
  • RE: ACID duplicate Key error?? Jon Paterson (Jun 23)
• how snort detect port scan carl marx (Jun 20)
• Re: Submit new detection engine? stephane nasdrovisky (Jun 20)
• how to specify network interface card (windows)? Lukasz Gogolewski (Jun 20)
• Thoughts.....Future of Linux? Donofrio, Lewis (Jun 20)
  • Re: Thoughts.....Future of Linux? Chris Green (Jun 24)
    • OT-Read Only Network cables Mike Feetham (Jun 24)
      • Re: OT-Read Only Network cables Erek Adams (Jun 24)
      • Re: OT-Read Only Network cables sunzi (Jun 24)
      • Re: OT-Read Only Network cables Frank Knobbe (Jun 24)
  • <Possible follow-ups>
  • Re: Thoughts.....Future of Linux? Matt Kettler (Jun 20)
• RE: how to specify network interface card (windows) ? L. Christopher Luther (Jun 20)
• RE: how to specify network interface card (windows) ? L. Christopher Luther (Jun 20)
• Acid Email Alerts Robin Johnson (Jun 20)
  • Re: Acid Email Alerts Erek Adams (Jun 20)
  • RE: Acid Email Alerts Brian Gregorcy (Jun 20)
    • Re: Acid Email Alerts Jon Quiros (Jun 20)
      • Re: Acid Email Alerts Jon Baer (Jun 20)
      • Re: Acid Email Alerts Jon Quiros (Jun 20)
    • Re: Acid Email Alerts Charlie Blue (Jun 20)
    • Re: Acid Email Alerts Jon Baer (Jun 20)
  • Re: Acid Email Alerts Thomas Bechtold (Jun 23)
• how to log *only* $HOME_NET Jon Baer (Jun 20)
  • Re: how to log *only* $HOME_NET Erek Adams (Jun 21)
• W32/Randex.c? Jon Baer (Jun 20)
• performance of the snort sb ch (Jun 20)
• Firewall Tester 0.9 Andrea Barisani (Jun 21)
• Malware Identified (window size 55808) Michael Wright (Jun 21)
  • Re: Malware Identified (window size 55808) Jeff Nathan (Jun 22)
• Error trapping signatures ... Jon Baer (Jun 21)
  • Re: Error trapping signatures ... Erek Adams (Jun 22)
    • Re: Error trapping signatures ... Jon Baer (Jun 22)
• Statistics of GNUtella and other traffic Craig Bumpstead (Jun 22)
• Feature Request: regex matching available as $n strings for msg:? Jason Haar (Jun 22)
  • Re: Feature Request: regex matching available as $n strings for msg:? Jeff Nathan (Jun 22)
• install Q ref; Redhat 9.0 Installation Guide, Setup guides @ snort.org zie inhoud (Jun 23)
• Listen at location Q, analyze at location X Richard Bejtlich (Jun 23)
• Newbie Snort 2.0 install question... Tony Santos (Jun 23)
  • <Possible follow-ups>
  • Newbie Snort 2.0 install question... Tony Santos (Jun 30)
• Feeding mysql db with alert log files. Daniel Gil (Jun 23)
  • Re: Feeding mysql db with alert log files. Erek Adams (Jun 23)
• mysqladmin version msmythe (Jun 23)
• Cisco Catalyst - SNORT Falvo, Jose Luis - (Arg) (Jun 23)
  • Re: Cisco Catalyst - SNORT Javier Liendo (Jun 23)
    • Re: Cisco Catalyst - SNORT Scott Fringer (Jun 23)
  • <Possible follow-ups>
  • RE: Cisco Catalyst - SNORT Falvo, Jose Luis - (Arg) (Jun 23)
  • RE: Cisco Catalyst - SNORT Tinsley Paul (Jun 23)
    • RE: Cisco Catalyst - SNORT twig les (Jun 23)
      • RE: Cisco Catalyst - SNORT shannong (Jun 24)
    • RE: Cisco Catalyst - SNORT Jeff Nathan (Jun 26)
      • snort + 802.11 management frames ... Jon Baer (Jun 26)
      • Re: Cisco Catalyst - SNORT Gary Flynn (Jun 27)
      • Re: Cisco Catalyst - SNORT Rich Adamson (Jun 27)
      • Re[2]: Cisco Catalyst - SNORT Lukasz Bromirski (Jun 27)
      • Re: Cisco Catalyst - SNORT Jeff Nathan (Jun 27)
      • Foundry performance? (was "Re: Cisco Catalyst - SNORT") twig les (Jun 27)
      • Re: Foundry performance? (was "Re: Cisco Catalyst - SNORT") Roy S. Rapoport (Jun 28)
      • OT: Re: Foundry performance? Chris Green (Jun 30)
      • Re: Cisco Catalyst - SNORT Gary Flynn (Jun 27)
      • Re: Cisco Catalyst - SNORT Jeff Nathan (Jun 27)
      • RE: Cisco Catalyst - SNORT Mike Feetham (Jun 27)
• Snort and PPPoE / tun interface UIA Security Team (Jun 23)
  • Re: Snort and PPPoE / tun interface Liam Reimers (Jun 25)
    • Re: Re: Snort and PPPoE / tun interface Rich Adamson (Jun 25)
    • Re: Re: Snort and PPPoE / tun interface Erek Adams (Jun 25)
  • <Possible follow-ups>
  • Re: Snort and PPPoE / tun interface UIA Security Team (Jun 24)
• var HOME_NET under Linux Thomas Bechtold (Jun 23)
  • Re: var HOME_NET under Linux Jason (Jun 23)
    • Re: var HOME_NET under Linux Thomas Bechtold (Jun 23)
    • Re: var HOME_NET under Linux Roy S. Rapoport (Jun 23)
    • Re: var HOME_NET under Linux Erek Adams (Jun 23)
      • Re: var HOME_NET under Linux Thomas Bechtold (Jun 27)
      • Re: var HOME_NET under Linux Erek Adams (Jun 27)
      • Re: var HOME_NET under Linux Thomas Bechtold (Jun 28)
      • Re: var HOME_NET under Linux Erek Adams (Jun 28)
      • Re: var HOME_NET under Linux Thomas Bechtold (Jun 30)
      • Re: var HOME_NET under Linux David Alonso De La Vega Tapage (Jun 30)
  • <Possible follow-ups>
  • RE: var HOME_NET under Linux LaRose, Dallas (Jun 23)
  • RE: var HOME_NET under Linux Schmehl, Paul L (Jun 30)
• Increase in UDP/1434 traffic, or is it me Sam Evans (Jun 23)
• Sans-giac alert list Esler, Joel Contractor (Jun 23)
• Database permissions question John Deagan (Jun 23)
  • Re: Database permissions question sunzi (Jun 23)
    • Re: Database permissions question Frank Knobbe (Jun 23)
    • RE: Database permissions question Ahmad Farouk (Jun 25)
      • Re: Database permissions question Jason K. Boykin (Jun 25)
      • RE: Database permissions question Erek Adams (Jun 25)
  • Re: Database permissions question Erek Adams (Jun 23)
    • newbie type questions Rich Adamson (Jun 23)
      • Re: newbie type questions J.C. Woods (Jun 24)
      • Re: newbie type questions Roy S. Rapoport (Jun 24)
• FreeBSD and the socket for a -A unsock option Snort User (Jun 23)
• Minimal OS installation for a Snort sensor Francesco (Jun 23)
  • RE: Minimal OS installation for a Snort sensor tim.otten (Jun 24)
  • <Possible follow-ups>
  • RE: Minimal OS installation for a Snort sensor Donofrio, Lewis (Jun 30)
    • Preprocessor2-ignorehosts NOT WORKING. LucAdmin (Jun 30)
      • Re: Preprocessor2-ignorehosts NOT WORKING. Ciprian Badescu (Jun 30)
      • RE: Preprocessor2-ignorehosts NOT WORKING. LucAdmin (Jun 30)
      • Re: Preprocessor2-ignorehosts NOT WORKING. Matt Kettler (Jun 30)
    • Re: Minimal OS installation for a Snort sensor sunzi (Jun 30)
• snort-replay 0.2 Andreas Östling (Jun 24)
• WinPcap 3.0 supports remote capture Richard Bejtlich (Jun 24)
  • <Possible follow-ups>
  • RE: WinPcap 3.0 supports remote capture Esler, Joel Contractor (Jun 24)
    • Re: WinPcap 3.0 supports remote capture sunzi (Jun 24)
• Rule opinions James Nonya (Jun 24)
  • RE: Rule opinions Mike Feetham (Jun 24)
    • RE: Rule opinions Mike Feetham (Jun 24)
  • Re: Rule opinions Christian Kreibich (Jun 24)
    • Re: Rule opinions James Nonya (Jun 24)
  • <Possible follow-ups>
  • RE: Rule opinions Grime, Richard S (Jun 24)
  • RE: Rule opinions Kreimendahl, Chad J (Jun 24)
    • Re: Rule opinions Gary Flynn (Jun 24)
    • RE: Rule opinions James Nonya (Jun 25)
• NMAP scans Steve Murphy (Jun 24)
• Re: Snort-users digest, Vol 1 #3293 - 11 msgs (Out Of Office) Joseph Koval (Jun 24)
• Part of traffic matching wrong rule Juergen Anthamatten (Jun 24)
  • Re: Part of traffic matching wrong rule James Nonya (Jun 24)
  • Re: Part of traffic matching wrong rule Erek Adams (Jun 24)
  • Re: Part of traffic matching wrong rule Andrew R. Baker (Jun 24)
  • <Possible follow-ups>
  • Re: Part of traffic matching wrong rule Juergen Anthamatten (Jun 25)
  • Re: Part of traffic matching wrong rule JP Vossen (Jun 25)
    • Re: Part of traffic matching wrong rule Chris Green (Jun 26)
• RE: OT-Read Only Network cables bmcdowell (Jun 24)
  • <Possible follow-ups>
  • Fwd: Re: OT-Read Only Network cables Jason K. Boykin (Jun 24)
  • RE: OT-Read Only Network cables PPowenski (Jun 25)
• RE: 55808 window size [WAS: (no subject)] Coyle, Brian (Jun 24)
  • Re: RE: 55808 window size [WAS: (no subject)] Frank Knobbe (Jun 24)
• newbie rules Q SNORT (Jun 25)
  • Re: newbie rules Q James Lay (Jun 25)
  • Re: newbie rules Q Darryl Luff (Jun 25)
• RE: Snort-users digest, Vol 1 #3295 - 13 msgs CGhercoias (Jun 25)
• Incorrect timestamps in snort log files stirw (Jun 25)
• Using SNORT for Internal IDS Pankaj Gupta (Jun 25)
  • Re: Using SNORT for Internal IDS Erek Adams (Jun 25)
    • Re: Using SNORT for Internal IDS Bryan Irvine (Jun 25)
  • <Possible follow-ups>
  • RE: Using SNORT for Internal IDS Hutchinson, Andrew (Jun 25)
• Snort Sensor Placement Outside Firewall Rich Lichvar (Jun 25)
  • Re: Snort Sensor Placement Outside Firewall Erek Adams (Jun 25)
    • RE: Snort Sensor Placement Outside Firewall Michael Steele (Jun 25)
      • RE: Snort Sensor Placement Outside Firewall Erek Adams (Jun 26)
  • Re: Snort Sensor Placement Outside Firewall David Alonso De La Vega Tapage (Jun 25)
    • RE: Snort Sensor Placement Outside Firewall Michael Steele (Jun 25)
      • Re: Snort Sensor Placement Outside Firewall David Alonso De La Vega Tapage (Jun 26)
  • <Possible follow-ups>
  • Fw: Snort Sensor Placement Outside Firewall Tom Sevy (Jun 26)
    • RE: Snort Sensor Placement Outside Firewall Michael Steele (Jun 26)
• eth1 without an IP = no worky Jason Whitson (Jun 25)
  • Re: eth1 without an IP = no worky James Lay (Jun 25)
  • Re: eth1 without an IP = no worky Erek Adams (Jun 25)
  • Re: eth1 without an IP = no worky Matt Kettler (Jun 25)
  • Re: eth1 without an IP = no worky Joe Matusiewicz (Jun 25)
    • UPDATE eth1 without an IP = no worky Jason Whitson (Jun 25)
      • Re: UPDATE eth1 without an IP = no worky James Lay (Jun 26)
• few brief w32 questions ... Jon Baer (Jun 25)
  • Re: few brief w32 questions ... Jeff Nathan (Jun 26)
    • Re: few brief w32 questions ... Jon Baer (Jun 26)
      • Re: few brief w32 questions ... Jeff Nathan (Jun 29)
• fatal error starting snort Graham, Mike (Jun 25)
  • Re: fatal error starting snort Rodrigo Goya (Jun 25)
  • Re: fatal error starting snort Erek Adams (Jun 25)
    • Re: fatal error starting snort Roy S. Rapoport (Jun 25)
    • Re: fatal error starting snort Joerg Weber (Jun 26)
      • Re: fatal error starting snort Jason K. Boykin (Jun 26)
      • Re: fatal error starting snort Erek Adams (Jun 26)
• Disabling syslogd "last message repeated" Scott Williams (Network) (Jun 25)
  • <Possible follow-ups>
  • RE: Disabling syslogd "last message repeated" Bradberry, John (Jun 30)
• Barnyard and postgresql Jason (Jun 25)
  • Re: Barnyard and postgresql Andrew R. Baker (Jun 25)
• Snort: WARNING: TCP Data Offset is less than 5! Matthew Connor (Jun 25)
• Log vs Alert Matt Geiger (Jun 26)
  • Re: Log vs Alert Erek Adams (Jun 26)
    • Re: Log vs Alert list (Jun 26)
  • <Possible follow-ups>
  • Re: Log vs Alert Dusty Hall (Jun 26)
  • Re: Log vs Alert John Deagan (Jun 26)
  • RE: Re: Log vs Alert SRH-Lists (Jun 26)
  • Re: Log vs Alert Dusty Hall (Jun 26)
  • RE: Re: Log vs Alert John Deagan (Jun 26)
  • RE: Re: Log vs Alert John Deagan (Jun 26)
• Snort rule question James Lay (Jun 26)
  • Re: Snort rule question Erek Adams (Jun 26)
  • Re: Snort rule question Matt Kettler (Jun 26)
  • Re: Snort rule question Chris Green (Jun 26)
  • Re: Snort rule question Brian (Jun 26)
• Re.: Snort Sensor Placement Outside Firewall Rich Lichvar (Jun 26)
  • RE: Re.: Snort Sensor Placement Outside Firewall Michael Steele (Jun 26)
• re: snortcenter/using a sensor with no ip address lindsay . hunt (Jun 26)
  • Re: re: snortcenter/using a sensor with no ip address Erek Adams (Jun 26)
    • Re: re: snortcenter/using a sensor with no ip address Rodrigo Goya (Jun 26)
• trouble specifying more than one HOME_NET variable Philip Davidson (Jun 26)
  • Re: trouble specifying more than one HOME_NET variable Erek Adams (Jun 26)
  • Re: trouble specifying more than one HOME_NET variable James Lay (Jun 26)
• Alerts not Detected during Import? Dusty Hall (Jun 26)
  • Re: Alerts not Detected during Import? Erek Adams (Jun 26)
  • <Possible follow-ups>
  • Re: Alerts not Detected during Import? Dusty Hall (Jun 26)
    • Re: Alerts not Detected during Import? Erek Adams (Jun 26)
    • Re: Alerts not Detected during Import? Chris Green (Jun 26)
• hardware requirements Brei, Matt (Jun 26)
  • Re: hardware requirements Erek Adams (Jun 26)
    • Re: hardware requirements David Alonso De La Vega Tapage (Jun 26)
  • Re: hardware requirements David Alonso De La Vega Tapage (Jun 26)
  • <Possible follow-ups>
  • RE: hardware requirements Schmehl, Paul L (Jun 26)
• Snort How IDS Host Based Miguel Rosales (Jun 26)
  • Re: Snort How IDS Host Based Erek Adams (Jun 26)
• inbound alerts only David (Jun 26)
  • Re: inbound alerts only Stephen Dunn (Jun 26)
• sid 1882 stable Rule malfunctions in 2.0 Matthew McCarty (Jun 26)
  • Re: sid 1882 stable Rule malfunctions in 2.0 Erek Adams (Jun 26)
  • Re: sid 1882 stable Rule malfunctions in 2.0 Roy S. Rapoport (Jun 26)
    • Re: sid 1882 stable Rule malfunctions in 2.0 Rodrigo Goya (Jun 26)
      • Re: sid 1882 stable Rule malfunctions in 2.0 Roy S. Rapoport (Jun 26)
• short-circuiting rules Peter Moody (Jun 26)
  • Re: short-circuiting rules twig les (Jun 26)
  • Re: short-circuiting rules Chris Green (Jun 30)
• re: public snmp pass question lindsay . hunt (Jun 26)
  • Re: re: public snmp pass question Stephen Dunn (Jun 26)
• connection tracking Peter Moody (Jun 26)
• Re: add verbage about reading faq JP Vossen (Jun 26)
• DMZ and NAT Roelf Schreurs (Jun 27)
  • Re: DMZ and NAT Erek Adams (Jun 27)
• Collecting Snort statistics automatically Paul Gillingwater (Jun 27)
• encrypt barnyard connections Jochen Vogel (Jun 27)
  • Re: encrypt barnyard connections Joerg Weber (Jun 27)
  • <Possible follow-ups>
  • RE: encrypt barnyard connections Hutchinson, Andrew (Jun 27)
• Snort problem mshultz (Jun 27)
  • RE: Snort problem Faiz Ahmad Shuja (Jun 27)
  • RE: Snort problem Michael Steele (Jun 27)
  • Re: Snort problem Matt Kettler (Jun 27)
• RE: Snort-users digest, Vol 1 #3302 - 13 msgs edward . hawkins (Jun 27)
  • Re: RE: Snort-users digest, Vol 1 #3302 - 13 msgs Rodrigo Goya (Jun 27)
• jPgraph Jose Fernandes (IT) (Jun 27)
  • Multiple Barnyard questions Gordon Cunningham (Jun 27)
    • Re: Multiple Barnyard questions Andrew R. Baker (Jun 30)
• sid=1042 IIS view source via translate header Everist, Benjamin S. (NASWI) (Jun 27)
• snortcenter 1.0RC1 Todd Holloway (Jun 27)
  • Re: snortcenter 1.0RC1 Rodrigo Goya (Jun 27)
• RE: Snort-users digest, Vol 1 #3309 - 9 msgs Christian Tortorich (Jun 27)
  • Re: RE: Snort-users digest, Vol 1 #3309 - 9 msgs Erek Adams (Jun 27)
    • Re: RE: Snort-users digest, Vol 1 #3309 - 9 msgs Rich Adamson (Jun 28)
  • Re: RE: Snort-users digest, Vol 1 #3309 - 9 msgs Jeff Nathan (Jun 28)
• id check returned root ?!?! Michael D. Schleif (Jun 28)
  • Re: id check returned root ?!?! MH (Jun 28)
    • Re: id check returned root ?!?! james (Jun 28)
  • Re: id check returned root ?!?! Nicholas Delo (Jun 28)
    • Re: id check returned root ?!?! Michael D. Schleif (Jun 28)
      • Re: id check returned root ?!?! Frank Knobbe (Jun 28)
  • Re: id check returned root ?!?! Erek Adams (Jun 28)
    • Re: id check returned root ?!?! Michael D. Schleif (Jun 28)
      • Re: id check returned root ?!?! Erek Adams (Jun 28)
• RE: Snort 2.0 rc1 available McLaughlin, Andrew (Jun 29)
  • RE: Snort 2.0 rc1 available Joerg Weber (Jun 30)
• AW: encrypt barnyard connections Jochen Vogel (Jun 30)
• Problem using SnortCenter with Snort edward . hawkins (Jun 30)
  • Re: Problem using SnortCenter with Snort Mike Wohlgemuth (Jun 30)
• snort on smoothwall firewall.... Rigoberto De La Portilla (Jun 30)
• Snort and matching window size? James Lay (Jun 30)
  • Re: Snort and matching window size? Matt Kettler (Jun 30)
    • Re: Snort and matching window size? James Lay (Jun 30)
      • Re: Snort and matching window size? Chris Green (Jun 30)
• Re: var HOME_NET under Linux (fwd) Ciprian Badescu (Jun 30)
• MYSQL Administration & Data purging Vuppala, Vijaybhasker (EM, GECIS) (Jun 30)
  • Re: MYSQL Administration & Data purging Jon Baer (Jun 30)
  • Re: MYSQL Administration & Data purging Ciprian Badescu (Jun 30)
• statefulness Javier Verdu Mula (Jun 30)
• Rob Flentge/Mechanicsburg/US/Exel is out of the office. Rob . Flentge (Jun 30)
• question about a receive-only ethernet cable Scott Renna (Jun 30)
  • Re: question about a receive-only ethernet cable Frank Knobbe (Jun 30)
• Nemesis 1.4 beta3 released Jeff Nathan (Jun 30)
• license Question Sh J (Jun 30)
  • RE: license Question Michael Steele (Jun 30)
  • Re: license Question Matt Kettler (Jun 30)
• SQL Error - SQL=ROLLBACK Anthony Seung (Jun 30)
• Snort/ACID alerts for Nagios? Martin C. Walker (Jun 30)
• Snortcenter/acid references Martin C. Walker (Jun 30)
• Error on postgresql logging Dilan (Jun 30)