Snort: by author

• RSS Feed
• About List
• All Lists

Previous period

Next period

2165 messages starting Dec 11 03 and ending Oct 18 03
Date index | Thread index | Author index

이지훈

Problem !! Pass command doesn't work 이지훈 (Dec 11)

_ 0kita

Snort, mysql and sockets _ 0kita (Nov 04)

Aaron

RE: Attack on snort running in Public Zone Aaron (Nov 17)

Aaron Babalola

Testing My Snort DIDS Aaron Babalola (Oct 10)

Abe Froman

Snort not logging port scans Abe Froman (Dec 28)
Snort is not logging my port scans Abe Froman (Dec 28)

Abe Use

RE: RE: [Snort-users] Who doesn't care about virus rules, and why? Abe Use (Nov 07)

ACiD

Snort Alerting Question ACiD (Oct 30)

adam_peterson

MySQL Connection Dropping adam_peterson (Dec 12)
Re: -l parameter adam_peterson (Dec 09)
-l parameter adam_peterson (Dec 08)
Re: compiling snort with --mssql option adam_peterson (Nov 20)
Re: External Subnets adam_peterson (Nov 25)
RE: RE: [Snort-users] re: Snort 2.1.0 is now available! adam_peterson (Dec 18)
Re: exact phrase match adam_peterson (Dec 16)
re: http\_inspect alerts adam_peterson (Dec 31)
re: http\_inspect alerts adam_peterson (Dec 31)
Re: -l parameter adam_peterson (Dec 09)
Re: Snort-users digest, Vol 1 #3857 - 5 msgs adam_peterson (Dec 30)
re: Snort 2.1.0 is now available! adam_peterson (Dec 18)
External Subnets adam_peterson (Nov 25)
rules and the EXTERNAL_NET variable adam_peterson (Nov 26)
Re: ACID / ALERT console browsing issue adam_peterson (Nov 25)
re: oinkmaster adam_peterson (Dec 03)
arpspoof plug-in adam_peterson (Dec 04)
MySQL Disconnects adam_peterson (Nov 26)
Re: -l parameter adam_peterson (Dec 08)
Re: MySQL Disconnects/Mudpit adam_peterson (Nov 26)

Adams, Samuel (contractor)

RE: Problems with the ordering inside the rules Adams, Samuel (contractor) (Nov 06)
RE: MS03-043 Adams, Samuel (contractor) (Oct 25)

Adam Towarnyckyj

Snort Implementation Adam Towarnyckyj (Oct 07)

adam.w.hogan

RE: Visual Intrusion Analyzer Bugs, feedback, and a little background. adam.w.hogan (Oct 13)
RE: Time Based IDS Rules adam.w.hogan (Nov 18)
PCRE adam.w.hogan (Dec 19)
RE: Standalone threshold adam.w.hogan (Nov 13)
RE: Strange ICMP traffic. Perhaps a worm? adam.w.hogan (Dec 15)

aditya kilaru

compiling snort on windows aditya kilaru (Oct 25)

Admin

Rule to capture only packets with certain content/bytes Admin (Nov 30)

Adriel T. Desautels

Re: Demarc + Snort 2.0.4/5 Adriel T. Desautels (Nov 24)
Re: IDS ***Spoofed Message*** Adriel T. Desautels (Dec 29)
Re: *very* many snort installations.. Adriel T. Desautels (Dec 02)
Re: Problem installing Barnyard with mySQL support Adriel T. Desautels (Nov 24)
Greetings list, this is my first post. Adriel T. Desautels (Nov 24)

agnelo d

error: unknown keyword resp agnelo d (Dec 23)
snort: unknown keyword resp agnelo d (Dec 25)
error in webmin agnelo d (Dec 29)

Agnelo D'souza

error : unknown keyword resp Agnelo D'souza (Dec 26)

Alan Holmes

Testing tools Alan Holmes (Oct 17)

Albert Einstein

mysql-Problem Albert Einstein (Oct 07)

Alex Alborzfard

RE: Problem with web-iis rules Alex Alborzfard (Oct 13)

Alexander Hampel

Re: CyberKit 2.2 Ping, its driven me Nuts.. Alexander Hampel (Dec 29)

Alexander Schinner

Re: Compiling under Debian... Alexander Schinner (Nov 13)

Alexey Kuzmenko

Datagrams decoding problems Alexey Kuzmenko (Oct 27)
Spade logs Alexey Kuzmenko (Oct 20)
Spade plugin Alexey Kuzmenko (Oct 20)
Re: SNMP Support in FreeBSD Alexey Kuzmenko (Oct 24)
Re[2]: Datagrams decoding problems Alexey Kuzmenko (Oct 28)

Andreas Östling

Re: oinkmaster.conf enterred disablesid - get enbalbed Andreas Östling (Dec 16)
Re: New rules keyword error Andreas Östling (Oct 23)
Re: Rule files commented out with Oinkmaster Andreas Östling (Oct 29)
Re: oinkmaster Andreas Östling (Dec 03)
Oinkmaster v0.9 released. Andreas Östling (Dec 02)
Re: running oinkmaster - Error: unable to download..... Andreas Östling (Oct 30)
Re: Rules Andreas Östling (Dec 23)

Andrew R. Baker

Re: Help with barnyard. Andrew R. Baker (Oct 08)

Andrew Sergeyev

(no subject) Andrew Sergeyev (Dec 12)

Angelo . Fabiano

snort 2.0 architecture Angelo . Fabiano (Oct 10)

Antonio Costa

RE: -l parameter Antonio Costa (Dec 10)

aravind babu

Size of RAM required to run Snort aravind babu (Nov 24)
Porting of Snort on micro controller linux aravind babu (Nov 20)
Runtime memory problem with snort-inline 2.0.2 aravind babu (Dec 11)
Design Document of Snort aravind babu (Nov 21)

Arif OZGUR

Re: Snort-users digest, Vol 1 #3813 - 6 msgs Arif OZGUR (Dec 10)

Aryan D

Installation Problem Aryan D (Oct 28)
Installation Problem Aryan D (Oct 30)
Snort Upgrade and Flexresp Aryan D (Dec 30)
Thanks to Patrick Harper Aryan D (Nov 14)
Re: Configuration of Flexresp2 Aryan D (Nov 25)
Configuration of Flexresp2 Aryan D (Nov 24)
Re: snort rules update Aryan D (Nov 20)
Re: Installation Problem Aryan D (Oct 29)
Re: Installation Problem Aryan D (Oct 29)
Installation Problem Aryan D (Oct 30)
snort rules update Aryan D (Nov 16)

Atkins, Dwane P

Installing SnortCenter on a Windows 2000 machine Atkins, Dwane P (Nov 26)

attechni

Newbie Cant run rules and needs config help Please attechni (Nov 14)

auto17766

SNORT Fortune 1000 auto17766 (Dec 30)

Avinash K

unknown keyword resp Avinash K (Dec 28)
snort: unknown keyword resp Avinash K (Dec 28)

Bagwell, Steve

What is snort doing to the packets Bagwell, Steve (Oct 17)
What is snort doing to the packets Bagwell, Steve (Oct 17)

Bamm Visscher

Re: Program that reads unified log format natively Bamm Visscher (Oct 25)
Re: snort 2.1.0 does not compile on FreeBSD 4.8 Bamm Visscher (Dec 19)
Re: Announce: FLoP-1.0 --- Fast Logging Project for snort Bamm Visscher (Dec 02)
Re: sguil and barnyard errors Bamm Visscher (Oct 08)
Re: snort 2.1.0 compile issues Bamm Visscher (Dec 19)
Re: sguil.tk error Bamm Visscher (Dec 02)
Re: Snort / Barnyard error. Bamm Visscher (Oct 14)
sguil-0.3.0 Released Bamm Visscher (Oct 30)
Re: snort 2.1.0 does not compile on FreeBSD 4.8 Bamm Visscher (Dec 19)
Re: ACID alternative? Bamm Visscher (Oct 27)

Baxter, Anthony (ABAXTER)

RE: portscan traffic & acid Baxter, Anthony (ABAXTER) (Nov 07)

bcptaylor

Testing problem bcptaylor (Nov 24)

bdushok

HP Printers - SNMP Public Access udp bdushok (Nov 18)
NMAP alerts bdushok (Dec 03)

Bell, Josh

Snort on home DSL connection Bell, Josh (Dec 24)
RE: Snort on home DSL connection Bell, Josh (Dec 28)

Ben Nelson

Re: Snort logging to encrypted MySQL (ssl) server? Ben Nelson (Nov 04)
Re: ACID Email alerts Ben Nelson (Oct 31)
Program that reads unified log format natively Ben Nelson (Oct 22)
Re: Program that reads unified log format natively Ben Nelson (Oct 29)
Re: MySQL Disconnects Ben Nelson (Nov 26)

Bennett Todd

Re: Choosing Linux Platform for a Snort deployment Bennett Todd (Dec 29)
Re: New Version Bennett Todd (Dec 18)
Re: Rogue DHCP servers Bennett Todd (Oct 31)

Benny Late

New Snort User Benny Late (Dec 31)

Bernard Duclot

generic bpf_rules_file Bernard Duclot (Nov 03)

Bill Kaminski

Ref Error 1067 Bill Kaminski (Nov 07)

Billy Wright

RE: Barnyard Acid MySQL problem SOLVED Billy Wright (Nov 06)
Barnyard Acid MySQL problem Billy Wright (Nov 06)

Blake.Fithen

ID'ing loopback spoof Blake.Fithen (Dec 30)

bluerain () pandora be

Logging to database and not to log directory bluerain () pandora be (Oct 04)

bmcdowell

RE: Attack on snort running in Public Zone bmcdowell (Nov 18)
RE: Is it really a HUB? bmcdowell (Nov 28)
RE: Nmap bmcdowell (Nov 19)
RE: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. bmcdowell (Dec 31)

Bob Apthorpe

(no subject) Bob Apthorpe (Oct 28)

Bob Fudge

Database logging question Bob Fudge (Oct 28)

Bob Walder

RE: Fallacies and lies. Bob Walder (Nov 05)
RE: Fallacies and lies. Bob Walder (Nov 05)
RE: [Fwd: Re: tippingpoint] Bob Walder (Oct 17)
RE: How much can SNORT handle?? Bob Walder (Nov 17)
RE: Fallacies and lies. Bob Walder (Nov 06)

boka

snort 2.0.3 on redhat 7.0 - seg. fault boka (Nov 05)
Re: 2.0.3 strange problems boka (Nov 06)
Re: Snort logging to encrypted MySQL (ssl) server? boka (Nov 06)

Bosse Klykken

Suspected DoS: BAD TRAFFIC loopback traffic Bosse Klykken (Nov 18)

BOUDON Franck TRANSPAC

Snort statistics in deamon mode BOUDON Franck TRANSPAC (Nov 05)

Bradberry, John

Suppression how-to help Bradberry, John (Dec 23)

Brad dev account

I need sensor volunteers Brad dev account (Oct 08)

Brei, Matt

Ignored XXX Duplicate alerts Brei, Matt (Oct 06)

Brian

Re: PCRE plugin for exact phrase match Brian (Dec 19)
Re: Rule SID 1325 Brian (Nov 06)
Re: Office application cause false Nachi signature Brian (Dec 12)
Re: flags SYN question... Brian (Dec 05)
Re: exact phrase match Brian (Dec 15)
Re: Performance again Brian (Dec 23)
Re: Snort Sensor Hardware Brian (Dec 10)
Re: bad frag bits Brian (Nov 25)
Re: No alert_smb in 2.1.0? Brian (Dec 20)
Re: exact phrase match Brian (Dec 16)
Re: Problems with the ordering inside the rules Brian (Nov 06)
Re: PCRE Brian (Dec 19)
Re: Rule to capture only packets with certain content/bytes Brian (Nov 30)

Brian A Kee

Re: [Snort-sigs] anyone have a good Swen sig Brian A Kee (Nov 03)
stream4: logging characteristics Brian A Kee (Nov 14)

Brian Blake

Version 2.1.0 -u switch Brian Blake (Dec 19)

Brian . Cook

Re: Snort and L2 Cache Brian . Cook (Dec 04)

brian . denicola

Brian Denicola/US/ABNAMRO/NL is out of the office. brian . denicola (Oct 06)

Brian F. Vaughan

RE: Re: SCAN UPnP service discover attempt Brian F. Vaughan (Dec 30)

Brian Laing

RE: tippingpoint Brian Laing (Oct 15)

Brian Toovey

ERROR: ERROR /snortcenter/rules/snort.eth0.conf (88): Bad arguments to byte_test: Brian Toovey (Dec 19)
Re: ERROR: ERROR /snortcenter/rules/snort.eth0.conf (88): Bad arguments to byte_test: Brian Toovey (Dec 20)

Brice B

Re: WinSnort and MSSQL Problem Brice B (Dec 30)
Thresholding the Cyberkit ICMP Ping rule Brice B (Dec 30)

Bright, Mark IT2

RE: MYSQL Error on Windows XP snort install Bright, Mark IT2 (Dec 02)
RE: MYSQL Error on Windows XP snort install Bright, Mark IT2 (Dec 02)
RE: Snort logging problem Bright, Mark IT2 (Nov 21)
RE: snort DB error.... Bright, Mark IT2 (Oct 27)
RE: MYSQL Error on Windows XP snort install Bright, Mark IT2 (Dec 02)
RE: MYSQL Error on Windows XP snort install Bright, Mark IT2 (Dec 03)
Snort MySQL logging error... Bright, Mark IT2 (Oct 28)

Bruyere, Michel

basic question using idscenter Bruyere, Michel (Nov 12)

Bryan Irvine

Re: looking into SNORT Bryan Irvine (Nov 05)
Re: postgresql backend Bryan Irvine (Dec 02)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Bryan Irvine (Dec 29)
RE: CyberKit 2.2 Ping, its driven me Nuts.. Bryan Irvine (Dec 29)
multiple ports in rule Bryan Irvine (Dec 17)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Bryan Irvine (Dec 29)

Bryan Oser

New Blaster variant? Bryan Oser (Oct 28)
RE: Spam:Re: New Blaster variant? Bryan Oser (Oct 29)

Bryan Taylor

Testing problem, slow Bryan Taylor (Nov 24)

Bryce Stenberg

Can Snort report on 'late collisions'? Bryce Stenberg (Nov 24)
Re: Can Snort report on 'late collisions'? Bryce Stenberg (Nov 25)

Cabrera, Nestor (Contractor)

Monitoring traffic on 2 Interfaces Cabrera, Nestor (Contractor) (Nov 21)

Carpenter, Scott (OCTO)

Xml output plugin for Win32 Carpenter, Scott (OCTO) (Nov 13)

cat thrasher

snort and suse 7.3 cat thrasher (Nov 20)

cbit ian

snort drop rate cbit ian (Nov 17)

cc

Re: Acid + Snort integration cc (Oct 27)
snort and mysql cc (Oct 27)
Re: ACID Graphs cc (Nov 21)

ccidsh-snort . org

Home nets and pruning my alerts ccidsh-snort . org (Oct 15)

Cedric Foll

Supress creation of directories by ip Cedric Foll (Dec 18)
[Fwd: RE: Problem with compiling snort] Cedric Foll (Dec 02)
Re: [Fwd: RE: Problem with compiling snort] Cedric Foll (Dec 02)

CGhercoias

RE: Acid access problem! CGhercoias (Dec 19)
RE: Strange ICMP traffic. Perhaps a worm? CGhercoias (Dec 15)
RE: Snort Sensor Hardware CGhercoias (Dec 10)
RE: Snort Sensor Hardware CGhercoias (Dec 10)
RE: W32/Yaha-Y Worm CGhercoias (Dec 18)
RE: Rules CGhercoias (Dec 23)
Unknown Datagram decoding problem! CGhercoias (Oct 08)
RE: W32/Yaha-Y Worm CGhercoias (Dec 18)
ARP poisoning and sniffing in a Switched Network CGhercoias (Dec 17)
(no subject) CGhercoias (Dec 01)
RE: CyberKit 2.2 Ping, its driven me Nuts.. CGhercoias (Dec 29)

Chad Gross - Loretel

Strange Loopback Traffic Chad Gross - Loretel (Oct 07)

Chhabria, Kavita - Apogent

How does snort do packet signature detection? Chhabria, Kavita - Apogent (Oct 02)
What are the differences between and IPS and IDS? Chhabria, Kavita - Apogent (Oct 01)
How do you start and stop a sensor from snortcenter management co nsole? Chhabria, Kavita - Apogent (Oct 02)
Is there a separate mailing list for snortcenter related question s? Chhabria, Kavita - Apogent (Oct 02)
Why does log_acid_db not work? Chhabria, Kavita - Apogent (Oct 09)
Help with barnyard. Chhabria, Kavita - Apogent (Oct 08)
Can we send email using Outlook as the smtp server with ACID? Chhabria, Kavita - Apogent (Oct 06)

Chris Feldmann

snort books Chris Feldmann (Oct 05)
Re: mysql.sock Chris Feldmann (Oct 03)
mysql.sock Chris Feldmann (Oct 02)

Chris Garringer

Compiling 2.0.3 (and 2.0.2) on Solaris 9 sparc Chris Garringer (Nov 04)

Chris Green

Re: alert_unified only Chris Green (Oct 01)
Re: spp_rpc_decode Chris Green (Dec 06)
Snort 2.0.3 Chris Green (Nov 04)
Re: Problem with "Established" keyword Chris Green (Dec 18)
Re: Snort with IPSec Chris Green (Nov 04)
Re: Rule to exclude a specific IP in Snort Chris Green (Oct 09)
Re: Datagrams decoding problems Chris Green (Oct 27)
Re: Program that reads unified log format natively Chris Green (Oct 25)
Re: Can Snort do this? Chris Green (Oct 20)
Re: New rules keyword error Chris Green (Oct 24)
Re: More explanation needed in Snort User Manual for "resp:"? Chris Green (Nov 06)
Re: SNMP Support in FreeBSD Chris Green (Oct 22)
Re: Patch submission Chris Green (Oct 28)
Re: Problem with "Established" keyword Chris Green (Dec 17)
Snort 2.0.4 Chris Green (Nov 06)
Re: snort tcpdump binary file mirroing over network. Chris Green (Oct 24)
Re: question about TAG Chris Green (Nov 13)
Re: New rules keyword error Chris Green (Oct 24)
Re: acid, sig_priority Chris Green (Dec 02)
Re: AW: Snort 2.0.4 and threshold Chris Green (Nov 12)
Re: AW: Snort 2.0.4 and threshold Chris Green (Nov 13)
New Email Address for cmg and other changes Chris Green (Nov 18)
Re: OT: Spam Mail on List? Chris Green (Oct 27)
Re: Monitor multiple VLANs Chris Green (Oct 16)
Re: packets sent to OWN IP Chris Green (Nov 17)
Re: OT: Spam Mail on List? Chris Green (Oct 27)
Re: Rule to exclude a specific IP in Snort Chris Green (Oct 09)
Re: OT: Spam Mail on List? Chris Green (Oct 27)
Re: Other patches I've not seen Chris Green (Nov 06)

Chris Hoover

Newbie question on gnutella rule Chris Hoover (Dec 13)

Chris Keladis

Re: -l parameter Chris Keladis (Dec 08)
Re: Any good tool for generating nice reports off a years worth of snort syslog data? Chris Keladis (Dec 03)

Chris N

SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Chris N (Dec 31)
CyberKit 2.2 Ping, its driven me Nuts.. Chris N (Dec 29)

Chris Reid

Re: Compilation of Snort 2.0.2 in debug mode fails Chris Reid (Oct 19)
RE: WinSnort and MSSQL Problem Chris Reid (Dec 30)

christian graf

Re: Snortsam / Portscanning Detection christian graf (Dec 31)
passive tap christian graf (Dec 02)
snort 2.0.5 --with-mysql on a debian-system christian graf (Nov 30)

Christopher Kruegel

Announcement: Alert Verification for Snort Christopher Kruegel (Oct 28)

Christopher Lewis

Re: Problem installing Barnyard with mySQL support Christopher Lewis (Nov 25)
Wireless: Rules & Classification Christopher Lewis (Nov 18)

Ciprian Badescu

Re: snort installation error Ciprian Badescu (Nov 04)

Cluett, Russell

Problem: Unknown ClassType Cluett, Russell (Oct 22)
(no subject) Cluett, Russell (Oct 22)
Snort install error finding mysql.h Cluett, Russell (Oct 28)

CMartin

RE: Snort-MySQL problem CMartin (Oct 01)
RE: CyberKit 2.2 Ping, its driven me Nuts.. CMartin (Dec 29)
RE: Snort-MySQL problem CMartin (Oct 02)
FW: (http\_inspect) NON-RFC DEFINED CHAR CMartin (Dec 30)
RE: http\_inspect alerts CMartin (Dec 31)
RE: (http\_inspect) NON-RFC DEFINED CHAR CMartin (Dec 30)
RE: Snor logging to mysql with no ip on monitored i nterface CMartin (Dec 31)
RE: re: http\_inspect alerts CMartin (Dec 31)
RE: Snort 2.1 Problems with unicode.map CMartin (Dec 29)

corinth

Re: Question about negated and non-negated variable s in rules corinth (Nov 28)

Costas Magos

session output Costas Magos (Nov 03)
Re: session output Costas Magos (Nov 05)
Re: session output Costas Magos (Nov 04)
Re: session output Costas Magos (Nov 04)

Craig Paterson

Re: snort idmef plugin Craig Paterson (Dec 01)
Re: MySQL Issues. Craig Paterson (Nov 06)
Re: Is it really a HUB? Craig Paterson (Oct 24)
Re: Attack on snort running in Public Zone Craig Paterson (Nov 18)

Cristiano Deana

Re: Building snort 2.0.3 on FreeBSD 4,8 Cristiano Deana (Nov 06)

Crowell, Gary

rule in web-iis.rules causes snort 2.0.0 to die Crowell, Gary (Dec 30)

crtech

Re: Attack on snort running in Public Zone crtech (Nov 18)
Attack on snort running in Public Zone crtech (Nov 20)

Damiano Bolzoni

How to stop snort? Damiano Bolzoni (Nov 21)
How to log on MySql Damiano Bolzoni (Nov 21)
Logging portscan on database Damiano Bolzoni (Nov 24)
Snort logging problem Damiano Bolzoni (Nov 21)
Fast log but with payload size Damiano Bolzoni (Dec 05)
Using Snort as IDS + packet logger Damiano Bolzoni (Oct 15)

Dan

plain text in content option triggering false alerts Dan (Dec 13)
PCRE plugin for exact phrase match Dan (Dec 18)
exact phrase match Dan (Dec 15)
Re: exact phrase match Dan (Dec 18)

Dan Ferris

MYSQL Error Dan Ferris (Dec 19)

Daniel A. Melo

Re: ACID - PHP Daniel A. Melo (Dec 18)

Daniel Bartlett

Snort log format? Daniel Bartlett (Oct 31)
Format of Snort logs? Daniel Bartlett (Oct 29)
Format of Snort logs? Daniel Bartlett (Oct 29)

Daniel Guido

bittorrent generating alerts Daniel Guido (Nov 06)

Daniél Haslinger

Re: Compiling 2.0.3 (and 2.0.2) on Solaris 9 sparc Daniél Haslinger (Nov 05)
SnortCenter can't control Snort Daniél Haslinger (Nov 05)
Re: OT: Spam Mail on List? Daniél Haslinger (Oct 27)
[Snort-Users] Patching Snort with SnortSAM Daniél Haslinger (Oct 19)

Daniel Wittenberg

RE: mysql-Problem Daniel Wittenberg (Oct 07)
Re: RPM config Daniel Wittenberg (Oct 29)
Re: Snort.org packages with bad sigs? Daniel Wittenberg (Oct 07)
Re: Snort 2.0.4 Daniel Wittenberg (Nov 06)
Re: Snort-2.0.2-5.src.rpm bad MD5 digest Daniel Wittenberg (Oct 10)
Re: How to install oinkmaster-0.8? Daniel Wittenberg (Oct 07)
RE: mysql-Problem Daniel Wittenberg (Oct 07)
Re: Installation problem with snort. Daniel Wittenberg (Oct 06)
Re: rpm installation mysql support Daniel Wittenberg (Dec 16)

Darryl Luff

Re: Is it really a HUB? Darryl Luff (Oct 28)

Dave Ellingsberg

Re: Problem with compiling snort Dave Ellingsberg (Dec 05)

Dave . Hartley

(no subject) Dave . Hartley (Oct 15)

dave kleiman

RE: Announcement: Visual Intrusion Analyzer (Beta Release) dave kleiman (Oct 10)

Dave Lewis

Re: Snort/Logsnorter/PureSecure Cisco ACL's Dave Lewis (Nov 21)
Snort/Logsnorter/PureSecure Cisco ACL's Dave Lewis (Nov 13)

David Alonso De La Vega Tapage

Re: Help David Alonso De La Vega Tapage (Dec 10)
Re: How to get an answer to your question(s) David Alonso De La Vega Tapage (Oct 10)

David DeCoster

Re: Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
Re: Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 05)

David Durocher

Unable to open rules file: reference.config or ./reference.config Fatal Error, Quitting.. David Durocher (Oct 31)

David Gianndrea

Anybody using the react keyword in 2.1? David Gianndrea (Dec 31)

David Newsom

ACID & MySQL (Sensor) David Newsom (Dec 15)
FW: Snortsnarf: First_Last undefined David Newsom (Dec 11)
RE: ACID & MySQL (Sensor) David Newsom (Dec 15)

David Omar Ortega Aranda

welchia rule David Omar Ortega Aranda (Nov 04)

David R.

output plugins... execute command? David R. (Nov 05)

David Stubblefield

RE: XML Plugins David Stubblefield (Nov 03)

DeBerry, Casey

RE: a couple of questions DeBerry, Casey (Dec 11)
RE: Using snort for network stats? DeBerry, Casey (Oct 28)

Demetri Mouratis

Re: Mac Adresses in Acid Screens Demetri Mouratis (Oct 10)
Re: Can we send email using Outlook as the smtp server with ACID? Demetri Mouratis (Oct 06)
RE: Mac Adresses in Acid Screens Demetri Mouratis (Oct 10)
Re: Testing tools Demetri Mouratis (Oct 18)
Re: running snort under LIDS Demetri Mouratis (Dec 18)

Denny Page

Trigger of multiple rules Denny Page (Oct 03)
Re: Portscan log file consolidation. Denny Page (Oct 29)

Derek Fairley

Snort 2.0.2 install location Derek Fairley (Oct 07)

Derek (X-Networks)

Upgrading Snort 2.0.2 to 2.0.5 Derek (X-Networks) (Nov 23)

Derrenbacker, L. Jonathan

Same SRC/DST 127.0.0.1 Derrenbacker, L. Jonathan (Nov 11)

/dev/null

OT but security related - world wide VPN /dev/null (Nov 28)
snort inline behavior /dev/null (Nov 25)
Re: snort inline && current rules. /dev/null (Nov 25)
Re: snort inline && current rules. /dev/null (Nov 25)
snort inline && current rules. /dev/null (Nov 25)
Re: snort inline behavior /dev/null (Nov 26)
Re: snort inline behavior /dev/null (Nov 26)

Dingo

RE: looking into SNORT Dingo (Nov 05)

Dirk Geschke

Re: [Snort-devel] To discuss: FLoP and missing database (fwd) Dirk Geschke (Dec 10)
Re: Snort deamon mode packet drop's statistic Dirk Geschke (Dec 11)
Re: ICMP REDIRECT HOST Dirk Geschke (Nov 29)
Re: snort-mysql, logging on TWO sql servers Dirk Geschke (Nov 29)
Re: starting snort-Mysql on Mandrake 9.2 Dirk Geschke (Dec 10)
Re: -l parameter Dirk Geschke (Dec 08)
Re: Slightly OT: high speed packet generation software Dirk Geschke (Dec 02)
RE: Passive Tap Help Dirk Geschke (Dec 01)
Re: Snort and L2 Cache Dirk Geschke (Dec 04)
Re: Announce: FLoP-1.0 --- Fast Logging Project for snort Dirk Geschke (Dec 02)
Re: -l parameter Dirk Geschke (Dec 10)
Re: snort 2.1.0 + OpenBSD = no compile Dirk Geschke (Dec 30)
Re: Announce: FLoP-1.0 --- Fast Logging Project for snort Dirk Geschke (Nov 28)
Re: src/snortman.tex Dirk Geschke (Dec 11)
Re: Snort deamon mode packet drop's statistic Dirk Geschke (Dec 11)
Announce: FLoP-1.0 --- Fast Logging Project for snort Dirk Geschke (Nov 28)
Re: Remote NIDS Dirk Geschke (Dec 11)
New version of FLoP: 1.0.6 Dirk Geschke (Dec 16)
Re: Snort deamon mode packet drop's statistic Dirk Geschke (Dec 11)
Re: Snort logging to encrypted MySQL (ssl) server? Dirk Geschke (Nov 05)
To discuss: FLoP and missing database Dirk Geschke (Dec 09)
Re: Announce: FLoP-1.0 --- Fast Logging Project for snort (fwd) Dirk Geschke (Dec 02)
Re: Database output Dirk Geschke (Dec 11)
Re: Libnet make fatal error Dirk Geschke (Nov 14)
Re: Database output Dirk Geschke (Dec 11)
Re: mysql.sock not found Dirk Geschke (Dec 04)

Dirk Sachse

unknown preprocessor "http_inspect" Dirk Sachse (Dec 15)

Divyang Desai

Re: exact phrase match Divyang Desai (Dec 15)

dlbox

RE: Snort on OpenBSD -- finding mysqlclient library dlbox (Dec 04)
Re: CyberKit 2.2 Ping, its driven me Nuts.. dlbox (Dec 29)
Snort 2.0.4 on OpenBSD 3.4 is dropping packets dlbox (Nov 17)
Snort on OpenBSD -- finding mysqlclient library dlbox (Dec 04)

dlewis

LogSnorter and Cisco router dlewis (Nov 11)

dlucio

Trafic Filtering dlucio (Nov 24)

Donna dm87

Re: RES: Newbie Question on using snort Donna dm87 (Nov 12)
os x single user Donna dm87 (Nov 15)

Donofrio, Lewis

RE: snort tcpdump binary file mirroing overnetwork. Donofrio, Lewis (Oct 29)

doug

Slightly OT: high speed packet generation software doug (Dec 01)

Douglas McCrea

RE: Monitor multiple VLANs Douglas McCrea (Oct 16)

Dragos Ruiu

CanSecWest/core04 Really Really Last CFP Dragos Ruiu (Dec 17)
Re: Snort Kernel Module Dragos Ruiu (Oct 07)
Re: snort rules update Dragos Ruiu (Nov 17)
Re: Re: [Snort-devel] IDS vs IPS Dragos Ruiu (Oct 15)
Re: Why are splay trees used in the preprocessors? Dragos Ruiu (Nov 23)
CanSecWest/core04 Call For Papers Dragos Ruiu (Oct 30)

Dr. EDV

snort and mysql socket error Dr. EDV (Oct 20)

Duke Ionescu

Re: Snort Machines Duke Ionescu (Nov 14)

dunervst

Problem with compiling snort dunervst (Dec 02)
Problem with compiling snort dunervst (Dec 03)
Re: Snort-users digest, Vol 1 #3790 - 8 msgs dunervst (Dec 03)
Problem with compiling snort dunervst (Dec 02)

Dusty Hall

Span Port to Fiber Tap Problems Dusty Hall (Oct 20)
RE: Snort -> Mysql formatting IP addresses Dusty Hall (Oct 16)
RE: Span Port to Fiber Tap Problems Dusty Hall (Oct 23)

dvid johnson

RPM config dvid johnson (Oct 29)

Ed Callahan

rules with flow:established not working Ed Callahan (Oct 24)
RE: rules with flow:established not working Ed Callahan (Oct 24)
flow:established not working Ed Callahan (Oct 24)
RE: rules with flow:established not working Ed Callahan (Oct 25)
RE: rules with flow:established not working Ed Callahan (Oct 24)
RE: -l parameter Ed Callahan (Dec 09)
RE: rules with flow:established not working Ed Callahan (Oct 24)
RE: -l parameter Ed Callahan (Dec 09)

Edin Dizdarevic

Performance again Edin Dizdarevic (Dec 23)
Re: problem with PerfMonitor Edin Dizdarevic (Oct 06)
Re: SNORT/LIBPCAP Edin Dizdarevic (Nov 20)
Re: ICMP Time-To-Live Exceeded in Transit Edin Dizdarevic (Dec 23)
Re: Snort 2.0.4 CPU Utilization\Optimization Edin Dizdarevic (Nov 21)
Re: Snort-MySQL problem Edin Dizdarevic (Oct 01)
Re: perfmonitor Edin Dizdarevic (Oct 26)
Re: Increase performance with filter or pass-rules Edin Dizdarevic (Nov 21)
Re: Snort restart? Edin Dizdarevic (Dec 29)
Re: Performance again Edin Dizdarevic (Dec 23)
Re: Snort 2.0.4 CPU Utilization\Optimization Edin Dizdarevic (Nov 21)
Re: Re: [Snort-sigs] A tool like swatch Edin Dizdarevic (Nov 05)
Re: ICMP / drop. Edin Dizdarevic (Oct 09)
Re: Performance again Edin Dizdarevic (Dec 23)
Re: Snort-MySQL problem Edin Dizdarevic (Oct 01)
Re: Dropping packets why? Edin Dizdarevic (Oct 27)
Re: SWATCH or a program to send the alerts to my mail! Edin Dizdarevic (Dec 29)
Re: Performance again Edin Dizdarevic (Dec 23)
Re: ICMP / drop. Edin Dizdarevic (Oct 09)
Re: Fallacies and lies. Edin Dizdarevic (Nov 05)
Re: Improving overall performance of snort and stopping those drops Edin Dizdarevic (Nov 05)
net.ipv4.ipfrag_time for Windows (and other OSs as well) Edin Dizdarevic (Nov 27)
Re: ICMP Time-To-Live Exceeded in Transit Edin Dizdarevic (Dec 23)
Re: Snort 2.0.4 CPU Utilization\Optimization Edin Dizdarevic (Nov 21)

edmund . li

Installation of Snort Sensor edmund . li (Oct 30)
Re: Installation of Snort Sensor edmund . li (Nov 02)
snort installation error edmund . li (Nov 03)

Ed Smith

Top rules Ed Smith (Dec 12)

Edwin Beekman

RE: OT: Spam Mail on List? Edwin Beekman (Oct 26)

Egal A Egal - SA

Wipe out Snort database Egal A Egal - SA (Oct 04)
Upgrading to Snort 2.0.2 or 2.0.3 Egal A Egal - SA (Nov 04)

Elena Escolano Torner

WEB-MISC ?open access Elena Escolano Torner (Dec 17)

Elijah Savage

Not Picking up Much WHY "I am pulling out my hair" Elijah Savage (Oct 12)
RE: Not Picking up Much WHY "I am pulling out myhair" Elijah Savage (Oct 13)
Dropping packets why? Elijah Savage (Oct 25)
Office application cause false Nachi signature Elijah Savage (Dec 11)
RE: Dropping packets why? Elijah Savage (Oct 27)
RE: Dropping packets why? Elijah Savage (Oct 27)
RE: Time and Date off Elijah Savage (Oct 14)
Time and Date off Elijah Savage (Oct 14)
RE: Dropping packets why? Elijah Savage (Oct 27)
RE: Not Picking up Much WHY "I am pulling outmyhair" Elijah Savage (Oct 13)
RE: Dropping packets why? Elijah Savage (Oct 27)

Erek Adams

Re: mysql.sock Erek Adams (Oct 02)
Re: New rules keyword error Erek Adams (Oct 22)
Re: New rules keyword error Erek Adams (Oct 22)
Re: Naming the Sensors in a multiple interface sensor Erek Adams (Oct 09)
Re: Snort 2.0.2 install location Erek Adams (Oct 07)
Re: FW: Rule to exclude a specific IP in Snort Erek Adams (Oct 16)
RE: rules with flow:established not working Erek Adams (Oct 24)
Re: Snort Startup Erro - "libmysqlclient.so.12 not found" Erek Adams (Oct 16)
Re: snort 2.0.3 on redhat 7.0 - seg. fault Erek Adams (Nov 05)
Re: error starting snort!! Erek Adams (Oct 10)
Re: Snort with Mysql Erek Adams (Oct 22)
Re: Snort.conf variables Erek Adams (Nov 11)
Re: no payload on ppp0 Erek Adams (Oct 24)
Re: Troubles With Multiple Sensors Erek Adams (Oct 24)
Re: PLEASE CC ME Erek Adams (Nov 08)
Re: heavily switched networks Erek Adams (Dec 24)
Re: where I configure my rules ? Erek Adams (Oct 16)
Re: rules with flow:established not working Erek Adams (Oct 24)
Re: how to convert payload data from MySQL data table to tcpdump formated data? Erek Adams (Oct 22)
Re: snort tcpdump binary file mirroing over network. Erek Adams (Oct 24)
Re: snort and sflow? Erek Adams (Oct 22)
Re: Troubles With Multiple Sensors Erek Adams (Oct 24)
Re: session output Erek Adams (Nov 04)
RE: SNMP Support in FreeBSD Erek Adams (Oct 22)
Re: NETBIOS nimda.eml Erek Adams (Oct 22)
RE: mysql.sock Erek Adams (Oct 03)
Re: alert_unified only Erek Adams (Oct 05)
Re: Problem with web-iis rules Erek Adams (Oct 10)
Re: Can Snort do this? Erek Adams (Oct 16)
RE: rules with flow:established not working Erek Adams (Oct 24)
Re: Snort on home DSL connection Erek Adams (Dec 25)
Re: Upgrading to Snort 2.0.2 or 2.0.3 Erek Adams (Nov 05)
How to get an answer to your question(s) Erek Adams (Oct 09)
Re: Remote Syslog... Erek Adams (Oct 07)
Re: Snort fails to dump alerts to Solaris 8 Syslog Erek Adams (Oct 07)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Erek Adams (Oct 12)
Re: Archive Erek Adams (Nov 05)
Snort 2.1.0 + Solaris issues Erek Adams (Dec 21)
RE: Problem with snort 2.1.0 and redhat 9 Erek Adams (Dec 24)
RE: Program that reads unified log format natively Erek Adams (Oct 24)
Re: heavily switched networks Erek Adams (Dec 24)
Re: alert_unixsock Erek Adams (Oct 16)
Re: alert_unixsock Erek Adams (Oct 22)
Re: Problem with snort 2.1.0 and redhat 9 Erek Adams (Dec 24)
Re: Compiling 2.0.3 (and 2.0.2) on Solaris 9 sparc Erek Adams (Nov 04)
Re: How to get an answer to your question(s) Erek Adams (Oct 24)
Re: EXTERNAL_NET definition in Snort Erek Adams (Oct 09)

eric johnson

See only code for php.test eric johnson (Nov 26)
help shut this line up: can't find httpd.h eric johnson (Nov 19)

Eric Knight

Re: Visual Intrusion Analyzer Bugs, feedback, and a little background. Eric Knight (Oct 11)
Visual Intrusion Analyzer Bugs, feedback, and a little background. Eric Knight (Oct 11)
Announcement: Visual Intrusion Analyzer (Beta Release) Eric Knight (Oct 09)
VIA and suggestions... Eric Knight (Oct 14)

Eric Van den Bossche

Eric Van den Bossche is out of the office. Eric Van den Bossche (Oct 13)

Erik Norman

XEXCH50 evasion rule parse problems? Erik Norman (Dec 03)

Erik Nyman

RE: Snort not running Erik Nyman (Nov 10)
RE: Snort not running Erik Nyman (Nov 10)
TCP header length exceeds packet length Erik Nyman (Nov 03)
TCP header length exceeds packet length Erik Nyman (Nov 03)
var HTTP_PORTS and new rules Erik Nyman (Nov 18)

Ernie Lim

RE: OT: Spam Mail on List? Ernie Lim (Oct 27)
copious (snort_decoder) WARNING: Not IPv4 datagram! Ernie Lim (Oct 27)
demarc/puresecure plugins? Ernie Lim (Oct 28)
demarc/puresecure plugins? Ernie Lim (Oct 25)
RE: copious (snort_decoder) WARNING: Not IPv4 datagram! Ernie Lim (Oct 27)

Erwin Van de Velde

Re: External Subnets Erwin Van de Velde (Nov 25)
Re: Database output Erwin Van de Velde (Dec 11)
Re: Bad Traffic, Port 0 Erwin Van de Velde (Dec 25)
Re: SHELLCODE Attacks Erwin Van de Velde (Dec 05)
Re: Database output Erwin Van de Velde (Dec 11)
Re: Acid access problem! Erwin Van de Velde (Dec 19)
Database output Erwin Van de Velde (Dec 10)
Re: Logging portscan on database Erwin Van de Velde (Nov 24)
perfmonitor Erwin Van de Velde (Oct 25)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Erwin Van de Velde (Dec 29)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Erwin Van de Velde (Dec 29)
[Off topic] Traffic analysis Erwin Van de Velde (Dec 05)
Re: ICMP Time-To-Live Exceeded in Transit Erwin Van de Velde (Dec 23)
Snort + Postgresql on Windows Erwin Van de Velde (Nov 10)
Re: Database output Erwin Van de Velde (Dec 11)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Erwin Van de Velde (Dec 29)
Thresholding Erwin Van de Velde (Nov 22)
ICMP Time-To-Live Exceeded in Transit Erwin Van de Velde (Dec 23)
ICMP Time-To-Live Exceeded in Transit Erwin Van de Velde (Dec 20)

esavage

RE: Not Picking up Much WHY "I am pulling out myhair" esavage (Oct 13)
RE: Not Picking up Much WHY "I am pulling out myhair" esavage (Oct 13)

Esler, Joel - Contractor

RE: Nmap Esler, Joel - Contractor (Nov 17)

Everist, Benjamin S. (NASWI)

RE: SnortSnarf in Windows Everist, Benjamin S. (NASWI) (Oct 07)

Fabio A. Bicudo Duarte

Snort Rules Fabio A. Bicudo Duarte (Nov 04)

Fernsebner Christian

Snort on PPP Adapter / Win32 Fernsebner Christian (Oct 24)

Finney Charles E

Re: [Snort-Users] Is it really a HUB? Finney Charles E (Nov 26)

fkseow

Snort - ACID Displays NO data on IE fkseow (Oct 06)

Frank Barton

Syn-Flood Frank Barton (Nov 12)

Frank Knobbe

Re: alert_unixsock Frank Knobbe (Oct 16)
Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
Re: Snort with IPSec Frank Knobbe (Nov 04)
Re: Blocking attacking IP address for some time using Snort and PIX Frank Knobbe (Oct 04)
Re: Snort, Mysql purging Frank Knobbe (Dec 10)
RE: Passive Tap Help Frank Knobbe (Dec 01)
Re: Passive Tap Help Frank Knobbe (Dec 01)
Re: New rules keyword error Frank Knobbe (Oct 23)
RE: Passive Tap Help Frank Knobbe (Dec 01)
Re: No alert_smb in 2.1.0? Frank Knobbe (Dec 20)
Re: RE: BAD-TARFFIC Loopback traffic Frank Knobbe (Oct 29)
Re: postgresql backend Frank Knobbe (Dec 02)
Re: [Snort-Users] Patching Snort with SnortSAM Frank Knobbe (Oct 19)
Re: Passive Tap Help Frank Knobbe (Dec 01)
Re: Strange Loopback Traffic Frank Knobbe (Oct 07)
Re: Re[2]: Strange Loopback Traffic Frank Knobbe (Oct 10)
Re: Snort log format? Frank Knobbe (Oct 31)
RE: Passive Tap Help Frank Knobbe (Dec 03)
RE: Passive Tap Help Frank Knobbe (Dec 01)
RE: Passive Tap Help Frank Knobbe (Dec 01)
Re: tippingpoint] Frank Knobbe (Oct 17)
Re: Snort logging to encrypted MySQL (ssl) server? Frank Knobbe (Nov 04)
Re: Snortsam / Portscanning Detection Frank Knobbe (Dec 29)
RE: Passive Tap Help Frank Knobbe (Dec 01)

Fred McFeeters

wireless router with 4 port switch Fred McFeeters (Nov 18)
new snort user Fred McFeeters (Nov 28)
Thanks For All The Help (snort new user) Fred McFeeters (Nov 29)

Friesz, Ross

RE: Snort Machines Friesz, Ross (Nov 17)
Snort 2.1.0 with snortcenter v1.0 Friesz, Ross (Dec 19)
Snort Machines Friesz, Ross (Nov 14)

FWAdmin

Snort -> Mysql formatting IP addresses FWAdmin (Oct 16)

f z

snort.conf file.. f z (Oct 17)
snort DB error.... f z (Oct 24)
snort IDS DFD f z (Oct 23)
snort rules.... f z (Oct 25)
snort ids dfd f z (Oct 23)
problem.... f z (Oct 25)
snort ids dfd f z (Oct 22)

Gabriel L. Somlo

TCP Data Offset is less than 5 Gabriel L. Somlo (Dec 31)
Re: Welchia/Nachi rule Gabriel L. Somlo (Nov 06)

Ganbold

Question about hardware and software requirement for Snort 2.0.5 Ganbold (Dec 03)

gandalf

Alert log file gandalf (Nov 24)

Ganu Skop

Re: What are the differences between and IPS and IDS? Ganu Skop (Oct 04)

Gary Flynn

Re: tippingpoint] Gary Flynn (Oct 17)
Re: [Fwd: Re: tippingpoint] Gary Flynn (Oct 17)
Sig for Windows messenger service direct access? Gary Flynn (Dec 01)

GDHough

Re: AG GDHough (Nov 18)
[ACID-search-year] GDHough (Nov 15)
[UPGRADING from 1.8.6] GDHough (Nov 01)
Re: [UPGRADING from 1.8.6] GDHough (Nov 02)

Geoff

Re: block connections in IPS Geoff (Oct 02)
Re: tippingpoint] Geoff (Oct 17)
Re: copious (snort_decoder) WARNING: Not IPv4 datagram! Geoff (Oct 27)
RE: tippingpoint Geoff (Oct 14)
Re: tippingpoint]] Geoff (Oct 17)
Re: tippingpoint] Geoff (Oct 16)
Re: block connections in IPS Geoff (Oct 01)
RE: block connections in IPS] Geoff (Oct 02)
Re: [Fwd: Re: tippingpoint] Geoff (Oct 17)
[Fwd: Re: tippingpoint] Geoff (Oct 17)
Re: [TCP and 53] Geoff (Oct 27)

Geoff Craig

RE: Attack on snort running in Public Zone Geoff Craig (Nov 14)

Geoff Poer

FW: tippingpoint] Geoff Poer (Oct 20)

Gerson Sampaio

Nmap Gerson Sampaio (Nov 14)
Again Gerson Sampaio (Dec 01)
Rules Gerson Sampaio (Dec 23)

gfyspf () yahoo com

flags SYN question... gfyspf () yahoo com (Dec 05)

Giannakis Eleftherios

problem with Netssl Giannakis Eleftherios (Dec 20)
Re: a couple of questions Giannakis Eleftherios (Dec 12)
a couple of questions Giannakis Eleftherios (Dec 11)

Gilbert Mendoza

RE: Rogue DHCP servers Gilbert Mendoza (Oct 31)
RE: Rogue DHCP servers Gilbert Mendoza (Oct 31)

giochi

Problem to sniff 80, 110, 25 and 21 ports. giochi (Oct 29)
Re: Problem to sniff 80, 110, 25 and 21 ports. giochi (Oct 29)
Problem to sniff 80, 110, 25 and 21 ports. giochi (Oct 29)

Glenn Forbes Fleming Larratt

Re: Snort ICMP # 485 Glenn Forbes Fleming Larratt (Nov 24)

Glenn Mansfield Keeni

Snort-Snmp Glenn Mansfield Keeni (Dec 25)

Gnik

Re: Logging to database and not to log directory Gnik (Oct 04)

Gnik N.

RE: Snort service fails to start Gnik N. (Oct 07)

Gordon Cunningham

RE: Monitor multiple VLANs Gordon Cunningham (Oct 16)
RE: NIDS Packet Capture Problem Gordon Cunningham (Oct 15)
RE: Managed Snort/IDS? Gordon Cunningham (Oct 21)

Grammer, Christopher S

Remote NIDS Grammer, Christopher S (Dec 10)

grant

RE: Using Snort as IDS + packet logger grant (Oct 16)
RE: SnortSnarf grant (Oct 16)
FW: Rule to exclude a specific IP in Snort grant (Oct 16)
snortsnarf grant (Oct 14)
RE: SnortSnarf grant (Oct 18)
RE: Windows Event Log & alert.ids grant (Oct 16)
RE: Snort Logs grant (Oct 17)
Snort Success!!! grant (Oct 16)
Windows Event Log & alert.ids grant (Oct 16)
Windows Event Log & alert.ids grant (Oct 16)
RE: SnortSnarf grant (Oct 16)

Grejda, Eric

RE: Problem with compiling snort Grejda, Eric (Dec 02)
RE: installing snort with Mysql that has come with redhat 9 Grejda, Eric (Nov 10)
RE: Tagged packets in logs Grejda, Eric (Dec 23)

Grime, Richard S

RE: Rule to exclude a specific IP in Snort Grime, Richard S (Oct 09)
RE: EXTERNAL_NET definition in Snort Grime, Richard S (Oct 09)
RE: Makefile, line 484: Unexpected ... Grime, Richard S (Dec 03)
RE: How to install oinkmaster-0.8? Grime, Richard S (Oct 07)

GRL

ADSL and SNORT GRL (Oct 11)

Gross Barry D.

RE: tippingpoint Gross Barry D. (Oct 16)

gsrao

snort as network surveillance tool gsrao (Oct 28)

Guillaume . Rix

Re: Can Snort do this? Guillaume . Rix (Oct 17)

Guillaume Rix

Re: snort-inline question Guillaume Rix (Oct 07)

guillaume.rix

Re: Can Snort do this? guillaume.rix (Oct 17)

Guy Bruneau

Shadow/Snort IDS version 3.2 with ACID Guy Bruneau (Oct 13)

Haamid, Abdul Qaadir

Snort/MYSQL Error Haamid, Abdul Qaadir (Oct 03)

hallian hallian

interesting observation on snort logging! Anyone else.. hallian hallian (Oct 24)

Harry Brueckner

Re: snort-inline question Harry Brueckner (Oct 07)
snort-inline question Harry Brueckner (Oct 07)
Re: snort-inline question Harry Brueckner (Oct 07)

Harry Hoffman

Snort-2.0.2-5.src.rpm bad MD5 digest Harry Hoffman (Oct 10)

Harry M

RE: Possible false positive? Harry M (Dec 15)
Possible false positive? Harry M (Dec 11)
Strange ICMP traffic. Perhaps a worm? Harry M (Dec 15)

Harry M. Leitzell III

Re: Compiling 2.0.3 (and 2.0.2) on Solaris 9 sparc Harry M. Leitzell III (Nov 04)
Re: General usage statistics Harry M. Leitzell III (Nov 07)

henk

snort 2.1.0 does not compile on FreeBSD 4.8 henk (Dec 19)

Henk Wevers

Re: snort 2.1.0 compile issues Henk Wevers (Dec 20)

henrique

Help henrique (Dec 31)

Henrique Lima

Same alerts Henrique Lima (Oct 24)

Hernan Bugallo

RE: How does snort do packet signature detection? Hernan Bugallo (Oct 04)

Hernandez, Marco

unknown keyword resp Hernandez, Marco (Nov 11)
RE: unknown keyword resp Hernandez, Marco (Nov 11)

Hideki Hirata

alert not write.!! Hideki Hirata (Nov 14)
Re: not write alert file Hideki Hirata (Nov 18)
Re: not write alert file Hideki Hirata (Nov 17)
Re: not write alert file Hideki Hirata (Nov 17)
not write alert file Hideki Hirata (Nov 14)

hlima

Same alerts generation hlima (Oct 22)
Please help!! hlima (Oct 28)
Rule files commented out with Oinkmaster hlima (Oct 29)
Same alerts generation hlima (Oct 25)

Holger . Woehle

Re:A tool like swatch Holger . Woehle (Nov 07)

hugh_fraser

RE: *very* many snort installations.. hugh_fraser (Nov 28)

Hutchinson, Andrew

RE: Snort -> Mysql formatting IP addresses Hutchinson, Andrew (Oct 16)
RE: Database output Hutchinson, Andrew (Dec 11)
RE: Rule to exclude a specific IP in Snort Hutchinson, Andrew (Oct 09)

Iain Hallam

Re: Who doesn't care about virus rules, and why? Iain Hallam (Nov 06)
Barnyard seems to do nothing Iain Hallam (Nov 05)

Igor Kotlovskiy

Sample config Igor Kotlovskiy (Oct 09)

Infosec Account

Re: Snort Compile Error: "Undefined referenence to uncompress" Infosec Account (Oct 08)
Snort Compile Error: "Undefined referenence to uncompress" Infosec Account (Oct 07)

Irwan Hadi

Snort and L2 Cache Irwan Hadi (Dec 04)
Re: problem with snortcenter Irwan Hadi (Oct 19)
Re: Snort Rules Irwan Hadi (Oct 05)

IS Technical Services

Newbie Question on using snort IS Technical Services (Nov 12)

Jack McCarthy

RE: Strange ICMP traffic. Perhaps a worm? Jack McCarthy (Dec 15)

Jack Snedecor

Snort, Mysql purging Jack Snedecor (Dec 10)

Jacob Roberts

RE: small ? Jacob Roberts (Nov 24)
RE: MYSQL Error on Windows XP snort install Jacob Roberts (Dec 03)
RE: Snort -> Mysql formatting IP addresses Jacob Roberts (Oct 16)
RE: Multiple Win32 occurances? Jacob Roberts (Nov 26)

Jacques Brierre

Re: RE: [Snort-users] re: Snort 2.1.0 is now available! Jacques Brierre (Dec 19)

Jake Seitz

RE: Monitor multiple VLANs Jake Seitz (Oct 16)

james

Re: RE: Attack on snort running in Public Zone james (Nov 14)
Re: new snort user james (Nov 29)
RE: RE: Attack on snort running in Public Zone james (Nov 17)
Re: How does snort do packet signature detection? james (Oct 02)
RE: RE: Attack on snort running in Public Zone james (Nov 16)
RE: RE: Attack on snort running in Public Zone james (Nov 16)

James Hunter

Naming the Sensors in a multiple interface sensor James Hunter (Oct 09)
Re: Naming the Sensors in a multiple interface sensor James Hunter (Oct 09)

James M. Driskell

RE: Reporting - Network Analyzers James M. Driskell (Dec 02)

James Nonya

Re: Using snort for network stats? James Nonya (Oct 28)
Re: Recognize this? James Nonya (Oct 14)

James R. Frisky

ERROR: OpenPcap() FSM compilation failed: ?? James R. Frisky (Oct 29)
Snort+Kismet James R. Frisky (Oct 28)

Jamie Dahl

Re: Snort-supported link-layer types Jamie Dahl (Oct 30)

Jason

RE: Rule to exclude a specific IP in Snort Jason (Oct 09)
Re: Snort Sensor Hardware Jason (Dec 11)
Re: HP Printers - SNMP Public Access udp Jason (Nov 18)
Re: t(r)ippingpoint? Jason (Oct 14)

Jason Alexander

Re: Snort Sensor Hardware Jason Alexander (Dec 10)
Snort Sensor Hardware Jason Alexander (Dec 10)

Jason Haar

Re: Snort 2.0.4 CPU Utilization\Optimization Jason Haar (Nov 21)
Re: Rogue DHCP servers Jason Haar (Oct 30)
RE: *very* many snort installations.. Jason Haar (Nov 26)
More explanation needed in Snort User Manual for "resp:"? Jason Haar (Nov 06)
Re: More explanation needed in Snort User Manual for "resp:"? Jason Haar (Nov 06)
Re: snort tcpdump binary file mirroing over network. Jason Haar (Oct 25)
Re: Is it really a HUB? Jason Haar (Oct 25)
RE: Who doesn't care about virus rules, and why? Jason Haar (Nov 06)
RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Jason Haar (Dec 11)
Re: NETBIOS nimda.eml Jason Haar (Oct 22)
Re: Snort Kernel Module Jason Haar (Oct 06)
Re: Snort with IPSec Jason Haar (Nov 04)
Bug in 2.02 found getting this SMB rule to work Jason Haar (Oct 13)
Any good tool for generating nice reports off a years worth of snort syslog data? Jason Haar (Nov 26)
Re: Can I still log every packet when thresholding the alerts? Jason Haar (Nov 25)
Re: More explanation needed in Snort User Manual for "resp:"? Jason Haar (Nov 06)
Re: Fallacies and lies. Jason Haar (Nov 05)
Re: New rules keyword error Jason Haar (Oct 24)
RE: Attack on snort running in Public Zone Jason Haar (Nov 18)

Jason Linden

Threshold/Suppression question Jason Linden (Nov 18)
Standalone threshold Jason Linden (Nov 13)

Jason Monroe "JC"

Snort logging to encrypted MySQL (ssl) server Jason Monroe "JC" (Nov 04)

Jason Truong

RE: welchia rule, nachie and CyberKit 2.2 Jason Truong (Nov 04)
errors in my postgresql logs after running snortdb-extra.gz Jason Truong (Oct 28)

Jaykumar Gosar

Non-content matching. OTN before RTN? Jaykumar Gosar (Oct 14)

Jay Moloo

Re: Content of Snort-users digest, Vol 1 #3660 Jay Moloo (Oct 22)

jbendure

W32/Sober.b snort rule jbendure (Dec 18)
Snort Rules jbendure (Oct 05)
W32/Yaha-Y Worm jbendure (Dec 18)

Jeff Dell

RE: how to populate snort payload data to MySQL? Jeff Dell (Oct 22)
RE: IP country lookup Jeff Dell (Nov 25)
RE: Updating signatures in IDS policy Manager Jeff Dell (Dec 17)
RE: Snort Alert Help for Rule : SID=2 Jeff Dell (Dec 04)
RE: Snort statistics in deamon mode Jeff Dell (Nov 06)
RE: how to convert payload data from MySQL data table to tcpdump formated data? Jeff Dell (Oct 23)
IDS Policy Manager 1.3.1 Build 46 Released Jeff Dell (Nov 04)
RE: Using snort for network stats? Jeff Dell (Oct 28)
RE: Snort MySQL logging error... Jeff Dell (Oct 28)
RE: Visual layout of the db scheme (http://www.snort.org/docs/snortdb.png) Jeff Dell (Nov 24)

Jeff Kell

Re: New Blaster variant? Jeff Kell (Oct 28)
Threshold settings Jeff Kell (Dec 31)
Turning off signatures Jeff Kell (Dec 21)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
Re: (http\_inspect) NON-RFC DEFINED CHAR Jeff Kell (Dec 30)
Build problem (Snort 2.1.0, pcre 4.3) Jeff Kell (Dec 27)
Re: Archive? Jeff Kell (Dec 29)
Re: FW: (http\_inspect) NON-RFC DEFINED CHAR Jeff Kell (Dec 30)

Jeff Nathan

Re: Span Port to Fiber Tap Problems Jeff Nathan (Oct 25)
Re: Re:Barnyard Jeff Nathan (Oct 09)
Re: SHELLCODE Attacks Jeff Nathan (Dec 05)
Re: OT: Spam Mail on List? Jeff Nathan (Oct 27)
Re: Visual Intrusion Analyzer Bugs, feedback, and a little background. Jeff Nathan (Oct 11)
Re: More explanation needed in Snort User Manual for "resp:"? Jeff Nathan (Nov 20)
Re: tippingpoint Jeff Nathan (Oct 15)
Updated snort.server script Jeff Nathan (Oct 20)
Re: Barnyard Jeff Nathan (Oct 08)
Re: Configuration of Flexresp2 Jeff Nathan (Nov 25)
QUASHING thread: SRI patent on "Hierarchical event monitoring and analysis" Jeff Nathan (Oct 04)
Re: flexresp2 not working in snort 2.0.2 Jeff Nathan (Oct 02)
Re: block connections in IPS] Jeff Nathan (Oct 02)
Re: Passive Tap Help Jeff Nathan (Dec 02)
Re: Re:Barnyard Jeff Nathan (Oct 10)
Re: Libnet make fatal error Jeff Nathan (Nov 20)
QUASHING THREAD: Re: tippingpoint Jeff Nathan (Oct 16)
Re: Snort on OpenBSD -- finding mysqlclient library Jeff Nathan (Dec 04)
Re: Barnyard Jeff Nathan (Oct 08)
Re: Mac Adresses in Acid Screens Jeff Nathan (Oct 10)
catching up on snort messages Jeff Nathan (Nov 20)
How to get an answer to your question(s) Jeff Nathan (Oct 24)
Re: New rules keyword error Jeff Nathan (Oct 24)
Re: snort inline && current rules. Jeff Nathan (Nov 25)
Re: New rules keyword error Jeff Nathan (Oct 25)
Re: OT: Spam Mail on List? Jeff Nathan (Oct 27)
Re: Flexresp2 installation and configuration Problem Jeff Nathan (Dec 31)
Re: flexresp - I have 2 stupid questions Jeff Nathan (Nov 26)
Re: Passive Tap Help Jeff Nathan (Dec 01)

Jeff Pricher

Re: Snort Implementation Jeff Pricher (Oct 07)
Re: unknown keyword resp Jeff Pricher (Nov 11)
Re: Don't report and rules retrieval Jeff Pricher (Oct 15)

Jeffrey Pricher

Re: Problem: Unknown ClassType Jeffrey Pricher (Oct 22)
Re: Using snort for network stats? Jeffrey Pricher (Oct 28)

Jens-Harald Johansen

Re: Question about negated and non-negated variables in rules Jens-Harald Johansen (Nov 28)
Re: Question about negated and non-negated variables in rules Jens-Harald Johansen (Nov 29)

jeremy chartier

need help jeremy chartier (Dec 02)

jérémy chartier

Re: Upgrading Snortalog.pl v1.9 to v2.0.0??? jérémy chartier (Dec 16)

Jeremy Hefner

acid, postgres and freebsd Jeremy Hefner (Nov 22)

Jeremy Hewlett

Snort 2.1.0 is now available! Jeremy Hewlett (Dec 18)
Re: spp_rpc_decode Jeremy Hewlett (Dec 05)
Re: Snort 2.1 Jeremy Hewlett (Dec 12)
Re: snort 2.1.0 compile issues Jeremy Hewlett (Dec 20)
Re: [Snort-devel] Snort 2.1.0 + Solaris issues Jeremy Hewlett (Dec 21)
Re: Re: [Snort-users] snort 2.1.0 does not compile on FreeBSD 4.8 Jeremy Hewlett (Dec 19)
Re: [Snort-sigs] PCRE Rules and hexa Jeremy Hewlett (Dec 01)
Snort 2.0.5 has been released! Jeremy Hewlett (Nov 20)
Re: New Version Jeremy Hewlett (Dec 18)
Snort 2.0.6 is available! Jeremy Hewlett (Dec 18)
snort 2.1.0 compile issues Jeremy Hewlett (Dec 19)

Jeremy Junginger

MS03-043 Jeremy Junginger (Oct 22)
RE: Monitor multiple VLANs Jeremy Junginger (Oct 16)

Jerry Shenk

RE: ACID - PHP Jerry Shenk (Dec 21)
RE: Snort, SuSE, Novell and Ximian Jerry Shenk (Dec 21)
RE: snort just stop when more 32000 alerts (different IPs) aregenerated Jerry Shenk (Dec 21)

J-H. Johansen

Question about negated and non-negated variables in rules J-H. Johansen (Nov 27)
Re: Question about negated and non-negated variables in rules J-H. Johansen (Dec 01)
Re: snort just stop when more 32000 alerts (different IPs) aregenerated J-H. Johansen (Dec 22)
Re: Question about negated and non-negated variables in rules J-H. Johansen (Nov 27)

Jim Brown

Re: New Blaster variant? Jim Brown (Oct 28)
Re: MYSQL Error on Windows XP snort install Jim Brown (Dec 02)
Re: Help!!! Jim Brown (Dec 16)
Same config, FreeBSD vs OpenBSD, WAY different results Jim Brown (Oct 12)
Re: A tool like swatch Jim Brown (Nov 08)
Re: (no subject) Jim Brown (Dec 01)
Re: Strange ICMP traffic. Perhaps a worm? Jim Brown (Dec 16)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Jim Brown (Oct 13)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Jim Brown (Oct 12)
Re: Slightly OT: high speed packet generation Jim Brown (Dec 03)

Jim Cervantes

RE: Snort 2.1.0 with snortcenter v1.0 Jim Cervantes (Dec 19)
RE: Why are splay trees used in the preprocessors? Jim Cervantes (Nov 23)

Jim Robinson

RE: Corrupt Snort Logging - Win32 Terminal Server 2000 Jim Robinson (Dec 04)
Windows 2000 Terminal Snort Issues Jim Robinson (Dec 05)
Corrupt Snort Logging - Win32 Terminal Server 2000 Jim Robinson (Dec 03)

Jim VanEtten

HTTP Packet Capture Jim VanEtten (Oct 29)

JJ

Recognize this? JJ (Oct 14)
Re: Recognize this? JJ (Oct 14)

Jo

AW: no payload on ppp0 Jo (Oct 25)
AW: snort & pppoe Jo (Dec 05)
AW: AW: no payload on ppp0 Jo (Oct 26)
snort & pppoe Jo (Nov 27)
snort & pppoe Jo (Dec 03)

Joan L. Ackerman

Newbie Question - Snort on Windows Joan L. Ackerman (Oct 21)

Jochen Vogel

snortinline doesn´t log payload Jochen Vogel (Oct 14)
AW: Snort / Barnyard error. Jochen Vogel (Oct 14)
no payload on ppp0 Jochen Vogel (Oct 24)
AW: acid - barnyard - payload Jochen Vogel (Oct 08)
AW: acid - barnyard - payload Jochen Vogel (Oct 13)
AW: Snort / Barnyard error. Jochen Vogel (Oct 14)
AW: acid - barnyard - payload Jochen Vogel (Oct 09)
AW: AW: no payload on ppp0 Jochen Vogel (Oct 27)
acid - barnyard - payload Jochen Vogel (Oct 07)
AW: Program that reads unified log format natively Jochen Vogel (Oct 24)

Joe Smith

Why are splay trees used in the preprocessors? Joe Smith (Nov 22)
Why are splay trees used in the preprocessors? Joe Smith (Nov 22)

John

snort + freebsd tuning John (Oct 21)

John Byrnes

alert_unified only John Byrnes (Oct 01)

John Creegan

Barnyard John Creegan (Oct 08)
Re: New rules keyword error John Creegan (Oct 23)
Re: No portscan alerts shown in acid. John Creegan (Oct 18)
Snort 2.0.4 on Solaris 8 John Creegan (Nov 10)
Alerts or log files, which is better? John Creegan (Oct 10)
RE: Not Picking up Much WHY "I am pulling out myhair" John Creegan (Oct 13)
Barnyard John Creegan (Oct 08)
Re:Barnyard John Creegan (Oct 10)
Barnyard John Creegan (Oct 08)
Re: ACID alternative? John Creegan (Oct 27)
Re: Barnyard John Creegan (Oct 09)
Re: postgresql backend John Creegan (Dec 02)
Re: New rules keyword error John Creegan (Oct 23)
Re: -l parameter John Creegan (Dec 09)
Barnyard John Creegan (Oct 08)
Re:Barnyard John Creegan (Oct 09)
Synchronizing archive and live DBs John Creegan (Oct 06)
Re: Time and Date off John Creegan (Oct 14)
Re: snort and mysql socket error John Creegan (Oct 20)

John Cunningham

Choosing Linux Platform for a Snort deployment John Cunningham (Dec 29)

John Hally

byte_test and Snortcenter John Hally (Oct 14)

John Impallomeni

RE: looking into SNORT John Impallomeni (Nov 05)
RE: welchia rule John Impallomeni (Nov 04)

John Paul

password:curl: (6) Couldn't resolve host '' John Paul (Nov 18)

John Sage

Re: tippingpoint] John Sage (Oct 19)
Re: What is snort doing to the packets John Sage (Oct 17)
Re: tippingpoint] John Sage (Oct 17)
Re: where I configure my rules ? John Sage (Oct 17)

JOHNSON DAVID R

RPM config JOHNSON DAVID R (Oct 30)

John Tapparo

RE: Corrupt Snort Logging - Win32 Terminal Server 2000 John Tapparo (Dec 04)

John Whitson

Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Whitson (Dec 30)
Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Whitson (Dec 18)

JOHN XAVIOR

read snort payload data? JOHN XAVIOR (Oct 28)

John York

p2p scans showing up as SCAN FIN and SCAN NMAP ?? John York (Nov 12)

jon baer

Re: Xml output plugin for Win32 jon baer (Nov 13)
Re: Log all traffic? jon baer (Nov 05)
Re: Snort logging to encrypted MySQL (ssl) server? jon baer (Nov 04)
Re: Test if Snort Work Correctly jon baer (Nov 05)
Re: How to log on MySql jon baer (Nov 21)
Re: ACID alternative? jon baer (Oct 27)
Teaching Snort/Packet Analysis/Etc jon baer (Nov 05)
Re: Reporting - Network Analyzers jon baer (Dec 02)
Re: slahes in SQL statement a problem? jon baer (Nov 11)
Re: FlexResp Error jon baer (Nov 07)
Re: installing snort with Mysql that has come withredhat 9 jon baer (Nov 09)
Re: Snort logging to encrypted MySQL (ssl) server? jon baer (Nov 04)
Re: Snort Wireless jon baer (Nov 05)
Snort on Zaurus ... jon baer (Nov 03)
Re: Wireless: Rules & Classification jon baer (Nov 18)
Re: [Snort-sigs] ARP scan jon baer (Oct 06)
Re: packets sent to OWN IP jon baer (Nov 14)

Jon Hart

Re: Rogue DHCP servers Jon Hart (Oct 31)
Re: Compiling under Debian... Jon Hart (Nov 13)

Jordan, Jason A

RE: ICMP L3retriever Ping Jordan, Jason A (Dec 22)

Jordi Vidal

Re: conflict with alert types Jordi Vidal (Dec 02)
conflict with alert types Jordi Vidal (Dec 02)

jose alencar

Snort trap_snmp plugin jose alencar (Nov 10)

Josh Berry

Re: New rules keyword error Josh Berry (Oct 28)
Re: Snort with IPSec Josh Berry (Nov 04)
Re: t(r)ippingpoint? Josh Berry (Oct 14)
RE: Flushing the data from the MySQL database Josh Berry (Oct 14)
Re: database not getting updated Josh Berry (Nov 17)
Re: how can one tell if snort works Josh Berry (Oct 19)
Re: Snort Kernel Module Josh Berry (Oct 06)
Re: fatal error Josh Berry (Oct 18)
Re: Newbie question on gnutella rule Josh Berry (Dec 13)
Re: Flushing the data from the MySQL database Josh Berry (Oct 14)
Re: Snort, Mysql purging Josh Berry (Dec 10)
Re: heavily switched network questions Josh Berry (Dec 31)
Snort Kernel Module Josh Berry (Oct 06)
Re: [snort-mysql] logging OK to logfile, not to mysql database Josh Berry (Dec 03)
Re: heavily switched network questions Josh Berry (Dec 30)
Re: Bad Traffic, Port Josh Berry (Dec 24)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Josh Berry (Oct 13)
Re: tippingpoint Josh Berry (Oct 14)
Re: Snort with IPSec Josh Berry (Nov 04)
Re: Possible false positive? Josh Berry (Dec 11)
Re: Snort Setup Scenario - Suggestions Josh Berry (Oct 09)
Snort with IPSec Josh Berry (Nov 04)
Re: Snort Kernel Module Josh Berry (Oct 06)
Re: snort inline && current rules. Josh Berry (Nov 25)
Re: Snort not running Josh Berry (Nov 10)
RE: Snort Setup Scenario - Suggestions Josh Berry (Oct 09)
Re: snort inline behavior Josh Berry (Nov 26)
Re: ACID alternative? Josh Berry (Oct 27)
Re: tippingpoint Josh Berry (Oct 14)
Compiling Snort Statically Josh Berry (Oct 28)
Re: Wanting to run Snort on DMZ Josh Berry (Dec 24)
Re: Problem with web-iis rules Josh Berry (Oct 10)
Time Based IDS Rules Josh Berry (Nov 17)
Re: spp_rpc_decode Josh Berry (Dec 03)
Re: Logging portscan on database Josh Berry (Nov 24)
Re: Snort and Suse 8.2 Josh Berry (Nov 11)
Re: Snort with IPSec Josh Berry (Nov 05)
Re: not write alert file Josh Berry (Nov 17)
Compiling Snort Statically Josh Berry (Oct 23)
Re: Problem with web-iis rules Josh Berry (Oct 10)
Re: Re: ACID / ALERT console browsing issue Josh Berry (Dec 03)
Re: [Fwd: Re: tippingpoint] Josh Berry (Oct 17)

Josh . Sakofsky

rule update causes seg fault Josh . Sakofsky (Dec 03)

Joshua R. Jones

Snort Database Joshua R. Jones (Dec 17)

JP Vossen

Re: How to get an answer to your question(s) JP Vossen (Oct 10)
Re: Can't build RPM using SRPM (snort-2.0.2-4) JP Vossen (Sep 30)
Re: RE: BAD-TARFFIC Loopback traffic JP Vossen (Dec 20)
RE: Log Rotation JP Vossen (Dec 05)
RE: Snort 2.0.4 on OpenBSD 3.4 is dropping packets JP Vossen (Nov 17)
Re: Snort 1.8.7 does not log anything (OS: SuSE 8.1) JP Vossen (Dec 11)
Syslog Alert format? JP Vossen (Dec 11)
Re: [Snort-sigs] To drop packets JP Vossen (Dec 08)
(no subject) JP Vossen (Dec 19)
Re: Log Rotation JP Vossen (Dec 04)
Re: Log Rotation (fwd) JP Vossen (Dec 05)

Juan M. Rivera

RE: Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 09)
Mac Adresses in Acid Screens Juan M. Rivera (Oct 09)
Local Whois doesn't work in ACID. Juan M. Rivera (Oct 08)
RE: Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 14)
Rule to exclude a specific IP in Snort Juan M. Rivera (Oct 09)

Jukka Juslin

Snort rules merging and duplicate entries (3D Linked List) Jukka Juslin (Oct 02)
EXTERNAL_NET definition in Snort Jukka Juslin (Oct 09)

Jyri Hovila

Re[2]: Strange Loopback Traffic Jyri Hovila (Oct 08)

kanwal

Where to start snort from ????? kanwal (Nov 04)
RE: RE: Attack on snort running in Public Zone kanwal (Nov 14)
RE: quick question kanwal (Oct 16)

kanwal jeet

Re: Blocking attacking IP address for some time using Snort and PIX kanwal jeet (Oct 02)
Blocking attacking IP address for some time using Snort and PIX kanwal jeet (Oct 02)

Kaplan, Andrew H.

FW: generic bpf_rules_file Kaplan, Andrew H. (Oct 30)
RE: Setting Up Policy-Based.rules file Kaplan, Andrew H. (Nov 03)
Snort.conf Syntax Question Kaplan, Andrew H. (Nov 19)
RE: Rogue DHCP servers Kaplan, Andrew H. (Oct 30)
Setting Up Policy-Based.rules file Kaplan, Andrew H. (Nov 03)
RE: Information Not Appearing On ACID Console Kaplan, Andrew H. (Oct 08)
RE: Rogue DHCP servers Kaplan, Andrew H. (Oct 31)
Flushing the data from the MySQL database Kaplan, Andrew H. (Oct 14)
Proposed Configuration Kaplan, Andrew H. (Oct 28)
RE: Snort not running Kaplan, Andrew H. (Nov 10)
RE: Excluding particular IP address ranges from sca ns Kaplan, Andrew H. (Oct 29)
Update to previous e-mail Kaplan, Andrew H. (Nov 03)
RE: Update to previous e-mail Kaplan, Andrew H. (Nov 03)
(no subject) Kaplan, Andrew H. (Nov 04)
Information Not Appearing On ACID Console Kaplan, Andrew H. (Oct 08)
Excluding particular IP address ranges from scans Kaplan, Andrew H. (Oct 29)
generic bpf_rules_file Kaplan, Andrew H. (Oct 29)
RE: (no subject) Kaplan, Andrew H. (Nov 05)
RE: (no subject) Kaplan, Andrew H. (Nov 05)

Keaton, Lindamaria

Log Rotation Keaton, Lindamaria (Dec 04)
RE: Log Rotation Keaton, Lindamaria (Dec 05)

keith greenhill

perl script for snort keith greenhill (Oct 30)

Keith Irvin

General usage statistics Keith Irvin (Nov 06)
SMTP subject tracking Keith Irvin (Dec 15)

Keith Long

RE: SNMP Support in FreeBSD Keith Long (Oct 24)
RE: SNMP Support in FreeBSD Keith Long (Oct 21)
RE: SNMP Support in FreeBSD Keith Long (Oct 22)
RE: SNMP Support in FreeBSD Keith Long (Oct 21)
SNMP Support in FreeBSD Keith Long (Oct 21)
RE: snort tcpdump binary file mirroing overnetwork. Keith Long (Oct 29)
RE: SNMP Support in FreeBSD Keith Long (Oct 25)
SNMP Support in FreeBSD Keith Long (Oct 21)

Keith W. McCammon

Improving ACID DB Performance via Plug-In Keith W. McCammon (Dec 09)

Kenneth G. Arnold

RE: how to populate snort payload data to MySQL? Kenneth G. Arnold (Oct 23)
Re: how to populate snort payload data to MySQL? Kenneth G. Arnold (Oct 23)

Kenneth Ingham

Fix for 2.1 sp_session.c Kenneth Ingham (Dec 22)

kenw

Re: Passive Tap Help kenw (Dec 01)
Who doesn't care about virus rules, and why? kenw (Nov 05)
Re: Is it really a HUB? kenw (Nov 28)
Re: Who doesn't care about virus rules, and why? kenw (Nov 06)
Re: [Snort-Users] Is it really a HUB? kenw (Nov 28)
Re: Is it really a HUB? kenw (Nov 27)
Re: Is it really a HUB? kenw (Nov 28)

kerberos K

Remote Sensor?? kerberos K (Dec 05)
RE: RE:[Snort-users] Remote Sensor?? kerberos K (Dec 05)

Kerry Cox

technical reviewers Kerry Cox (Oct 28)
sguil and barnyard errors Kerry Cox (Oct 08)
tippingpoint Kerry Cox (Oct 14)
Snort 2.1 Kerry Cox (Dec 12)
Snort technical reviewers wanted Kerry Cox (Oct 28)
Snort technical reviewers wanted Kerry Cox (Oct 27)

khaled fawzy

droped packets khaled fawzy (Dec 28)

Kim Wall

RE: snort and sflow? Kim Wall (Oct 22)

Koay Y.Chen

where can I find ms_unicode_generator.c for snort-2.1.0 Koay Y.Chen (Dec 30)

kongi

Re: Flexible Response kongi (Nov 14)

Kreimendahl, Chad J

Other patches I've not seen (was: Resolved- 2.0.3 strange problems) Kreimendahl, Chad J (Nov 06)
RE: RE: [Snort-users] re: Snort 2.1.0 is now available! Kreimendahl, Chad J (Dec 18)
RE: Snort 2.0.4 CPU Utilization\Optimization Kreimendahl, Chad J (Nov 21)
RE: Snort 2.0.4 CPU Utilization\Optimization Kreimendahl, Chad J (Nov 20)
RE: re: Snort 2.1.0 is now available! Kreimendahl, Chad J (Dec 18)
RE: Other patches I've not seen Kreimendahl, Chad J (Nov 06)
FW: [Snort-devel] New code (and building) [continued... ] Kreimendahl, Chad J (Oct 22)

Kristian Schling

(no subject) Kristian Schling (Oct 08)

Kristofer T. Karas

Re: Is it really a HUB? Kristofer T. Karas (Oct 28)
Re: Is it really a HUB? Kristofer T. Karas (Oct 27)
Re: Is it really a HUB? Kristofer T. Karas (Oct 29)
Re: More explanation needed in Snort User Manual for "resp:"? Kristofer T. Karas (Nov 06)
Re: Demarc + Snort 2.0.4/5 Kristofer T. Karas (Nov 24)

Krueger, Brian

ACID Email alerts Krueger, Brian (Oct 30)
ACID Email alerts Krueger, Brian (Oct 28)

KS

sniffing on two NIC simultaneously KS (Dec 11)
RE: Attack on snort running in Public Zone KS (Nov 14)
Attack on snort running in Public Zone KS (Nov 14)
Snort on Suse linux 9.0 KS (Dec 18)

Kumar, Manoj

(no subject) Kumar, Manoj (Dec 22)
Issue with SNORT running for more that 3-4 days Kumar, Manoj (Dec 22)

Lambeth, Darwin

Snort IDS Lambeth, Darwin (Dec 10)
RE: Snort IDS Lambeth, Darwin (Dec 10)
RE: snort and suse 7.3 Lambeth, Darwin (Nov 20)
SNORT/LIBPCAP Lambeth, Darwin (Nov 20)
SNORT and LIBPCAP Lambeth, Darwin (Nov 20)

Lance, Jeff

Snort Lance, Jeff (Oct 31)

Landon Stewart

RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Landon Stewart (Dec 11)
Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Landon Stewart (Dec 08)
RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Landon Stewart (Dec 11)

Lane LiaBraaten

Snort outside firewall Lane LiaBraaten (Nov 03)
Re: ACID Email alerts Lane LiaBraaten (Oct 31)

Lang Hoang

Problem with snort 2.1.0 and redhat 9 Lang Hoang (Dec 23)
RE: Problem with snort 2.1.0 and redhat 9 Lang Hoang (Dec 24)

larosa, vjay

RE: Span Port to Fiber Tap Problems larosa, vjay (Oct 20)
RE: Slightly OT: high speed packet generation softw are larosa, vjay (Dec 01)
RE: Span Port to Fiber Tap Problems larosa, vjay (Oct 23)

Lawrence Reed

Re: Performance again Lawrence Reed (Dec 23)

LE

RE: Announcement: Visual Intrusion Analyzer (Beta Release) LE (Oct 10)
RE: OT: Spam Mail on List? LE (Oct 27)

Leonard Miller

Re: problem with snort installation Leonard Miller (Nov 20)
Re: compiling snort with --mssql option Leonard Miller (Nov 20)
Re: MySQL Issues. Leonard Miller (Nov 07)
Archive Leonard Miller (Nov 05)
RE: welchia rule Leonard Miller (Nov 04)
Re: PLEASE CC ME Leonard Miller (Nov 08)
RE: welchia rule Leonard Miller (Nov 04)

Leonardo Spalenza

Re: Logging portscan on database Leonardo Spalenza (Nov 24)

Libalele, Silulami S

IMAGES? Libalele, Silulami S (Dec 10)
RE: Help Libalele, Silulami S (Dec 09)
Logging of TCP and UDP packets? Libalele, Silulami S (Dec 15)
Help Libalele, Silulami S (Dec 08)
RE: IMAGES? Libalele, Silulami S (Dec 11)

lindsay . hunt

Re: CyberKit 2.2 Ping, its driven me Nuts.. lindsay . hunt (Dec 30)

Lists

RE: Passive Tap Help Lists (Dec 01)
RE: Passive Tap Help Lists (Dec 01)

Lohman, James

RE: RE: [Snort-users] Who doesn't care about virus r ules, and why? Lohman, James (Nov 13)

Lopez, Frank

UPnP Lopez, Frank (Oct 02)

Lorenzo Rossi

Help to configure SNORT Lorenzo Rossi (Dec 30)
Help to configure SNORT Lorenzo Rossi (Dec 23)
Re: Help to configure SNORT Lorenzo Rossi (Dec 23)

lpj0508

strange behaviour of snort 2.0.3 lpj0508 (Nov 06)

lsderio lsderio

Acid access problem! lsderio lsderio (Dec 19)

Lucretia Enterprises Administrator

RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)
RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)

Luo, Philip

does snort support token ring card Luo, Philip (Nov 25)

Maarten Van Horenbeeck

Re: NMAP alerts Maarten Van Horenbeeck (Dec 20)

maguiler () cantv net

snort just stop when more 32000 alerts (different IPs) aregenerated maguiler () cantv net (Dec 15)
snort just stop when more 32000 alerts (different IPs) aregenerated maguiler () cantv net (Dec 12)

Mahdi Kefayati

Prelude Hybrid IDS Mahdi Kefayati (Dec 10)

mailinglist

Very few Snort alerts mailinglist (Oct 09)

Majwabu, Richard

logging to a remote MSSQL database Majwabu, Richard (Nov 06)
remote database logging Majwabu, Richard (Oct 28)
RE: WinSnort and MSSQL Problem Majwabu, Richard (Dec 31)
Error making config file for PHP --with-mssql swith Majwabu, Richard (Oct 31)
compiling snort with --mssql option Majwabu, Richard (Nov 20)
remote database logging Majwabu, Richard (Oct 29)
Snort bild with MSSQL support Majwabu, Richard (Oct 31)
RE: Snort bild with MSSQL support Majwabu, Richard (Nov 06)
remote logging Majwabu, Richard (Oct 29)
RE: Snort 2.0.2 and Oracle DB Majwabu, Richard (Oct 29)

Marcin Krawiec

Just one rule Marcin Krawiec (Dec 01)

Marc Norton

RE: Snort 2.0.4 and threshold Marc Norton (Nov 11)

Marc Quibell

Re: New rules keyword error Marc Quibell (Oct 22)
Re: Is it really a HUB? Marc Quibell (Oct 28)
Re: Fallacies and lies. Marc Quibell (Nov 06)
RE: OT: Spam Mail on List? Marc Quibell (Oct 27)
Re: Snort-users digest, Vol 1 #3643 - 11 msgs Marc Quibell (Oct 16)
RE: Nmap Marc Quibell (Nov 20)
Re: Snort Machines Marc Quibell (Nov 17)
Re: New rules keyword error Marc Quibell (Oct 24)
Re: OT: Spam Mail on List? Marc Quibell (Oct 27)
Stealth sniffing and and bridging networks Marc Quibell (Oct 28)
Skype rule Marc Quibell (Oct 09)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Marc Quibell (Oct 13)
Re: New rules keyword error Marc Quibell (Oct 24)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Marc Quibell (Oct 14)
Re: Is it really a HUB? Marc Quibell (Oct 28)
Naming the Sensors in a multiple interface sensor Marc Quibell (Oct 09)
Re: New rules keyword error Marc Quibell (Oct 23)
New rules keyword error Marc Quibell (Oct 22)
Re: New rules keyword error Marc Quibell (Oct 22)
Re: New rules keyword error Marc Quibell (Oct 24)
Re:Barnyard Marc Quibell (Oct 10)
RE: tippingpoint Marc Quibell (Oct 16)

MARIANO GABRIEL PARADA

Re: 13. Snort Machines (Friesz, Ross) MARIANO GABRIEL PARADA (Nov 14)
Re: Snort-users digest, Vol 1 #3751 - 9 msgs MARIANO GABRIEL PARADA (Nov 18)
Too much BAD TRAFFIC, LOOP TRAFFIC log messages MARIANO GABRIEL PARADA (Nov 12)

Mario Guerendo

Script for windows server Mario Guerendo (Nov 19)
RE: ACID Graphs Mario Guerendo (Nov 20)
Help!!! Mario Guerendo (Dec 13)
Visual Basic excel graph Mario Guerendo (Dec 10)

Mark Cooper

Compilation of Snort 2.0.2 in debug mode fails Mark Cooper (Oct 20)
Compilation of Snort 2.0.2 in debug mode fails Mark Cooper (Oct 20)

Mark Cooper (HP)

Compilation of Snort 2.0.2 in debug mode fails Mark Cooper (HP) (Oct 19)

Mark Ewert

RE: Snort 2.0.4 CPU Utilization\Optimization Mark Ewert (Nov 21)
Question about Ring PCAP\Snort\Environment Variables Mark Ewert (Nov 07)
RE: Problem with Snort 2.0.4 and Snort Rules Mark Ewert (Nov 18)
Snort not outputting statistics on exit Mark Ewert (Nov 16)
Snort 2.0.5 TCP Stream Fix Increases Performance Mark Ewert (Nov 24)
RE: Snort 2.0.4 CPU Utilization\Optimization Mark Ewert (Nov 20)
Problem with Snort 2.0.4 and Snort Rules Mark Ewert (Nov 18)
Figured it out!: Snort not outputting statistics on exit Mark Ewert (Nov 16)
Snort 2.0.4 CPU Utilization\Optimization Mark Ewert (Nov 20)
Question about Ring PCAP\Snort\Environment Variables Mark Ewert (Nov 07)
Followup question about Ring PCAP\Snort\Environment Variables Mark Ewert (Nov 07)
Snort Optimization: Better to Pass a rule or Disable? Mark Ewert (Nov 19)
RE: Snort 2.0.4 CPU Utilization\Optimization Mark Ewert (Nov 21)

Mark Fagan

Snort Alerting .. Mark Fagan (Nov 22)
Re: Snort, Mysql purging Mark Fagan (Dec 11)
Snort Alerting issue ... Mark Fagan (Nov 21)
Re: Nmap Mark Fagan (Nov 19)
Re: Acid access problem! Mark Fagan (Dec 22)
Re: Nmap Mark Fagan (Nov 15)

Mark McDonagh

dropped packets Mark McDonagh (Nov 05)

Mark Nipper

Re: HTTP Packet Capture Mark Nipper (Oct 29)
Re: Log all traffic? Mark Nipper (Nov 05)
Re: Hot to see how many packets my snort is droping Mark Nipper (Oct 30)
Re: Nachi false positives Mark Nipper (Oct 29)
Re: Snort Kernel Module Mark Nipper (Oct 06)
Re: Snort.conf Syntax Question Mark Nipper (Nov 19)
Re: monitoring pflog0 on obsd Mark Nipper (Oct 08)
Re: question about TAG Mark Nipper (Nov 13)
Re: Snort statistics in deamon mode Mark Nipper (Nov 05)
Re: monitoring pflog0 on obsd Mark Nipper (Oct 08)

Mark Penny

Fallacies and lies. Mark Penny (Nov 05)

Mark . Schutzmann

Re: Snort outside firewall Mark . Schutzmann (Nov 03)
Alert Traffic Relative to Total Mark . Schutzmann (Nov 14)
Spade/Spice and Snort? Mark . Schutzmann (Oct 31)
RE: Spade/Spice and Snort? Mark . Schutzmann (Nov 03)
Re: looking into SNORT Mark . Schutzmann (Nov 05)
RE: Spade/Spice and Snort? Mark . Schutzmann (Nov 02)
Re: Test if Snort Work Correctly Mark . Schutzmann (Nov 05)
Re: Snort with IPSec Mark . Schutzmann (Nov 04)
Re: HP Printers - SNMP Public Access udp Mark . Schutzmann (Nov 18)
RE: welchia rule Mark . Schutzmann (Nov 05)
Re: Log all traffic? Mark . Schutzmann (Nov 05)

Mark Totsch

Snort 2.1 Problems with unicode.map Mark Totsch (Dec 29)

Martin Bündgens

Re: Bad Traffic, Port 0 Martin Bündgens (Dec 24)
P2P Rules Martin Bündgens (Nov 05)
Re: Bad Traffic, Port Martin Bündgens (Dec 24)
Bad Traffic, Port 0 Martin Bündgens (Dec 24)

Martin Hess

(http\_inspect) NON-RFC DEFINED CHAR Martin Hess (Dec 30)

Martin Jr., D. Michael

RE: Snort Logs Martin Jr., D. Michael (Oct 14)
RE: Rogue DHCP servers Martin Jr., D. Michael (Oct 30)
ACID Graphs Martin Jr., D. Michael (Nov 20)
SnortSnarf Martin Jr., D. Michael (Oct 16)
Nachi false positives Martin Jr., D. Michael (Oct 29)
Don't report and rules retrieval Martin Jr., D. Michael (Oct 15)
RE: Nachi false positives Martin Jr., D. Michael (Oct 30)
RE: Rogue DHCP servers Martin Jr., D. Michael (Oct 31)
RE: SnortSnarf Martin Jr., D. Michael (Oct 16)
Monitor multiple VLANs Martin Jr., D. Michael (Oct 16)
Windows Snort Users Martin Jr., D. Michael (Oct 24)
RE: Monitor multiple VLANs Martin Jr., D. Michael (Oct 16)
RE: Monitor multiple VLANs Martin Jr., D. Michael (Oct 16)
Snort Rules Martin Jr., D. Michael (Oct 21)
Snort Logs Martin Jr., D. Michael (Oct 14)
Rogue DHCP servers Martin Jr., D. Michael (Oct 30)
SCAN UPnP service discover attempt Martin Jr., D. Michael (Oct 15)

Martin McKeay

Http_inspect: allow_proxy_use/no_alerts Martin McKeay (Dec 31)

Martin Olsson

Visual layout of the db scheme (http://www.snort.org/docs/snortdb.png) Martin Olsson (Nov 24)
Re: how to convert payload data from MySQL data table to tcpdump formated data? Martin Olsson (Oct 23)
RE: SNMP Support in FreeBSD Martin Olsson (Oct 23)
Increase performance with filter or pass-rules Martin Olsson (Nov 21)
Request: New sections in snort-sid-template.txt Martin Olsson (Oct 24)
Re: conflict with alert types Martin Olsson (Dec 02)
Re: how to convert payload data from MySQL data table to tcpdump formated data? Martin Olsson (Oct 24)
Re: Snort on multiple interfaces Martin Olsson (Nov 19)
Re: does snort support token ring card Martin Olsson (Nov 28)

Martin Roesch

Re: SRI patent on "Hierarchical event monitoring and analysis" Martin Roesch (Oct 06)
Snort not backdoored, Sourcefire not compromised Martin Roesch (Nov 27)

Marty Hauser

unsubscribe Marty Hauser (Oct 30)

Matt

Re: Prelude Hybrid IDS Matt (Dec 10)

Matt Foster

RE: Testing tools Matt Foster (Oct 20)

Matthew L. McCarty

flow-portscan data Matthew L. McCarty (Dec 22)
flow and flow-portscan in Snort 2.1 Matthew L. McCarty (Dec 19)
Re: flow-portscan data Matthew L. McCarty (Dec 22)
Re: CyberKit 2.2 Ping, its driven me Nuts.. Matthew L. McCarty (Dec 29)
Re: IDS Matthew L. McCarty (Dec 29)
BAD-TRAFFIC loopback traffic Alert is NOW TFTPGET passwd Matthew L. McCarty (Dec 23)

Matt Kettler

Re: Syn-Flood Matt Kettler (Nov 12)
Re: What are the differences between and IPS and IDS? Matt Kettler (Oct 01)
Re: Performance again Matt Kettler (Dec 23)
Re: sniffing on two NIC simultaneously Matt Kettler (Dec 11)
Re: Snort 2.0.4 CPU Utilization\Optimization Matt Kettler (Nov 21)
Re: Fiber Tap Matt Kettler (Nov 19)
Re: Problem with Snort 2.0.4 and Snort Rules Matt Kettler (Nov 18)
Re: Performance again Matt Kettler (Dec 23)
Re: Can Snort report on 'late collisions'? Matt Kettler (Nov 24)
Re: Log all traffic? Matt Kettler (Nov 05)
Re: Nmap Matt Kettler (Nov 18)
Re: Preprocessor2 Matt Kettler (Oct 29)
Re: error Matt Kettler (Dec 12)
Re: Snort IDS Matt Kettler (Dec 10)
Re: Snort on windows Matt Kettler (Oct 03)
Re: Attack on snort running in Public Zone Matt Kettler (Nov 18)
Re: Help to configure SNORT Matt Kettler (Dec 24)
Re: ADSL and SNORT Matt Kettler (Oct 13)
Re: snortsnarf problems Matt Kettler (Nov 12)
RE: Attack on snort running in Public Zone Matt Kettler (Nov 19)
Re: Flexresp2 installation and configuration Problem Matt Kettler (Dec 23)
Re: Test if Snort Work Correctly Matt Kettler (Nov 05)
Re: error starting snort!! Matt Kettler (Oct 10)
Re: SHELLCODE Attacks Matt Kettler (Dec 05)
Re: Is it really a HUB? Matt Kettler (Nov 28)
Re: Setting Up Policy-Based.rules file Matt Kettler (Nov 03)
Re: [Snort-sigs] A tool like swatch Matt Kettler (Nov 05)
Re: ERROR /etc/snort/snort.eth1.conf (88): Matt Kettler (Dec 23)
Re: External Subnets Matt Kettler (Nov 25)
Re: flexresp - I have 2 stupid questions Matt Kettler (Nov 26)
Re: SHELLCODE Attacks Matt Kettler (Dec 05)
Re: Log all traffic? Matt Kettler (Nov 05)
Re: Bad Traffic, Port 0 Matt Kettler (Dec 24)
Re: wireless router with 4 port switch Matt Kettler (Nov 19)
Re: does snort support token ring card Matt Kettler (Nov 25)
Re: RPM config Matt Kettler (Oct 29)
Re: (no subject) Matt Kettler (Dec 01)
Re: IMAGES? Matt Kettler (Dec 10)
Re: Is it really a HUB? Matt Kettler (Nov 26)
Re: Is this an attack in the making? Matt Kettler (Oct 27)
Re: Too much BAD TRAFFIC, LOOP TRAFFIC log messages Matt Kettler (Nov 12)
RE: IP country lookup Matt Kettler (Nov 25)
RE: unknown keyword resp Matt Kettler (Nov 12)
Re: HTTP Packet Capture Matt Kettler (Oct 29)
Re: Question about negated and non-negated variables in rules Matt Kettler (Nov 28)
Re: [Snort-sigs] good settings for portscan preprocessor? Matt Kettler (Nov 13)
Re: Nmap Matt Kettler (Nov 14)
Re: Strange Key Words Matt Kettler (Nov 18)
Re: Problem to sniff 80, 110, 25 and 21 ports. Matt Kettler (Oct 29)
Re: block connections in IPS Matt Kettler (Oct 03)
Re: Snort-supported link-layer types Matt Kettler (Nov 03)
Re: snort-users () lists sourceforge net Matt Kettler (Dec 09)
Re: droped packets Matt Kettler (Dec 29)
RE: Dropping packets why? Matt Kettler (Oct 27)
RE: Snort Sensor Hardware Matt Kettler (Dec 10)
Re: Snort.conf variables Matt Kettler (Nov 11)
Re: remote logging Matt Kettler (Oct 29)
Re: SHELLCODE Attacks Matt Kettler (Dec 05)
Re: Help to configure SNORT Matt Kettler (Dec 23)
Re: unknown keyword resp Matt Kettler (Nov 11)
Re: Update to previous e-mail Matt Kettler (Nov 03)
2.0.3 strange problems Matt Kettler (Nov 04)
Re: does snort must have its own ip address ? Matt Kettler (Oct 01)
[OT] broken autoresponder to list posts at ofcom.org.uk Matt Kettler (Dec 23)
Re: Lots of outgoing portscans Matt Kettler (Oct 22)
Re: Snort Sensor Hardware Matt Kettler (Dec 10)
Re: output plugins... execute command? Matt Kettler (Nov 05)
Re: does snort support token ring card Matt Kettler (Nov 28)
Re: snort inline && current rules. Matt Kettler (Nov 25)
Re: flow-portscan data Matt Kettler (Dec 22)
Re: Size of RAM required to run Snort Matt Kettler (Nov 24)
Re: Performance again Matt Kettler (Dec 23)
Re: a couple of questions Matt Kettler (Dec 11)
Re: Problem with Snort 2.0.4 and Snort Rules Matt Kettler (Nov 19)
RE: flexresp - I have 2 stupid questions Matt Kettler (Nov 26)
Re: exact phrase match Matt Kettler (Dec 15)
Re: Packet size in snort log Matt Kettler (Nov 10)
Re: How does snort do packet signature detection? Matt Kettler (Oct 02)
Re: html post question Matt Kettler (Dec 09)
Re: HP Digital Sender Matt Kettler (Dec 12)
Re: Nmap Matt Kettler (Nov 19)
RE: Spade/Spice and Snort? Matt Kettler (Nov 12)
Re: Rules Matt Kettler (Dec 23)
Re: flags SYN question... Matt Kettler (Dec 05)
Re: Snort and APF firewall Matt Kettler (Dec 13)
Re: Snort Kernel Module Matt Kettler (Oct 06)
Re: Rob Flentge/Mechanicsburg/US/Exel is out of the office. [OT] Matt Kettler (Nov 12)
Re: Snort 2.0.5 dropping packets Matt Kettler (Dec 19)
Re: bad frag bits Matt Kettler (Nov 25)
Re: Resolved- 2.0.3 strange problems Matt Kettler (Nov 06)
Re: snort idmef plugin Matt Kettler (Nov 25)
Re: snort idmef plugin Matt Kettler (Nov 28)
Re: session output Matt Kettler (Nov 03)
Re: No alert_smb in 2.1.0? Matt Kettler (Dec 19)
Re: How to get an answer to your question(s) Matt Kettler (Oct 24)
Re: Snort with IPSec Matt Kettler (Nov 04)
Re: Question about negated and non-negated variables in rules Matt Kettler (Nov 28)
Re: not write alert file Matt Kettler (Nov 14)
Re: Is it really a HUB? Matt Kettler (Nov 28)
Re: multiple ports in rule Matt Kettler (Dec 17)
Re: where is see snort logs ? Matt Kettler (Oct 20)
Re: More explanation needed in Snort User Manual for "resp:"? Matt Kettler (Nov 06)
Re: Rule to pass ARP? Matt Kettler (Dec 14)
RE: How does snort do packet signature detection? Matt Kettler (Oct 02)
Re: snort inline && current rules. Matt Kettler (Nov 25)
Re: Problem with web-iis rules Matt Kettler (Oct 10)
RE: Spade/Spice and Snort? Matt Kettler (Nov 03)
Re: snort speed Matt Kettler (Dec 29)
Re: Question about negated and non-negated variables in rules Matt Kettler (Dec 01)
Re: question about ICMP echo reply (undefinted code) rule Matt Kettler (Nov 20)
Re: Archive Matt Kettler (Nov 05)
Re: snort.conf file.. Matt Kettler (Oct 17)
Re: Snort Matt Kettler (Oct 31)
RE: Nmap Matt Kettler (Nov 19)
Re: Flexresp2 installation and configuration Problem Matt Kettler (Dec 29)
Re: Snort.conf variables Matt Kettler (Nov 10)
Re: Question about negated and non-negated variables in rules Matt Kettler (Dec 01)
Re: [OT] Question about negated and non-negated variables in rules Matt Kettler (Nov 28)
Re: .i eth1 Matt Kettler (Nov 21)
Re: Snort and L2 Cache Matt Kettler (Dec 04)
Re: Blocking attacking IP address for some time using Snort and PIX Matt Kettler (Oct 02)
RE: Attack on snort running in Public Zone Matt Kettler (Nov 18)
Re: Trafic Filtering Matt Kettler (Nov 24)
Re: Dropping packets why? Matt Kettler (Oct 27)
Re: does snort detect ! Matt Kettler (Nov 14)
Re: Snort Sensor Hardware Matt Kettler (Dec 10)
Re: Newbie Question - Snort on Windows Matt Kettler (Oct 21)
Re: Snort Rules Matt Kettler (Oct 21)

Matt Linton

Rule SID 1325 Matt Linton (Nov 06)
Some odd traffic. Matt Linton (Dec 12)

maxime feroul

experimental ipv6 maxime feroul (Nov 18)

McGuire, Dennis

RE: rule update causes seg fault McGuire, Dennis (Dec 04)

M.D. DeWar

database not getting updated M.D. DeWar (Nov 17)
error M.D. DeWar (Dec 12)
graphing snort with acid M.D. DeWar (Nov 17)
AG M.D. DeWar (Nov 18)

MH

Re: monitoring pflog0 on obsd MH (Oct 08)
Re: monitoring pflog0 on obsd MH (Oct 08)
Re: Rob Flentge/Mechanicsburg/US/Exel is out of the office. MH (Nov 15)
Re: Attack on snort running in Public Zone MH (Nov 14)
RE: Nmap MH (Nov 17)
Re: mysql.sock MH (Oct 04)

Michael

|> Starting Snort service failed Michael (Oct 07)
Snort service fails to start Michael (Oct 07)

Michael Boman

Re: Newbie question on gnutella rule Michael Boman (Dec 13)
Re: snort and proxy Michael Boman (Nov 07)

Michael casale

libmysqlclient: undefined reference to `uncompress' Michael casale (Oct 08)

Michael Chapman

RE: Weird stuff when compiling snort w/ MySQL support Michael Chapman (Dec 17)
RE: Pushing MAC addreses from Snort into SQL .. Michael Chapman (Dec 12)
Weird stuff when compiling snort w/ MySQL support Michael Chapman (Dec 17)
RE: New Version Michael Chapman (Dec 18)
RE: New Version Michael Chapman (Dec 18)

Michael Esposito

Is this an attack in the making? Michael Esposito (Oct 26)

Michael Janke

Snort rule for AIM fire transfers? Michael Janke (Oct 13)

Michael L. Artz

Snort-supported link-layer types Michael L. Artz (Oct 30)

Michael Miller

Using snort for network stats? Michael Miller (Oct 28)

Michael . Mulholland

Updating signatures in IDS policy Manager Michael . Mulholland (Dec 17)
Re: SCAN UPnP service discover attempt Michael . Mulholland (Dec 30)
HP Digital Sender Michael . Mulholland (Dec 12)
Re: SCAN UPnP service discover attempt Michael . Mulholland (Dec 30)

Michael Parkinson

RE: Flushing the data from the MySQL database Michael Parkinson (Oct 14)

michaels

Win32 Error: service is not responding to the control function michaels (Dec 30)

Michael Scheidell

Re: Snort/Logsnorter/PureSecure Cisco ACL's Michael Scheidell (Nov 17)
Re: Re: ACID alternative Michael Scheidell (Oct 29)
Re: 2.0.3 strange problems Michael Scheidell (Nov 06)
Re: 2.0.3 strange problems Michael Scheidell (Nov 05)

Michael Schwartzkopff

Re: Snort and Suse 8.2 Michael Schwartzkopff (Nov 11)

Michael Sierchio

Re: SNMP Support in FreeBSD Michael Sierchio (Oct 21)
Re: SNMP Support in FreeBSD Michael Sierchio (Oct 24)
Re: snort + freebsd tuning Michael Sierchio (Oct 21)
ICMP w/payload of 1472 zeroes Michael Sierchio (Oct 28)
Re: Snort outside firewall Michael Sierchio (Nov 03)
Re: SNMP Support in FreeBSD Michael Sierchio (Oct 21)
sid:663; rev:6 false alerts/bug Michael Sierchio (Oct 17)
Re: ICMP w/payload of 1472 zeroes Michael Sierchio (Oct 28)
Re: tippingpoint] Michael Sierchio (Oct 17)
Re: snort tcpdump binary file mirroing overnetwork. Michael Sierchio (Oct 25)
Re: ICMP w/payload of 1472 zeroes Michael Sierchio (Oct 31)
Re: SNMP Support in FreeBSD Michael Sierchio (Oct 21)
Re: Dropping packets why? Michael Sierchio (Oct 27)
Re: Snort Wireless Michael Sierchio (Nov 05)

Michael Steele

RE: What are the differences between and IPS and IDS? Michael Steele (Oct 01)
RE: Where to start snort from ????? Michael Steele (Nov 04)
RE: SnortSnarf in Windows Michael Steele (Oct 07)
RE: Announcement: Visual Intrusion Analyzer (Beta Release) Michael Steele (Oct 10)
RE: Snort on Windows : system error 1067 Michael Steele (Oct 09)
RE: [snort-mysql] logging OK to logfile, not to mysql database Michael Steele (Dec 03)
RE: ACID & MySQL (Sensor) Michael Steele (Dec 15)
RE: MYSQL Error on Windows XP snort install Michael Steele (Dec 03)
RE: How to log on MySql Michael Steele (Nov 22)
RE: WinSnort and MSSQL Problem Michael Steele (Dec 30)
RE: snort on linux and acid on windows Michael Steele (Oct 13)
RE: Multiple Win32 occurances? Michael Steele (Nov 26)
RE: Windows Snort Users Michael Steele (Oct 25)
RE: Snort on Windows - Help Michael Steele (Oct 25)
RE: snort-mysql, logging on TWO sql servers Michael Steele (Nov 29)
RE: Same config, FreeBSD vs OpenBSD, WAY different results Michael Steele (Oct 12)
RE: CyberKit 2.2 Ping, its driven me Nuts.. Michael Steele (Dec 29)
RE: Multiple Win32 occurances? Michael Steele (Nov 25)
RE: [UPGRADING from 1.8.6] Michael Steele (Nov 01)
RE: Multiple Win32 occurances? Michael Steele (Nov 26)
RE: IMAGES? Michael Steele (Dec 11)
RE: MYSQL Error on Windows XP snort install Michael Steele (Dec 03)
RE: Re: Log Rotation (fwd) Michael Steele (Dec 05)
Strategic Change at Silicon Defense.com Michael Steele (Nov 03)
RE: SnortSnarf in Windows Michael Steele (Oct 03)
RE: MYSQL Error on Windows XP snort install Michael Steele (Dec 02)
RE: FW:[Snort-users] RE: slashes in SQL statement a problem? Michael Steele (Dec 04)
RE: Attack on snort running in Public Zone Michael Steele (Nov 18)
RE: SnortSnarf Michael Steele (Oct 16)
RE: SnortSnarf in Windows Michael Steele (Oct 07)
RE: Corrupt Snort Logging - Win32 Terminal Server 2000 Michael Steele (Dec 03)
RE: snort-mysql, logging on TWO sql servers Michael Steele (Nov 29)
RE: WinSnort and MSSQL Problem Michael Steele (Dec 31)
RE: RE: Attack on snort running in Public Zone Michael Steele (Nov 14)
RE: WinSnort and MSSQL Problem Michael Steele (Dec 31)
WINSNORT.com - Major Announcement - MSSQL Guides Michael Steele (Nov 05)
RE: Snort Rules Michael Steele (Nov 26)
RE: block connections in IPS Michael Steele (Oct 02)
RE: WinSnort and MSSQL Problem Michael Steele (Dec 30)
RE: help Michael Steele (Nov 29)
RE: Snort on windows Michael Steele (Oct 03)
RE: Spade/Spice and Snort? Michael Steele (Nov 03)
RE: Snort 1.8.7 does not log anything (OS: SuSE 8.1) Michael Steele (Dec 10)
RE: MYSQL Error on Windows XP snort install Michael Steele (Dec 03)
Official Grand Opening of - WINSNORT.com Michael Steele (Oct 05)
RE: ACID 0.9.6b24 inactive references link Michael Steele (Nov 18)
RE: Multiple Win32 occurances? Michael Steele (Nov 26)
RE: Snort deamon mode packet drop's statistic Michael Steele (Dec 11)
RE: unknown preprocessor "http_inspect" Michael Steele (Dec 15)
RE: RE:RE: [Snort-users] FW:[Snort-users] RE: slashes in SQL statement a problem? Michael Steele (Dec 04)
RE: RE: Attack on snort running in Public Zone Michael Steele (Nov 14)
RE: FW: Snortsnarf: First_Last undefined Michael Steele (Dec 11)
WINSNORT.com - Announcements (UNIX/Win32)! Michael Steele (Nov 16)
RE: Ref Error 1067 Michael Steele (Nov 07)
RE: Unable to open rules file: reference.config or ./reference.config Fatal Error, Quitting.. Michael Steele (Oct 31)
RE: got a little problem with acid and snort logging Michael Steele (Nov 22)
RE: Corrupt Snort Logging - Win32 Terminal Server2000 Michael Steele (Dec 04)
RE: Installing SnortCenter on a Windows 2000 machine Michael Steele (Nov 26)
Strategic Change at Silicon Defense.com Michael Steele (Nov 01)
RE: Spade/Spice and Snort? Michael Steele (Nov 01)
RE: Problem with settin up Snort on win XP Michael Steele (Dec 15)
RE: WinSnort and MSSQL Problem Michael Steele (Dec 30)
RE: Multiple Win32 occurances? Michael Steele (Nov 25)
RE: SnortSnarf in Windows Michael Steele (Oct 07)
RE: -l parameter Michael Steele (Dec 08)
RE: Snor logging to mysql with no ip on monitored interface Michael Steele (Dec 31)
RE: Import 1 snortdb into another for "1 place monitoring" Michael Steele (Dec 15)
WINSNORT.com - Major Announcement - MSSQL Guides Michael Steele (Nov 05)
RE: SnortSnarf in Windows Michael Steele (Oct 05)
RE: SnortSnarf Michael Steele (Oct 14)
RE: on windows Michael Steele (Oct 02)
RE: MySQL Disconnects/Mudpit Michael Steele (Nov 26)
RE: flexresp - I have 2 stupid questions Michael Steele (Nov 26)
RE: FW: Snortsnarf: First_Last undefined Michael Steele (Dec 11)
RE: Can we send email using Outlook as the smtp server with ACID? Michael Steele (Oct 06)
Win32 Error: service is not responding to the control function Michael Steele (Dec 30)
RE: Snort Sensor Hardware Michael Steele (Dec 10)
RE: Spade/Spice and Snort? Michael Steele (Nov 03)
RE: How to log on MySql Michael Steele (Nov 22)
RE: SnortSnarf in Windows Michael Steele (Oct 07)
RE: Snort 1.8.7 does not log anything (OS: SuSE 8.1) Michael Steele (Dec 11)
RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Michael Steele (Dec 10)
RE: *very* many snort installations.. Michael Steele (Nov 26)
RE: Multiple Win32 occurances? Michael Steele (Nov 25)
RE: Monitoring traffic on 2 Interfaces Michael Steele (Nov 21)

Michael Thompson

MySQL Issues. Michael Thompson (Nov 06)
Help with config Michael Thompson (Dec 28)
Wanting to run Snort on DMZ Michael Thompson (Dec 24)

Michel Christophe

question about spp stream4 retransmission Michel Christophe (Dec 20)
snort-mysql, logging on TWO sql servers Michel Christophe (Nov 29)
Snort-Mysql and ssl Michel Christophe (Dec 12)
RE: [snort-mysql] logging OK to logfile, not to mysql database Michel Christophe (Dec 04)
[snort-mysql] logging OK to logfile, not to mysql database Michel Christophe (Dec 03)
[Fwd: Re: snort-mysql, logging on TWO sql servers] Michel Christophe (Dec 01)
starting snort-Mysql on Mandrake 9.2 Michel Christophe (Dec 10)

mike

compile error "parse error before `sa_family_t" mike (Nov 23)
Re: 2 Wanting to run Snort on DMZ mike (Dec 24)

Mike Cojocea

Re: Is it really a HUB? Mike Cojocea (Oct 27)
Re: ICMP w/payload of 1472 zeroes Mike Cojocea (Oct 28)
Re: Problem to sniff 80, 110, 25 and 21 ports. Mike Cojocea (Oct 29)

Mike Couch

slahes in SQL statement a problem? Mike Couch (Nov 11)

Mike Koponick

ACID - PHP Mike Koponick (Dec 17)
RE: error Mike Koponick (Dec 12)
Preprocessor2 Mike Koponick (Oct 29)
Remote Syslog... Mike Koponick (Oct 06)
Remote Syslog... Mike Koponick (Oct 06)
Reporting - Network Analyzers Mike Koponick (Dec 02)

Mike Maki

Another Not IPv4 Datagram Mike Maki (Dec 17)
No alert_smb in 2.1.0? Mike Maki (Dec 19)

Mike Philip

ERROR /etc/snort/snort.eth1.conf (88): Mike Philip (Dec 23)

mik sib

snort 2.01 + guardian 1.7 and 1.6 problem mik sib (Dec 23)

Milo Velimirovic

Re: Help Milo Velimirovic (Dec 09)
Re: Mac Adresses in Acid Screens Milo Velimirovic (Oct 10)

m.massarenti () cineca it

How can i see the payload of extra-packet captured by tag option ???? m.massarenti () cineca it (Oct 15)

Mokum

*very* many snort installations.. Mokum (Nov 26)

monroe

Snort.org packages with bad sigs? monroe (Oct 06)

mouss

Re: Snort Rules mouss (Nov 07)
Re: TCP header length exceeds packet length mouss (Nov 03)

Muenz, Michael

Rule for MS03-046 ? Muenz, Michael (Oct 16)

Naman Latif

Problem installing Barnyard with mySQL support Naman Latif (Nov 24)
RE: Snort Setup Scenario - Suggestions Naman Latif (Oct 09)
RE: SHELLCODE Attacks Naman Latif (Dec 05)
Newbie Snort Questions Naman Latif (Dec 02)
Pre-Processor Alerts based on Traffic Flow Direction Naman Latif (Dec 05)
RE: Snort Alert Help for Rule : SID=2 Naman Latif (Dec 04)
Snort Setup Scenario - Suggestions Naman Latif (Oct 09)
SHELLCODE Attacks Naman Latif (Dec 05)
Snort Alert Help for Rule : SID=2 Naman Latif (Dec 04)

Neal Timm

xml plugin Neal Timm (Dec 29)

Nelson, Ben

RE: Snort -> Mysql formatting IP addresses Nelson, Ben (Oct 16)
RE: Snort -> Mysql formatting IP addresses Nelson, Ben (Oct 16)

Nerijus Krukauskas

flexresp2 not working in snort 2.0.2 Nerijus Krukauskas (Oct 01)
Re: Snort 2.0.2 and Oracle DB Nerijus Krukauskas (Oct 29)
Re: Configuration of Flexresp2 Nerijus Krukauskas (Nov 24)
Re: exact phrase match Nerijus Krukauskas (Dec 15)

news

Getting Snort to work with http://www.mynetwatchman.com/ news (Dec 14)

Nic¤

alert_unixsock Nic¤ (Oct 16)

Nicholas Bernstein

acid, sig_priority Nicholas Bernstein (Dec 02)
postgresql backend Nicholas Bernstein (Dec 02)
oinkmaster Nicholas Bernstein (Dec 03)

Nick Duda

RE: Re: [Snort-users] Who doesn't care about virus rules, and why? Nick Duda (Nov 07)

Nick Oliver

Re: RE: Snort Logs Nick Oliver (Oct 14)
Re: difficulties in alert generation Nick Oliver (Oct 07)
Re: how can one tell if snort works Nick Oliver (Oct 19)

nick travis

Log all nick travis (Nov 06)
Log all traffic? nick travis (Nov 05)
Packet size in snort log nick travis (Nov 10)

Nigel Houghton

Re: Problem with Snort 2.0.4 and Snort Rules Nigel Houghton (Nov 18)
Re: snort + freebsd tuning Nigel Houghton (Oct 28)
Re: Is it an real attack ? Nigel Houghton (Dec 29)
Re: snort + freebsd tuning Nigel Houghton (Oct 28)

Niko

Data_payload logging in database is truncated Niko (Oct 11)
Data_payload logging in database is truncated Niko (Oct 05)

Nordwall, Douglas J

Re: Snort+Kismet Nordwall, Douglas J (Oct 28)
Slightly OT: high speed packet generation Nordwall, Douglas J (Dec 03)
Re: Rule to exclude a specific IP in Snort Nordwall, Douglas J (Oct 20)

nosnos

snort and proxy nosnos (Nov 07)
snort and email Nosnos (Nov 07)
snort email Nosnos (Nov 07)

Nyman Erik-IT-Enheten

Snort not running Nyman Erik-IT-Enheten (Nov 10)

obelknobe 1

Snort - mysql configuration missing mysql.h header files obelknobe 1 (Dec 30)

O'Flynn, Derek

RE: HTTP Packet Capture O'Flynn, Derek (Oct 29)
RE: Snort with IPSec O'Flynn, Derek (Nov 04)
RE: Problem to sniff 80, 110, 25 and 21 ports. O'Flynn, Derek (Oct 29)
RE: Dropping packets why? O'Flynn, Derek (Oct 27)
Snort Startup Erro - "libmysqlclient.so.12 not found" O'Flynn, Derek (Oct 16)
RE: Snort Startup Erro - "libmysqlclient.so.12 not found" O'Flynn, Derek (Oct 16)

Olaf Schreck

Re: (no subject) Olaf Schreck (Nov 04)

omi

Re: Snort logging to encrypted MySQL (ssl) server? omi (Nov 04)

Özgüç Bayrak

Snort restart? Özgüç Bayrak (Dec 29)
ICMP L3retriever Ping Özgüç Bayrak (Dec 22)

Pari Sahai

quick question Pari Sahai (Oct 16)

Patrick Harper

Snort on RH 9 Updated documentation Patrick Harper (Oct 06)
Re: Snort 2.0.2 install location Patrick Harper (Oct 07)
Re: Not Picking up Much WHY "I am pulling out my hair" Patrick Harper (Oct 12)
Re: Snort not running Patrick Harper (Nov 10)
Re: installing snort with Mysql that has come with redhat 9 Patrick Harper (Nov 09)
RE: Snort not running Patrick Harper (Nov 10)
Re: [UPGRADING from 1.8.6] Patrick Harper (Nov 01)
Re: Failed Snort Installation Patrick Harper (Nov 01)

Patrick Nicholls

installing snort - Red Hat 9 - basic questions Patrick Nicholls (Nov 20)

Patrick S. Harper - CISSP

Re: Help Patrick S. Harper - CISSP (Dec 09)
Re: Help Patrick S. Harper - CISSP (Dec 09)

Patrik Astrom

Snort 2.0.2 payload corruption/Mix up. Patrik Astrom (Oct 07)

Paul . CTR . Passey

Paul CTR Passey/AEA/CNTR/FAA is out of the office. Paul . CTR . Passey (Dec 07)

Paulius

Re: ICMP REDIRECT HOST Paulius (Nov 29)
Re: ICMP REDIRECT HOST Paulius (Nov 29)
ICMP REDIRECT HOST Paulius (Nov 29)

Paul Lane

NETBIOS nimda.eml Paul Lane (Oct 22)

Paulo Filipe Mira

RE: snort + cisco 4x00 catalysts Paulo Filipe Mira (Oct 13)
snort + cisco 4x00 catalysts Paulo Filipe Mira (Oct 08)

Paul Schmehl

Re: Remote NIDS Paul Schmehl (Dec 11)
Re: Multiple Win32 occurances? Paul Schmehl (Nov 25)
Re: Nachi false positives Paul Schmehl (Oct 29)
Re: exact phrase match Paul Schmehl (Dec 15)
Re: spp_rpc_decode Paul Schmehl (Dec 05)
Re: Wipe out Snort database Paul Schmehl (Oct 04)
RE: Multiple Win32 occurances? Paul Schmehl (Nov 25)
RE: Dropping packets why? Paul Schmehl (Oct 27)
Re: help shut this line up: can't find httpd.h Paul Schmehl (Nov 19)
Re: running oinkmaster - Error: unable to download..... Paul Schmehl (Oct 29)
Re: MYSQL Error Paul Schmehl (Dec 20)
Re: ERROR: ERROR /snortcenter/rules/snort.eth0.conf (88): Bad arguments to byte_test: Paul Schmehl (Dec 20)
RE: Multiple Win32 occurances? Paul Schmehl (Nov 25)
Re: Multiple Win32 occurances? Paul Schmehl (Nov 25)
RE: rules with flow:established not working Paul Schmehl (Oct 25)
Re: [ACID-search-year] Paul Schmehl (Nov 15)

Paul van Empelen

Bus error on Solaris/Sparc with spo_database.c Paul van Empelen (Dec 30)

Pedro G . Méndez

Problem with SWATCH for Snort logs. Pedro G . Méndez (Dec 03)
My Snort get stuck when I stop/start many times. Pedro G . Méndez (Nov 07)

Per-Erik Persson

Re: postgresql backend Per-Erik Persson (Dec 04)

Perkins

Re: Snort install error finding mysql.h Perkins (Oct 28)

Perrymon, Josh L.

snortsnarf problems Perrymon, Josh L. (Nov 12)
Building snort 2.0.3 on FreeBSD 4,8 Perrymon, Josh L. (Nov 06)

Pete

log messsage question Pete (Nov 13)

peter

Re: Help with config peter (Dec 28)

peter . grosse-hering

Alerting concept... peter . grosse-hering (Dec 11)

peter pilsl

which book on snort ? peter pilsl (Oct 04)

Peter Schawacker

Re: Slightly OT: high speed packet generation software Peter Schawacker (Dec 02)

Peters, Michael D.

Portscan log file consolidation. Peters, Michael D. (Oct 29)
ACID patch for portscan2??? Peters, Michael D. (Oct 28)
ACID alternative? Peters, Michael D. (Oct 27)
RE: ACID Email alerts Peters, Michael D. (Oct 31)
No portscan alerts shown in acid. Peters, Michael D. (Oct 17)
RE: Passive Tap Help Peters, Michael D. (Dec 01)
Passive Ethernet Tap. Peters, Michael D. (Nov 26)
Passive Tap Help Peters, Michael D. (Dec 01)

Petrit Podrimja

same source and destination Petrit Podrimja (Dec 04)
help Petrit Podrimja (Nov 29)

Petriz, Pablo

Is it really a HUB? Petriz, Pablo (Oct 24)
Re: Is it really a HUB? Petriz, Pablo (Nov 26)

Philip Davidson

anyone have a good Swen sig Philip Davidson (Oct 31)
RE: SCAN UPnP service discover attempt Philip Davidson (Oct 16)

Philip Nedev

Re: Parameters of Computer with 1G or 2x1G Ethenet NIC Philip Nedev (Oct 24)
Hot to see how many packets my snort is droping Philip Nedev (Oct 30)

Phil Wood

Re: Message from the void Phil Wood (Nov 09)
Re: Question about Ring PCAP\Snort\Environment Variables Phil Wood (Nov 07)
Re: [Snort-devel] number of packets processed is mis-calculated under Linux Phil Wood (Dec 08)
Re: Figured it out!: Snort not outputting statistics on exit Phil Wood (Nov 16)
Re: Turbo patch/PACKET_RX_RING with 2.4.x kernels Phil Wood (Nov 09)
Re: TCP header length exceeds packet length Phil Wood (Nov 03)

Pierce Chuck

Snort Install Pierce Chuck (Nov 03)

Pieter Claassen

Snort-reports update Pieter Claassen (Dec 09)
IPS best practice guide pieter claassen (Oct 02)
Release of Snort Management Reports pieter claassen (Oct 27)
Re: Snort Kernel Module pieter claassen (Oct 06)
Re: Snort Kernel Module pieter claassen (Oct 07)

pmahesh90979

Snort on windows pmahesh90979 (Oct 02)

Poppi, Sandro

AW: snort idmef plugin Poppi, Sandro (Nov 25)

Potts, Ross A.

RE: IP country lookup Potts, Ross A. (Nov 25)
RE: Is it really a HUB? Potts, Ross A. (Oct 29)

Povel, Michael

Snort 2.0.4 and threshold Povel, Michael (Nov 11)
AW: Snort 2.0.4 and threshold Povel, Michael (Nov 12)

PPowenski

RE: mysql.sock PPowenski (Oct 03)
RE: mysql-Problem PPowenski (Oct 07)
RE: Snort 2.0.2 with MySQL PPowenski (Oct 01)
RE: Snort logging to encrypted MySQL (ssl) server? PPowenski (Nov 05)

qodqod

got a little problem with acid and snort logging qodqod (Nov 22)

Raber

os fingerprinting again Raber (Dec 11)
running snort under LIDS Raber (Dec 18)

RAGUNATHAN, SOUMYA

on windows RAGUNATHAN, SOUMYA (Oct 02)

Rahul

does snort detect ! Rahul (Nov 14)

rajeswaran mugesh

Problem during snort-mysql installation. rajeswaran mugesh (Oct 02)
Re: Snort Installation trouble. rajeswaran mugesh (Oct 07)
Re:Snort installation problem rajeswaran mugesh (Oct 07)
Installation problem with snort. rajeswaran mugesh (Oct 05)

RAJNEEL DHOTRE

Re: Flexresp2 installation and configuration Problem RAJNEEL DHOTRE (Dec 25)
Traffic flow RAJNEEL DHOTRE (Oct 28)
Snort Sensor RAJNEEL DHOTRE (Oct 27)
RE: Traffic flow RAJNEEL DHOTRE (Oct 28)
Flexresp2 installation and configuration Problem RAJNEEL DHOTRE (Dec 23)

Rajneel.Dhotre

Snort on Windows - Help Rajneel.Dhotre (Oct 25)

Ralf Henze

Using ACID AND SnortSnarf - How? Ralf Henze (Dec 12)

Ralf Mellis

Re: Snort 1.8.7 does not log anything (OS: SuSE 8.1) Ralf Mellis (Dec 13)
Snort 1.8.7 does not log anything (OS: SuSE 8.1) Ralf Mellis (Dec 10)
Re: Snort 1.8.7 does not log anything (OS: SuSE 8.1) Ralf Mellis (Dec 11)
Re: Snort 1.8.7 does not log anything (OS: SuSE 8.1) Ralf Mellis (Dec 11)

Ralf Spenneberg

Re: (no subject) Ralf Spenneberg (Oct 09)
Re: Installation Problem Ralf Spenneberg (Oct 29)
Re: ICMP / drop. Ralf Spenneberg (Oct 09)
Re: Using ACID AND SnortSnarf - How? Ralf Spenneberg (Dec 12)
RE: Information Not Appearing On ACID Console Ralf Spenneberg (Oct 09)
Re: unknown preprocessor "http_inspect" Ralf Spenneberg (Dec 15)
Re: Syslog Alert format? Ralf Spenneberg (Dec 12)
Re: snort DB error.... Ralf Spenneberg (Oct 29)
Re: snort DB error.... Ralf Spenneberg (Oct 25)
Re: Rule order? Ralf Spenneberg (Dec 18)
Re: Excluding particular IP address ranges from scans Ralf Spenneberg (Oct 29)

ramesh naidu

Problem with MSSQL and ACID ramesh naidu (Oct 25)
Redundant alerts in ACID ramesh naidu (Oct 25)

ramesh neelmegh

L7 protocol analysis and snort ramesh neelmegh (Oct 19)

Ramesh Patil

Problem in accessing ACID homepage Ramesh Patil (Dec 14)

Ramon Barquier

Alerts timestamp Ramon Barquier (Oct 22)

ravath k

snort on linux and acid on windows ravath k (Oct 13)

Ravi Kumar

Re: Installation problem with snort. Ravi Kumar (Oct 06)
Re: block connections in IPS Ravi Kumar (Oct 02)
Re: block connections in IPS Ravi Kumar (Oct 02)
Re: Design Document of Snort Ravi Kumar (Nov 23)
Re: Snort with IPSec Ravi Kumar (Nov 05)
block connections in IPS Ravi Kumar (Oct 01)
Re: Snort Kernel Module Ravi Kumar (Oct 06)
Re: What are the differences between and IPS and IDS? Ravi Kumar (Oct 01)

Remus

Snort.conf variables Remus (Nov 10)
Re: Snort.conf variables Remus (Nov 11)

Reshmi Jain

problem in snort.. Reshmi Jain (Oct 01)

Ricardo Londono

RE: RE: [Snort-sigs] capture email Ricardo Londono (Nov 05)

Rich Adamson

Multiple Win32 occurances? Rich Adamson (Nov 25)
Re: Help with config Rich Adamson (Dec 28)
Re: SRI patent on "Hierarchical event monitoring and analysis" Rich Adamson (Oct 05)
Re: Multiple Win32 occurances? Rich Adamson (Nov 25)
Re: Is it really a HUB? Rich Adamson (Oct 25)
RE: Fallacies and lies. Rich Adamson (Nov 05)
html post question Rich Adamson (Dec 09)

Richard Bejtlich

Notes on Sourcefire seminar Richard Bejtlich (Oct 07)
New Sguil 0.3.0 Install Doc for FreeBSD 4.9 REL Richard Bejtlich (Nov 12)
SRI patent on "Hierarchical event monitoring and analysis" Richard Bejtlich (Oct 04)
RE: [Off topic] Traffic analysis Richard Bejtlich (Dec 05)
RE: [Off topic] Traffic analysis Richard Bejtlich (Dec 05)
RE: how to convert tcpdump file back to its binary form Richard Bejtlich (Nov 20)
Combining two FreeBSD interfaces using Netgraph, part 2 Richard Bejtlich (Dec 22)
RE: Using Snort as IDS + packet logger Richard Bejtlich (Oct 15)

Richard Gaywood

Lots of outgoing portscans Richard Gaywood (Oct 22)
Re: Lots of outgoing portscans Richard Gaywood (Oct 22)

Richard Pitkanen

Snort fails to dump alerts to Solaris 8 Syslog Richard Pitkanen (Oct 06)

Richard St John

Re:Snort-users digest, Vol 1 #3831 - 5 msgs Richard St John (Dec 17)

Richard Worwood

rpm installation mysql support Richard Worwood (Dec 16)

Rich Stryker

RE: flexresp - I have 2 stupid questions Rich Stryker (Nov 26)
RE: tippingpoint Rich Stryker (Oct 16)
flexresp - I have 2 stupid questions Rich Stryker (Nov 26)
Multiple sensors - setup with SNORT and SNORTSNARF Rich Stryker (Nov 17)
trouble creating the ann-dir Rich Stryker (Nov 06)
RE: tippingpoint Rich Stryker (Oct 14)

risc

RE: mysql-Problem risc (Oct 07)
RE: mysql-Problem risc (Oct 07)
Re: difficulties in alert generation risc (Oct 07)

Rob Burris

Re: question about ICMP echo reply (undefinted code) rule Rob Burris (Nov 20)
question about ICMP echo reply (undefinted code) rule Rob Burris (Nov 20)

Rob Craig

Byte_test SnortCenter Troubles?!? Rob Craig (Oct 02)

Robert A. Desautels

IDS Robert A. Desautels (Dec 29)

Robert Craig

SnortCenter Errors with Byte_Test? Robert Craig (Oct 02)

Robert Kriz

scan.log and directory entry Robert Kriz (Nov 10)

Roberto Bosticardo

bad calculation of the amount of drop Roberto Bosticardo (Dec 18)
Re: Snortcenter Roberto Bosticardo (Oct 13)
ids + umts Roberto Bosticardo (Oct 30)

Roberto Suarez Soto

Re: CyberKit 2.2 Ping, its driven me Nuts.. Roberto Suarez Soto (Dec 29)

robert schwartz

RE: Snort Sensor Hardware robert schwartz (Dec 10)
RE: Snort on OpenBSD -- finding mysqlclient library robert schwartz (Dec 04)
Managing many sensors robert schwartz (Dec 30)

Robert Vance Jr

Re: Barnyard Acid MySQL problem Robert Vance Jr (Nov 06)

Rob Flentge

Rob Flentge/Mechanicsburg/US/Exel is out of the office. Rob Flentge (Oct 01)
Rob Flentge/Mechanicsburg/US/Exel is out of the office. Rob Flentge (Nov 12)
Rob Flentge/Mechanicsburg/US/Exel is out of the office. Rob Flentge (Oct 09)

Rob Schrack

Re: 0.x.x.x source IP Rob Schrack (Dec 12)

Rodrigo Lima de Oliveira

Re: Snort-2.0.0 : ODBC : Unnable to Connect Rodrigo Lima de Oliveira (Oct 07)
SNORT 2.0.0 :: ODBC :: FREETDS :: SQL SERVER Rodrigo Lima de Oliveira (Oct 08)

Rohan Amin

conversation and portscan2 timeout parameters Rohan Amin (Nov 06)

Romano, Chris

SID 1841 Romano, Chris (Dec 29)
ATTACK-RESPONSES id check returned root Romano, Chris (Dec 30)
SID 1841 Romano, Chris (Dec 29)

Ron Shuck

spp_portscan2 and 2.0.6 Ron Shuck (Dec 30)

Ross Bram

Can't Start Snort - ERROR: No netmask specified for home network! Ross Bram (Oct 16)

RSA

Is it an real attack ? RSA (Dec 29)

Rudi Starcevic

Re: AW: Snort / Barnyard error. Rudi Starcevic (Oct 14)
Snort + Apache modules. Rudi Starcevic (Oct 10)
ICMP / drop. Rudi Starcevic (Oct 09)
Re: which book on snort ? Rudi Starcevic (Oct 04)
Re: ICMP / drop. Rudi Starcevic (Oct 09)
Snort / Barnyard error. Rudi Starcevic (Oct 14)
Barnyard HTML output error Rudi Starcevic (Oct 15)
Re: ICMP / drop. Rudi Starcevic (Oct 09)
Re: Snort and SSL Rudi Starcevic (Oct 17)

Runion, Matthew D

Snort 2.0.2 and Oracle DB Runion, Matthew D (Oct 28)

Russell Fulton

(no subject) Russell Fulton (Dec 12)
Tagged packets in logs Russell Fulton (Dec 23)
heavily switched networks Russell Fulton (Dec 24)

Ryan Finnesey

Managed Snort/IDS? Ryan Finnesey (Oct 21)
RE: Managed Snort/IDS? Ryan Finnesey (Oct 28)

Ryan Potts

MSSQL, linux, odbc Ryan Potts (Dec 09)

Ryan Russell

Re: Problem with "Established" keyword Ryan Russell (Dec 17)
Problem with "Established" keyword Ryan Russell (Dec 17)

Salvatore Pagano

problem with snort installation Salvatore Pagano (Nov 20)

sam

Re: ATTACK-RESPONSES id check returned root sam (Dec 30)
Distributed tcpdump output log file from snort. sam (Oct 23)

sama

snort-users () lists sourceforge net sama (Dec 09)

Samuel C. Adams

bad frag bits Samuel C. Adams (Nov 25)

Sam Wun

Re: how to convert payload data from MySQL data table to tcpdump formated data? Sam Wun (Oct 23)
how to log payload data to MySQL and /var/log/snort/ Sam Wun (Oct 20)

samwun

SnortCenter Sensor failed to start samwun (Oct 18)
RE: how to populate snort payload data to MySQL? samwun (Oct 22)
script to extract payload info from mysql snort table samwun (Oct 19)
RE: how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 23)
RE: how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 23)
RE: how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 23)
RE: how to populate snort payload data to MySQL? samwun (Oct 22)
RE: snort tcpdump binary file mirroing overnetwork. samwun (Nov 02)
snort tcpdump binary file mirroing over network. samwun (Oct 24)
how to convert payload data from MySQL data table to tcpdump formated data? samwun (Oct 22)
Missing of application/data link layer capture. samwun (Oct 19)
RE: snort tcpdump binary file mirroing over network. samwun (Oct 24)
how to populate snort payload data to MySQL? samwun (Oct 22)
problem with snortcenter samwun (Oct 19)
error in running SnortSnarf samwun (Oct 19)

Sandro Poppi

ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.1alpha released Sandro Poppi (Nov 24)

santosh bethi

Setting Password for root while configuring mySQL santosh bethi (Nov 11)
installing snort with Mysql that has come with redhat 9 santosh bethi (Nov 09)

santosh reddy

difficulties in ALERT generation... santosh reddy (Oct 06)
how to e-mail alerts from acid page santosh reddy (Oct 08)
difficulties in alert generation santosh reddy (Oct 07)

Sarah Bassram

how to convert tcpdump file back to its binary form Sarah Bassram (Nov 19)
How to read tdump.dat text file in snort? Sarah Bassram (Nov 20)

Saravanan

Re : src/snortman.tex Saravanan (Dec 10)

scheidell

Re: Snort rules merging and duplicate entries (3D Linked List) scheidell (Oct 02)
Re: Same config, FreeBSD vs OpenBSD, WAY different results scheidell (Oct 13)

Schmehl, Paul L

RE: Mac Adresses in Acid Screens Schmehl, Paul L (Oct 10)
RE: Setting Password for root while configuring mySQL Schmehl, Paul L (Nov 11)
RE: exact phrase match Schmehl, Paul L (Dec 18)
RE: Standalone threshold Schmehl, Paul L (Nov 13)
spp_rpc_decode Schmehl, Paul L (Dec 03)
RE: Re: ACID / ALERT console browsing issue Schmehl, Paul L (Dec 03)
RE: SCAN UPnP service discover attempt Schmehl, Paul L (Oct 15)
RE: how to e-mail alerts from acid page Schmehl, Paul L (Oct 08)
RE: SNORT and LIBPCAP Schmehl, Paul L (Nov 20)
RE: RE: [Snort-sigs] capture email Schmehl, Paul L (Nov 04)
RE: Snort bild with MSSQL support Schmehl, Paul L (Oct 31)
RE: running oinkmaster - Error: unable to download..... Schmehl, Paul L (Oct 30)
RE: welchia rule Schmehl, Paul L (Nov 04)
RE: Flushing the data from the MySQL database Schmehl, Paul L (Oct 14)
RE: welchia rule Schmehl, Paul L (Nov 04)
RE: welchia rule Schmehl, Paul L (Nov 05)
RE: welchia rule Schmehl, Paul L (Nov 04)
RE: Who doesn't care about virus rules, and why? Schmehl, Paul L (Nov 06)
RE: Mac Adresses in Acid Screens Schmehl, Paul L (Oct 10)
RE: looking into SNORT Schmehl, Paul L (Nov 06)
RE: Building snort 2.0.3 on FreeBSD 4,8 Schmehl, Paul L (Nov 06)
RE: ACID Graphs Schmehl, Paul L (Nov 21)
RE: rules with flow:established not working Schmehl, Paul L (Oct 24)
RE: Multiple Win32 occurances? Schmehl, Paul L (Nov 26)
RE: welchia rule Schmehl, Paul L (Nov 04)
RE: OT: Spam Mail on List? Schmehl, Paul L (Oct 27)
RE: Problem: Unknown ClassType Schmehl, Paul L (Oct 22)
Welchia/Nachi rule Schmehl, Paul L (Nov 05)
RE: rules and the EXTERNAL_NET variable Schmehl, Paul L (Nov 26)
RE: OT: Spam Mail on List? Schmehl, Paul L (Oct 27)
RE: ACID Email alerts Schmehl, Paul L (Oct 31)

Scot Scot

Re: RE: Attack on snort running in Public Zone Scot Scot (Nov 14)
Re: Using Snort as IDS + packet logger Scot Scot (Oct 16)
Re: Windows Event Log & alert.ids Scot Scot (Oct 18)
Re: Announcement: Visual Intrusion Analyzer (Beta Release) Scot Scot (Oct 10)
Re: Windows Event Log & alert.ids Scot Scot (Oct 16)

Scott Carpenter

Snort mysql with no ip interface Scott Carpenter (Dec 30)

Scott Elgram

Alert_SMB Scott Elgram (Nov 11)
looking into SNORT Scott Elgram (Nov 05)

scott j. lopez

Re: problem in snort.. scott j. lopez (Oct 02)

Scott Weller

Strange Loopback traffic Scott Weller (Oct 10)

Scott Zawalski

Linux Ring buffer packet capture vs. normal capture Scott Zawalski (Nov 20)
Turbo patch/PACKET_RX_RING with 2.4.x kernels Scott Zawalski (Nov 08)
Re: snort and suse 7.3 Scott Zawalski (Nov 20)
Improving overall performance of snort and stopping those drops Scott Zawalski (Nov 05)

Sean Lazar

Re: PLEASE CC ME Sean Lazar (Nov 08)
Re: exact phrase match Sean Lazar (Dec 15)

Sean Perry

Re: tippingpoint Sean Perry (Oct 14)

Sebastian Juraszek

Makefile, line 484: Unexpected ... Sebastian Juraszek (Dec 03)

sebastien desse

ACID 0.9.6b24 inactive references link sebastien desse (Nov 18)
SnortCenter : $EXTERNAL_NET value overwriten when updating configuration sebastien desse (Nov 18)
Sec configuration file Sebastien Desse (Nov 19)

seclists

Re: snort-inline question seclists (Oct 07)

Secureplay

Unknown datagram decoding problem Secureplay (Oct 26)
Re: SNORT 2.0.0 :: ODBC :: FREETDS :: SQL SERVER Secureplay (Oct 09)
Patch submission Secureplay (Oct 27)

Security Admin

RE: New Blaster variant? Security Admin (Oct 28)
SANS Honeypot Webcast with Lance Spitzner Security Admin (Oct 30)

Sergio Talens-Oliag

Re: Problems with the ordering inside the rules Sergio Talens-Oliag (Nov 07)
Problems with the ordering inside the rules Sergio Talens-Oliag (Oct 28)

Shaffer, Paul D

RE: error in webmin Shaffer, Paul D (Dec 30)
RE: Snor logging to mysql with no ip on monitored interface Shaffer, Paul D (Dec 31)
RE: WinSnort and MSSQL Problem Shaffer, Paul D (Dec 31)

Shane Smith

Re: Strange ICMP traffic. Perhaps a worm? Shane Smith (Dec 15)
Re: *very* many snort installations.. Shane Smith (Nov 26)

shanks

snort and sflow? shanks (Oct 22)
Re: snort and sflow? shanks (Oct 22)

Sharif Corinaldi

packets sent to OWN IP Sharif Corinaldi (Nov 14)

sharma krishna

help required sharma krishna (Oct 28)
help required sharma krishna (Oct 31)

Shashank Bhide

mysql.sock not found Shashank Bhide (Dec 04)

Shawn Cannon

Snortcenter Shawn Cannon (Oct 13)

Shawn Posthumus

Re: monitoring pflog0 on obsd Shawn Posthumus (Oct 08)
monitoring pflog0 on obsd Shawn Posthumus (Oct 08)

Shawn Truax

Re: problem with snortcenter Shawn Truax (Oct 23)
Re: Snort-MySQL problem Shawn Truax (Oct 01)
Re: Span Port to Fiber Tap Problems Shawn Truax (Oct 23)
Re: Troubles With Multiple Sensors Shawn Truax (Oct 24)
RE: snort tcpdump binary file mirroing overnetwork. Shawn Truax (Oct 25)
Re: Snort Success!!! Shawn Truax (Oct 23)
Re: AW: no payload on ppp0 Shawn Truax (Oct 25)
Re: snort IDS DFD Shawn Truax (Oct 23)
RE: Snort-MySQL problem Shawn Truax (Oct 13)
RE: Snort-MySQL problem Shawn Truax (Oct 06)
Re: Single Snort instance with multipleconfigurations (output) Shawn Truax (Oct 01)
Re: snort rules.... Shawn Truax (Oct 25)

Sheahan, Paul

Snort and SSL Sheahan, Paul (Oct 17)
/etc/passwd request increase Sheahan, Paul (Oct 30)
Snort 2.0.5 dropping packets Sheahan, Paul (Dec 19)
Can Snort do this? Sheahan, Paul (Oct 16)
HELP! Is snort combining packets?? Sheahan, Paul (Nov 14)

Shekar reddy

libnet fatal make error Shekar reddy (Nov 14)
ACID / ALERT console browsing issue Shekar Reddy (Nov 25)
Libnet make fatal error Shekar Reddy (Nov 13)
curl with ssl problem Shekar Reddy (Nov 19)
curl with ssl compilation problem Shekar reddy (Nov 19)
SNORT install problem Shekar Reddy (Nov 19)
snortcenter install problem Shekar reddy (Nov 19)

sherif tawfic

problem with PerfMonitor sherif tawfic (Oct 06)

Shishir Tejpal

NIDS Packet Capture Problem Shishir Tejpal (Oct 15)
NIDS Packet Capture Problem Shishir Tejpal (Oct 15)

sigtraq

sguil.tk error sigtraq (Dec 01)

Singh,Manoj [Ontario]

Snort Rules Singh,Manoj [Ontario] (Nov 24)
Snort Rules Singh,Manoj [Ontario] (Nov 26)

Sir Fenix

A tool like swatch Sir Fenix (Nov 06)
Re: [Snort-sigs] A tool like swatch Sir Fenix (Nov 06)

Sjögren Claes

Problem with settin up Snort on win XP Sjögren Claes (Dec 15)

Sleepy

Re: ACID alternative Sleepy (Oct 28)

Slighter, Tim

question about TAG Slighter, Tim (Nov 13)

SN ORT

Rule causes a Segmentation Fault SN ORT (Dec 11)

snort

RE: byte_test and Snortcenter snort (Oct 16)
RE: Snort logging to mysql with no ip on monitored interface snort (Dec 31)
RE: [Snort-sigs] rules update question Snort (Nov 04)
0.x.x.x source IP snort (Dec 12)
How much can SNORT handle?? SNORT (Nov 17)
Re: OT: Spam Mail on List? snort (Oct 27)
RE: [Snort-sigs] capture email Snort (Nov 04)
RE: Snort logging to mysql with no ip on monitored interface snort (Dec 31)
Flexible Response snort (Nov 14)
RE: Snort Rules Snort (Nov 04)
RE: Demarc + Snort 2.0.4/5 Snort (Nov 24)
RE: Snort outside firewall Snort (Nov 03)
Snor logging to mysql with no ip on monitored interface snort (Dec 31)
RE: FlexResp Error snort (Nov 07)
snort speed snort (Dec 26)
Demarc + Snort 2.0.4/5 Snort (Nov 24)
Fiber Tap SNORT (Nov 17)
RE: snort installation error Snort (Nov 04)
RE: Using snort for network stats? Snort (Oct 28)
RE: Snort logging to mysql with no ip on monitored interface snort (Dec 31)
RE: How to log on MySql Snort (Nov 21)
RE: [Snort-sigs] capture email Snort (Nov 04)
Snort mysql with no ip interface snort (Dec 23)
FlexResp Error snort (Nov 07)

snortmail

RE: WinSnort and MSSQL Problem snortmail (Dec 30)
RE: MYSQL Error on Windows XP snort install snortmail (Dec 03)
RE: Win32 Error: service is not responding to the control function snortmail (Dec 30)

snort-ml

RE: SnortSnarf in Windows snort-ml (Oct 10)
RE: SnortSnarf in Windows snort-ml (Oct 02)
RE: Problem with web-iis rules snort-ml (Oct 10)
RE: SnortSnarf in Windows snort-ml (Oct 01)
RE: SnortSnarf in Windows snort-ml (Oct 03)
RE: SnortSnarf in Windows snort-ml (Oct 07)
RE: SnortSnarf in Windows snort-ml (Oct 05)
RE: SnortSnarf in Windows snort-ml (Oct 02)

Snortty

RE: running oinkmaster - Error: unable to download..... Snortty (Oct 31)
Re: running oinkmaster - Error: unable to download..... Snortty (Oct 30)
oinkmaster.conf enterred disablesid - get enbalbed Snortty (Dec 16)
running oinkmaster - Error: unable to download..... Snortty (Oct 29)
Upgrading Snortalog.pl v1.9 to v2.0.0??? Snortty (Dec 16)
Re: running oinkmaster - Error: unable to download..... Snortty (Oct 30)
Re: Who doesn't care about virus rules, and why? Snortty (Nov 06)
How to install oinkmaster-0.8? Snortty (Oct 07)

snort user

Windows 2.0.4 compile problems snort user (Nov 06)
Problems compiling 2.0.3 on windows. snort user (Nov 06)
Re: Windows 2.0.4 compile problems snort user (Nov 07)

soldier Mx

SWATCH or a program to send the alerts to my mail! soldier Mx (Dec 29)

Sp0oKeR Labs

RES: Newbie Question on using snort Sp0oKeR Labs (Nov 12)
Snort Wireless Sp0oKeR Labs (Nov 05)
Re: Remote NIDS Sp0oKeR Labs (Dec 10)
Re: Log all traffic? Sp0oKeR Labs (Nov 06)
Re: snort and proxy Sp0oKeR Labs (Nov 07)

spoofy

snort 2.1.0 + OpenBSD = no compile spoofy (Dec 30)

SRH-Lists

RE: Barnyard Acid MySQL problem SRH-Lists (Nov 06)
RE: OT: Spam Mail on List? SRH-Lists (Oct 27)
RE: Snort Sensor Hardware SRH-Lists (Dec 10)
RE: heavily switched network questions SRH-Lists (Dec 31)
RE: small ? SRH-Lists (Nov 24)
RE: BAD-TRAFFIC loopback SRH-Lists (Dec 23)
RE: Increase performance with filter or pass-rules SRH-Lists (Nov 21)
RE: Snort 2.0.4 on OpenBSD 3.4 is dropping packets SRH-Lists (Nov 17)

Stacy J. Brandenburg

Re: Snort Machines Stacy J. Brandenburg (Nov 14)

Stein Boerge Sylvarnes

Re: Size of RAM required to run Snort Stein Boerge Sylvarnes (Nov 24)

Stephane Nasdrovisky

Re: Log Rotation Stephane Nasdrovisky (Dec 05)

Stephan Scholz

Re: snort inline behavior Stephan Scholz (Nov 26)
Re: snort inline behavior Stephan Scholz (Nov 26)

Stephan Weaver

PLEASE CC ME Stephan Weaver (Nov 07)

STEPHEN W. COREY - 5535

Import 1 snortdb into another for "1 place monitoring" STEPHEN W. COREY - 5535 (Dec 15)
RE: Snort 2.1 Problems with unicode.map STEPHEN W. COREY - 5535 (Dec 30)
Snort on multiple interfaces STEPHEN W. COREY - 5535 (Nov 19)

Stephen W. Thompson

Re: Mac Adresses in Acid Screens Stephen W. Thompson (Oct 10)
Re: Same config, FreeBSD vs OpenBSD, WAY different results Stephen W. Thompson (Oct 12)

Steve Bagwell

What is snort doing to the packets Steve Bagwell (Oct 16)

Steve Halligan

RE: Snort -> Mysql formatting IP addresses Steve Halligan (Oct 17)

Steve Knoch

RE: Snort, SuSE, Novell and Ximian Steve Knoch (Dec 29)

Steven Rudolph

RE: Barnyard Steven Rudolph (Oct 09)

Stewart Larsen

heavily switched networks Stewart Larsen (Dec 23)
heavily switched network questions Stewart Larsen (Dec 30)
Re: heavily switched networks Stewart Larsen (Dec 24)
Re: heavily switched networks Stewart Larsen (Dec 24)
Re: Bad Traffic, Port 0 Stewart Larsen (Dec 24)

Stiles, Eric

Failed Snort Installation Stiles, Eric (Oct 30)

SWIT

rules error with @!#$ snortcenter SWIT (Nov 19)
snortcenter SWIT (Nov 19)

Syed Zuhdi Syed Salim

Snort-MySQL problem Syed Zuhdi Syed Salim (Oct 01)
Snort-MySQL problem Syed Zuhdi Syed Salim (Sep 30)
RE: Snort-MySQL problem Syed Zuhdi Syed Salim (Oct 01)

Sylvester

Fwd: Re: [Snort-sigs] A tool like swatch Sylvester (Nov 06)

Takisha Harper

Access is denied Takisha Harper (Dec 23)

Ted Rolle

src/snortman.tex Ted Rolle (Dec 10)

tempus

snort reports in english tempus (Oct 09)

tetsujin

Re: SNORT Fortune 1000 tetsujin (Dec 31)

thelastcowboy

Snort on Windows : system error 1067 thelastcowboy (Oct 09)
winsnort : how to update rules ? thelastcowboy (Oct 14)

Thiago Mello

Re: Please help!! Thiago Mello (Oct 28)
Changing Alert Order Thiago Mello (Oct 13)

Thomas Bechtold

send scan.log to remote Log-Host Thomas Bechtold (Oct 16)

Thomas Los

Snort not working with mysql on a redhat machine Thomas Los (Dec 04)

Thomas Reisinger

Snort deamon mode packet drop's statistic Thomas Reisinger (Dec 11)
RE: Snort deamon mode packet drop's statistic Thomas Reisinger (Dec 11)
RE: Snort deamon mode packet drop's statistic Thomas Reisinger (Dec 11)

Thompson, Jimi

Oinkmaster Oddity Thompson, Jimi (Dec 31)
RE: CyberKit 2.2 Ping, its driven me Nuts.. Thompson, Jimi (Dec 29)

Tim

Re: IP country lookup Tim (Nov 25)
RE: Snort 2.0.4 CPU Utilization\Optimization Tim (Nov 21)
MYSQL Error on Windows XP snort install Tim (Nov 28)
RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Tim (Dec 09)
Re: MYSQL Error on Windows XP snort install Tim (Dec 02)

tim0707

IP country lookup tim0707 (Nov 24)

Timm Schneider

New Version Timm Schneider (Dec 18)
Re: New Version Timm Schneider (Dec 18)
.i eth1 Timm Schneider (Nov 21)
Re: Snort ICMP # 485 Timm Schneider (Nov 24)
Snort ICMP # 485 Timm Schneider (Nov 24)

Timmy Jones

Snort not talking to the sql server. Timmy Jones (Oct 07)

Tim Rohrer

Re: OT: Spam Mail on List? Tim Rohrer (Oct 27)
No External Hits/Proxy Server Required? Tim Rohrer (Oct 19)
OT: Spam Mail on List? Tim Rohrer (Oct 26)
Fwd: Troubles With Multiple Sensors Tim Rohrer (Oct 23)
Troubles With Multiple Sensors Tim Rohrer (Oct 24)
Re: Troubles With Multiple Sensors Tim Rohrer (Oct 25)
Re: OT: Spam Mail on List? Tim Rohrer (Oct 27)

Tobias Rice

Compiling under Debian... Tobias Rice (Nov 13)
Re: Compiling under Debian... Tobias Rice (Nov 13)

Toby Rodwell

Rule to pass ARP? Toby Rodwell (Dec 14)
Rule order? Toby Rodwell (Dec 17)
RE: Rule to pass ARP? Toby Rodwell (Dec 14)
Not logging ICMP with logto: Toby Rodwell (Dec 16)

tomb

small ? tomb (Nov 24)
RE: small ? tomb (Nov 27)
small ? tomb (Nov 24)

Tom Fulton

Snort, SuSE, Novell and Ximian Tom Fulton (Dec 21)

TOPTREND - Samuel de Oliveira

Test if Snort Work Correctly TOPTREND - Samuel de Oliveira (Nov 05)

TPanaitescu

RE: Managed Snort/IDS? TPanaitescu (Oct 21)

tranceformer

snort dnis on modem tranceformer (Sep 30)

tslighter

Re: ACID - PHP tslighter (Dec 18)

Tuomas Groves

Snortsam / Portscanning Detection Tuomas Groves (Dec 29)

twig les

Re: heavily switched networks twig les (Dec 23)
Re: Some odd traffic. twig les (Dec 12)
Re: heavily switched networks twig les (Dec 24)
RE: Reporting - Network Analyzers twig les (Dec 02)
Re: What are the differences between and IPS and IDS? twig les (Oct 01)
Re: Question about hardware and software requirement for Snort 2.0.5 twig les (Dec 03)
Re: Testing My Snort DIDS twig les (Oct 10)
Re: Rob Flentge/Mechanicsburg/US/Exel is out of the office. [OT] twig les (Nov 12)
Re: ARP poisoning and sniffing in a Switched Network twig les (Dec 17)
Re: rpm installation mysql support twig les (Dec 16)
Re: Supress creation of directories by ip twig les (Dec 18)
Re: wireless router with 4 port switch twig les (Nov 19)
Re: snort + cisco 4x00 catalysts twig les (Oct 08)
Re: snort-users () lists sourceforge net twig les (Dec 09)
Re: snort just stop when more 32000 alerts (different IPs) aregenerated twig les (Dec 12)
RE: SNMP Support in FreeBSD twig les (Oct 22)
Re: Turning off signatures twig les (Dec 21)
NIDS test steps twig les (Oct 06)
Re: -l parameter twig les (Dec 09)
Re: Same config, FreeBSD vs OpenBSD, WAY different results twig les (Oct 12)

Ueli Kistler

Re: basic question using idscenter Ueli Kistler (Nov 13)

unknown index

SnortCenter and SnortSam unknown index (Dec 01)

Uso

Re: WinSnort and MSSQL Problem Uso (Dec 30)
Re: WinSnort and MSSQL Problem Uso (Dec 30)
WinSnort and MSSQL Problem Uso (Dec 30)

Val P

RE: Looking for recommendations for distributed Snort GiGE Sensors (network architecture described in message) Val P (Dec 10)

Valter Santos

Re: Remote Sensor?? Valter Santos (Dec 16)
Re: Information Not Appearing On ACID Console Valter Santos (Oct 08)

Victor Lamptey

compiling snort 2.1 Victor Lamptey (Dec 24)

Vincent Chen

strange port scan activity to tcp 18xxx? Vincent Chen (Oct 28)

Virgil Iancu

portscan2 log alerts Virgil Iancu (Dec 13)
Snort and APF firewall Virgil Iancu (Dec 13)
Cutia sigura Virgil Iancu (Dec 16)
Snort and APF firewall Virgil Iancu (Dec 13)

wallenpb

New to Snort wallenpb (Oct 17)

Watson, Ed

Stealth sniffing and and bridging networks Watson, Ed (Oct 28)

wb

portscan traffic & acid wb (Nov 07)

wbnt

Snort and Suse 8.2 wbnt (Nov 11)

wbradd

Strange Key Words wbradd (Nov 17)

wfz

RE:RE: [Snort-users] FW:[Snort-users] RE: slashes in SQL statement a problem? wfz (Dec 04)
RE: slashes in SQL statement a problem? wfz (Dec 04)
(no subject) wfz (Dec 05)
FW:[Snort-users] RE: slashes in SQL statement a problem? wfz (Dec 04)
RE:[Snort-users] Remote Sensor?? wfz (Dec 05)

William Morris

alert_unixsock William Morris (Oct 02)

Williams Jon

RE: Who doesn't care about virus rules, and why? Williams Jon (Nov 06)
Can I still log every packet when thresholding the alerts? Williams Jon (Nov 25)
RE: RE: [Snort-users] Who doesn't care about virus r ules, and why? Williams Jon (Nov 12)
RE: Who doesn't care about virus rules, and why? Williams Jon (Nov 06)
RE: Program that reads unified log format natively Williams Jon (Oct 24)

Xiaoxu Huang

Snort with Mysql Xiaoxu Huang (Oct 28)
Snort with Mysql Xiaoxu Huang (Oct 22)

Yan Zhai

Re: Problem with web-iis rules Yan Zhai (Oct 11)
RE: Problem with web-iis rules Yan Zhai (Oct 11)
Problem with web-iis rules Yan Zhai (Oct 10)

Yoann Vandoorselaere

[PATCH]: bad calculation of the amount of drop. Yoann Vandoorselaere (Oct 01)

yoki tyas

error starting snort!! yoki tyas (Oct 10)

yuedong wu

snort idmef plugin yuedong wu (Nov 25)
Re: snort idmef plugin yuedong wu (Nov 26)
Re: snort idmef plugin yuedong wu (Dec 03)
Re: snort idmef plugin yuedong wu (Dec 01)

Zach Forsyth

RE: snort on linux and acid on windows Zach Forsyth (Oct 15)

חואן

w ant to use Mrtg with snort חואן (Oct 18)
where I configure my rules ? חואן (Oct 16)
where is see snort logs ? חואן (Oct 20)
how can one tell if snort works חואן (Oct 18)
does snort must have its own ip address ? חואן (Oct 01)
fatal error חואן (Oct 18)

Previous period

Next period