Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

1913 messages starting Dec 31 03 and ending Mar 31 04
Date index | Thread index | Author index

• Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Brice B (Dec 31)
  • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
    • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
    • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Dec 31)
      • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jim Brown (Jan 03)
      • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Jan 03)
  • RE: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Chris N (Jan 02)
  • <Possible follow-ups>
  • Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Simon Smith (Dec 31)
• tcp resets on stealth interface agnelo d (Jan 01)
  • Re: tcp resets on stealth interface Edin Dizdarevic (Jan 01)
• Re: Oinkmaster Oddity Andreas Östling (Jan 01)
• Win32 - multiple interfaces? Rich Adamson (Jan 01)
  • RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
    • RE: Win32 - multiple interfaces? Rich Adamson (Jan 01)
      • Re: Win32 - multiple interfaces? Scot Scot (Jan 01)
      • Re: Win32 - multiple interfaces? Rich Adamson (Jan 01)
      • RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
• Re: TCP Data Offset is less than 5 GDHough (Jan 01)
• upgrade to 2.1 Bryan Irvine (Jan 01)
  • Re: upgrade to 2.1 Paul Schmehl (Jan 01)
  • Re: upgrade to 2.1 Chris Reid (Jan 01)
• Win32 v2.1 Flex not correct? Rich Adamson (Jan 01)
• libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)
  • <Possible follow-ups>
  • libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)
    • Re: libpcre.so.0 error loading shared libraries George Theall (Jan 01)
• barnyard with postgres Bryan Irvine (Jan 01)
• RE: Snort-users digest, Vol 1 #3871 - 5 msgs Guy Witney Krocker (Jan 01)
• BackDoor Subsevsen Biswas, Proneet (Jan 01)
• I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. soldier Mx (Jan 02)
  • Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Edin Dizdarevic (Jan 02)
  • Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Michael Boman (Jan 02)
• diferences between the rules of whitehats.com and snort.org soldier Mx (Jan 02)
• unknown:eth0 agnelo d (Jan 02)
  • Re: unknown:eth0 Paul Schmehl (Jan 02)
• Snort, remote logging, unified logs, mudpit and me! Russell Packer (Jan 02)
• Ofcom test Russell Packer (Jan 02)
• Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)
  • Re: Snort, Mudpit, Unified logs and me... Dirk Geschke (Jan 02)
  • Re: Snort, Mudpit, Unified logs and me... Bamm Visscher (Jan 02)
  • Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 03)
  • Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 05)
  • <Possible follow-ups>
  • RE: Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)
• http_inspect question. A.L. (Jan 02)
  • Re: http_inspect question. Jeremy Hewlett (Jan 05)
• Re: Managing many sensors Kristofer T. Karas (Jan 02)
  • RE: Managing many sensors robert schwartz (Jan 06)
  • <Possible follow-ups>
  • Re: Managing many sensors Andreas Östling (Jan 02)
• compiling snort-2.1 Victor Lamptey (Jan 02)
  • <Possible follow-ups>
  • compiling snort-2.1 Victor Lamptey (Jan 02)
• Re: Snort-users digest, Vol 1 #3872 - 13 msgs Russell Fulton (Jan 02)
• 2.1 compilation issues on Solaris and *BSD Erek Adams (Jan 02)
• snort-2.1.0 and barnyard Christian Beine (Jan 02)
  • <Possible follow-ups>
  • snort-2.1.0 and barnyard Christian Beine (Jan 05)
• Edit Snort's Source Code John Steele (Jan 03)
  • <Possible follow-ups>
  • Edit Snort's Source Code John Steele (Jan 05)
• cannot resolve host error Topper (Jan 04)
  • Re: cannot resolve host error Rahul (Jan 04)
    • RE: cannot resolve host error Michael Steele (Jan 05)
  • Message not available
    • Re: cannot resolve host error Topper (Jan 04)
  • Message not available
    • Re: cannot resolve host error Topper (Jan 05)
• snort webmin configuration agnelo d (Jan 05)
  • Re: snort webmin configuration GDHough (Jan 05)
• RE: MYSQL Error on Windows XP snort install Scott Weller (Jan 05)
• Linux: RPM's 2.0.6 and 2.1.0 Updates? Michael Steele (Jan 05)
  • Re: Linux: RPM's 2.0.6 and 2.1.0 Updates? Daniel Wittenberg (Jan 05)
• WEB-IIS view source via translate header Elena Escolano Torner (Jan 05)
• Filter Out a Snort Decoder Mike Maki (Jan 05)
• Re: re: http\_inspect alerts Jeremy Hewlett (Jan 05)
  • <Possible follow-ups>
  • Re: RE: http\_inspect alerts Jeremy Hewlett (Jan 06)
• Re: Http_inspect: allow_proxy_use/no_alerts Jeremy Hewlett (Jan 05)
• Detection of subnet scan activity Ben Carter (Jan 05)
  • Re: Detection of subnet scan activity Matt Kettler (Jan 05)
• Gigabit IDS Tony . Williams (Jan 05)
  • Re: Gigabit IDS Erek Adams (Jan 06)
    • Re: Gigabit IDS twig les (Jan 06)
• HELP!!!!! Compiling Snort with MYSQL dlambeth (Jan 06)
  • RE: HELP!!!!! Compiling Snort with MYSQL Peter Robb (Jan 06)
  • Re: HELP!!!!! Compiling Snort with MYSQL Dirk Geschke (Jan 06)
• where can i find ms_unicode_generator Koay Yee Chen (Jan 06)
  • RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
    • RE: where can i find ms_unicode_generator Matt Kettler (Jan 06)
      • RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
      • Re: where can i find ms_unicode_generator Jeremy Hewlett (Jan 06)
  • <Possible follow-ups>
  • where can i find ms_unicode_generator Koay Yee Chen (Jan 06)
• 2.1.0 Compile Probs On Windows snort user (Jan 06)
  • <Possible follow-ups>
  • 2.1.0 Compile Probs On Windows snort user (Jan 06)
• FATAL ERROR: database: mysql_error: Access denied for user: 'snor t@localhost' (Using password: YES) dlambeth (Jan 06)
  • RE: FATAL ERROR: database: mysql_error: Access denied for user: 'snor t@localhost' (Using password: YES) Michael Steele (Jan 06)
• mysql_error: Access denied for user: 'snort@localhost' (Using pas sword: YES) dlambeth (Jan 06)
  • RE: mysql_error: Access denied for user: 'snort@localhost' (Using pas sword: YES) Michael Steele (Jan 06)
• Re: mysql_error: Access denied for user: 'snort@localhost' (Using password: YES) Leonard Miller (Jan 06)
• Can't connect to local MySQL server through socket Jon Godin (Jan 06)
  • <Possible follow-ups>
  • RE: Can't connect to local MySQL server through socket Keaton, Lindamaria (Jan 06)
  • RE: Can't connect to local MySQL server through socket CGhercoias (Jan 06)
• neuronal network over snort Ernesto (Jan 06)
  • <Possible follow-ups>
  • neuronal network over snort Ernesto (Jan 08)
• Re: Thresholding the Cyberkit ICMP Ping rule Jeremy Hewlett (Jan 06)
• Re: BAD-TRAFFIC loopback Jeremy Hewlett (Jan 06)
• snort signature updates agnelo d (Jan 06)
  • Re: snort signature updates Michael Boman (Jan 06)
• threshold in rule definition and in threshold.conf Nerijus Krukauskas (Jan 07)
  • Re: threshold in rule definition and in threshold.conf Jeremy Hewlett (Jan 07)
    • Re: threshold in rule definition and in threshold.conf Nerijus Krukauskas (Jan 12)
• Extrange alerts Ruben Rubio (Jan 07)
• Dual Processor Machines Jason Alexander (Jan 07)
  • Re: Dual Processor Machines Ben Nelson (Jan 07)
  • Re: Dual Processor Machines Michael Stone (Jan 13)
  • <Possible follow-ups>
  • RE: Dual Processor Machines PPowenski (Jan 08)
    • Re: Dual Processor Machines fiorenzi () tiscali it (Jan 12)
  • RE: Dual Processor Machines PPowenski (Jan 13)
• Build problem with Snort CVS Michael W. Lucas (Jan 07)
  • Re: Build problem with Snort CVS Erek Adams (Jan 07)
  • Re: Build problem with Snort CVS Bamm Visscher (Jan 07)
    • Re: Build problem with Snort CVS Michael W. Lucas (Jan 07)
  • Re: Build problem with Snort CVS Michael Boman (Jan 12)
  • Re: Build problem with Snort CVS Erek Adams (Jan 13)
• Re: Threshold settings Brian (Jan 07)
• Spp_portscan2 Bell, Josh (Jan 07)
• Stop logging specific Host & Source service Ow Mun Heng (Jan 08)
• No alerts? Russell Packer (Jan 08)
  • <Possible follow-ups>
  • RE: No alerts? Russell Packer (Jan 08)
• Snort Inline on Redhat 9 Michael Little (Jan 08)
  • Re: Snort Inline on Redhat 9 tslighter (Jan 08)
  • Re: Snort Inline on Redhat 9 tslighter (Jan 08)
• Which Linux distro for a Win32 Snort admin? Robert Reid (Jan 08)
  • <Possible follow-ups>
  • RE: Which Linux distro for a Win32 Snort admin? Russell Packer (Jan 08)
  • Re: Which Linux distro for a Win32 Snort admin? Leonard Miller (Jan 08)
    • Re: Which Linux distro for a Win32 Snort admin? Daniel Wittenberg (Jan 08)
  • RE: Which Linux distro for a Win32 Snort admin? Robert Reid (Jan 09)
• Re: Re: Which Linux distro for a Win32 Snort admin? Leonard Miller (Jan 08)
• Danny Li/AP/NSC is out of the office. Danny Li (Jan 08)
• graphs from the perfmonitor preprocessor Andreas Östling (Jan 08)
• MS-SQL Worm propagation -false positive Natalie Keller (Jan 08)
  • Re: MS-SQL Worm propagation -false positive Martin Olsson (Jan 09)
  • <Possible follow-ups>
  • RE: MS-SQL Worm propagation -false positive larosa, vjay (Jan 08)
• MySql + Snort config errors (yet again) M. Morgan (Jan 08)
  • RE: MySql + Snort config errors (yet again) robert schwartz (Jan 08)
  • <Possible follow-ups>
  • Re: MySql + Snort config errors (yet again) Leonard Miller (Jan 08)
• Segmentation Fault Sudhakar Gummadi (Jan 08)
  • <Possible follow-ups>
  • RE: Segmentation Fault Sudhakar Gummadi (Jan 09)
    • Re: RE: Segmentation Fault Martin Roesch (Jan 10)
  • Segmentation Fault Sudhakar Gummadi (Jan 12)
    • Re: Segmentation Fault Erek Adams (Jan 08)
  • Re: Segmentation Fault SN ORT (Jan 12)
    • Re: Segmentation Fault Josh . Sakofsky (Jan 12)
• Snort Performance mik sib (Jan 09)
  • <Possible follow-ups>
  • Snort performance SN ORT (Feb 02)
    • RE: Snort performance Michael Steele (Feb 02)
  • Snort Performance Laura (Mar 26)
    • RE: Snort Performance Jim Hendrick (Mar 26)
    • Re: Snort Performance Rodrigo B. Ramos (Mar 26)
  • Re: Snort Performance Mark . Schutzmann (Mar 26)
    • RE: Snort Performance Laura (Mar 26)
• 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
• AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Poppi, Sandro (Jan 09)
  • Re: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
  • Re: [Snort-users] AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Scott Zawalski (Jan 09)
• Re: AW: AW: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
• Snort (2.1), MySQL (4 up), Barnyard (0.1.0) jthomas (Jan 09)
• Why is this rule still being tripped? Orion Poplawski (Jan 09)
  • Re: Why is this rule still being tripped? Martin Roesch (Jan 10)
    • Re: Why is this rule still being tripped? Orion Poplawski (Jan 13)
      • Re: Why is this rule still being tripped? Martin Roesch (Jan 17)
      • Re: Why is this rule still being tripped? Orion Poplawski (Jan 19)
• Question about var SERVICE_PORTS Schmehl, Paul L (Jan 09)
  • Re: Question about var SERVICE_PORTS Andreas Östling (Jan 09)
  • <Possible follow-ups>
  • RE: Question about var SERVICE_PORTS Schmehl, Paul L (Jan 09)
    • RE: Question about var SERVICE_PORTS Andreas Östling (Jan 09)
• Upgrade 2.0 to 2.1 Steve Jacobsen (Jan 09)
• compilation errors Victor Lamptey (Jan 09)
• snort reference Jinqiao Yu (Jan 10)
  • <Possible follow-ups>
  • snort reference Jinqiao Yu (Jan 11)
  • snort reference Jinqiao Yu (Jan 13)
    • Re: snort reference Matt Kettler (Jan 13)
• SnortConsole: Unable to connect to remote sensor Jeff Evenson (Jan 10)
• Some please help me.. pctech2000 (Jan 11)
  • Re: Some please help me.. Erek Adams (Jan 12)
• Please help me... Joshua McDowell (Jan 11)
  • <Possible follow-ups>
  • Re: Please help me... James Nonya (Jan 12)
• Is anyone getting these? pctech2000 (Jan 11)
• test Joshua McDowell (Jan 11)
• Please help me.. (Last tiem I will send this out, don't think it made it the first time) Joshua McDowell (Jan 11)
• ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.3alpha for snort 2.1.0 released Sandro Poppi (Jan 11)
  • <Possible follow-ups>
  • Re: ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.3alpha for snort 2.1.0 released Sandro Poppi (Jan 12)
• Another question... Joshua McDowell (Jan 11)
• correction Joshua McDowell (Jan 11)
• simple snort pass ICO Staff (Jan 11)
  • Re: simple snort pass Chris Keladis (Jan 11)
• SMTP Not Logged David Porter (Jan 12)
• taps What Brand and Where in network Mark McDonagh (Jan 12)
  • <Possible follow-ups>
  • RE: taps What Brand and Where in network CGhercoias (Jan 12)
  • RE: taps What Brand and Where in network PPowenski (Jan 12)
  • RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
  • RE: taps What Brand and Where in network Ron Shuck (Jan 12)
  • RE: taps What Brand and Where in network Peters, Michael D. (Jan 12)
  • RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
  • RE: taps What Brand and Where in network Petriz, Pablo (Jan 16)
• Using ACID with PostgreSQL 7.4.1 Martinelli Paolo A. (Jan 12)
• Suppression configuration reading IP address backwards? Martin McKeay (Jan 12)
• SnortCenter v1.0 RC1 byte_test work around Richard Pesce (Jan 12)
  • <Possible follow-ups>
  • SnortCenter v1.0 RC1 byte_test work around Richard Pesce (Jan 12)
• Upgrade to 2.1.0 help needed shadow man (Jan 12)
  • Re: Upgrade to 2.1.0 help needed Dave C (Jan 12)
    • Re: Upgrade to 2.1.0 help needed tslighter (Jan 12)
• Upgrading from 2.0 to 2.1? Steve Jacobsen (Jan 12)
  • Re: Upgrading from 2.0 to 2.1? Michael Boman (Jan 12)
  • <Possible follow-ups>
  • Upgrading from 2.0 to 2.1? Steve Jacobsen (Jan 12)
• installing 2.1.0 on Solaris 8 - problems & solutions Subramanikandan Somasundaram (Mani) (Jan 12)
• BUG in fpdetect.c (2.1.0)? Stephen Reed (Jan 12)
  • Re: BUG in fpdetect.c (2.1.0)? Andreas Östling (Jan 12)
• Snort 2.1.0 and http_decode issue Micah Powell (Jan 12)
• numbers meaning Mauricio Smythe (Jan 12)
  • Re: numbers meaning Brian (Jan 12)
• Snort Center Replacement Jason Alexander (Jan 12)
• Last CID and Duplicate Records Ron Shuck (Jan 12)
• Please help. Why I can't post in this list? My message bodies were alwasy cut. Jinqiao Yu (Jan 12)
• Problems with snort-2.1.0 Schmehl, Paul L (Jan 12)
  • <Possible follow-ups>
  • RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 14)
    • RE: Problems with snort-2.1.0 Andreas Östling (Jan 14)
      • RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 15)
      • Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
  • RE: Problems with snort-2.1.0 Schmehl, Paul L (Jan 14)
  • RE: Problems with snort-2.1.0 DM (Jan 14)
• https and http_inspect gives *many* false positives Edward van der Jagt (Jan 12)
  • Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
  • <Possible follow-ups>
  • Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 12)
    • Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
      • Re: https and http_inspect gives *many* false positives Jason (Jan 12)
  • Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 13)
• snort ssl plug-in Derya Sezen (Jan 13)
  • Re: snort ssl plug-in Matt Kettler (Jan 13)
    • Re: snort ssl plug-in Derya Sezen (Jan 13)
  • RE: snort ssl plug-in robert schwartz (Jan 14)
  • <Possible follow-ups>
  • Re: snort ssl plug-in Jason Haar (Jan 13)
• Snort Implementation yyyyyy yaher (Jan 13)
  • Re: Snort Implementation Matt Kettler (Jan 13)
  • <Possible follow-ups>
  • Snort Implementation yyyyyy yaher (Jan 13)
  • Snort Implementation yyyyyy yaher (Jan 13)
• unusually high port scan activity Everist, Benjamin S. CTR (WHDB) (Jan 13)
• Portscan shows 100% traffic in ACID's main window Ruiyuan Jiang (Jan 13)
• Solaris 9 make error? Peters, Michael D. (Jan 13)
• RE: installing 2.1.0 on Solaris 8 - problems & solu tions Peters, Michael D. (Jan 13)
• ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
• Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
  • <Possible follow-ups>
  • Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
  • Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
• Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 13)
  • <Possible follow-ups>
  • Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
  • RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)
  • Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
    • Re: Snort 2.1.0 - Shutting up http_inspect on non web servers Owen McCusker (Jan 14)
  • RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)
  • Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
• There is no /var/log/snort/alert file d_greenjr (Jan 13)
  • <Possible follow-ups>
  • There is no /var/log/snort/alert file d_greenjr (Jan 15)
• RE: Problems with snort-2.1.0] Daniel J. Roelker (Jan 13)
  • <Possible follow-ups>
  • RE: Problems with snort-2.1.0] Schmehl, Paul L (Jan 13)
• hi, are there the signatures or rules of the new local bugs ,, do_mremap and do_brk() ??? soldier Mx (Jan 13)
  • Re: hi, are there the signatures or rules of the new local bugs ,, do_mremap and do_brk() ??? Michael Boman (Jan 13)
• Where can i get a Simlation attack to see if all my rules work! ? soldier Mx (Jan 13)
  • Re: Where can i get a Simlation attack to see if all my rules work! ? Dirk Geschke (Jan 14)
  • <Possible follow-ups>
  • RE: Where can i get a Simlation attack to see if all my rules work! ? Button, William (STRA) (Jan 14)
• Query on processor(frag2) WAN FAT WU (Jan 14)
• Upgrade from 2.0.1 error? Peters, Michael D. (Jan 14)
  • Re: Upgrade from 2.0.1 error? Dirk Geschke (Jan 14)
• Snort-Perl Plugin Josh Berry (Jan 14)
• Snort output into MySQL with activate/dynamic rules Thomas Reisinger (Jan 14)
• Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
  • Re: Error while compile snort with mysql version 4.0.17 twig les (Jan 14)
    • Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
  • Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
    • Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
      • Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
• Snort 2.0.6 - Error with a working rule under Snort-2.0.2 CGhercoias (Jan 14)
  • <Possible follow-ups>
  • Snort 2.0.6 - Error with a working rule under Snort-2.0.2 CGhercoias (Jan 15)
• Error Installing PHP Syed Ali (Jan 14)
  • <Possible follow-ups>
  • Re: Error Installing PHP Leonard Miller (Jan 14)
  • RE: Error Installing PHP Bradberry, John (Jan 15)
• WEB-IIS view source via translate header false alarms Bradberry, John (Jan 14)
  • <Possible follow-ups>
  • Re: WEB-IIS view source via translate header false alarms James Nonya (Jan 14)
• Perfmonitor...does anyone really use this thing? James Nonya (Jan 14)
  • Re: Perfmonitor...does anyone really use this thing? Andreas Östling (Jan 14)
    • Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 14)
      • Re: Perfmonitor...does anyone really use this thing? sam (Jan 15)
      • Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 15)
• Simple questions. Peters, Michael D. (Jan 14)
  • Re: Simple questions. Jeremy Hewlett (Jan 14)
  • Message not available
    • Re: Simple questions. Matt Kettler (Jan 14)
• Stupid question re: message archives ... Michael Chapman (Jan 14)
  • Message not available
    • Re: Stupid question re: message archives ... Matt Kettler (Jan 14)
• Tell snort to resolve ip or use /etc/hosts? James Nonya (Jan 14)
  • Re: Tell snort to resolve ip or use /etc/hosts? james (Jan 14)
  • Re: Tell snort to resolve ip or use /etc/hosts? Matt Kettler (Jan 14)
  • <Possible follow-ups>
  • RE: Tell snort to resolve ip or use /etc/hosts? SRH-Lists (Jan 14)
• No portscan showing in ACID anymore? Peters, Michael D. (Jan 14)
• Hey who use SWATCH!?? when there is an scan, i get too many mails on root () domain com soldier Mx (Jan 14)
  • Re: Hey who use SWATCH!?? when there is an scan, i get too many mails on root () domain com henk (Jan 15)
• Snort rule "pass" not working right with -o option... Sekurity Wizard (Jan 14)
• Please help with this strangeness Michael Thompson (Jan 14)
  • Re: Please help with this strangeness Erek Adams (Jan 15)
• Pcap_loop error Silva, Pedro (Jan 14)
• File Size Limit Exceeded - error RAJNEEL DHOTRE (Jan 14)
  • Re: File Size Limit Exceeded - error Erek Adams (Jan 15)
• Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
  • <Possible follow-ups>
  • Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
  • RE: Question-using perl with snort-creating a user friendly interface Schmehl, Paul L (Jan 15)
  • Re: Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
• ICMP L3retriever Ping Craig D. Thomas (Jan 15)
• RE: Hey who use SWATCH!?? when there is an scan, I get too many mails on root () domain com Peters, Michael D. (Jan 15)
• no alerts logged Mat Harris (Jan 15)
  • <Possible follow-ups>
  • Re: no alerts logged M. Morgan (Jan 15)
    • Re: no alerts logged Mat Harris (Jan 15)
      • portscan but no rules - Was: Re: no alerts logged Mat Harris (Jan 16)
  • RE: no alerts logged Michael Chapman (Jan 15)
  • RE: no alerts logged Michael Chapman (Jan 16)
  • RE: no alerts logged Michael Chapman (Jan 16)
• Is ACID Dead? McCash, John (Jan 15)
  • <Possible follow-ups>
  • Re: Is ACID Dead? Scott Skrogstad (Jan 15)
  • RE: Is ACID Dead? McCash, John (Jan 15)
    • RE: Is ACID Dead? Owen McCusker (Jan 15)
      • Re: Is ACID Dead? Bamm Visscher (Jan 15)
  • RE: Is ACID Dead? CGhercoias (Jan 15)
    • Re: Is ACID Dead? Michael Anderson (Jan 15)
  • RE: Is ACID Dead? Richard Pesce (Jan 15)
  • Re: Is ACID Dead? John Creegan (Jan 15)
    • Re: Is ACID Dead? Owen McCusker (Jan 16)
  • RE: Is ACID Dead? Dave Randolph (Jan 16)
    • RE: Is ACID Dead? Josh Berry (Jan 16)
      • Re: Is ACID Dead? Jason Alexander (Jan 16)
  • RE: Is ACID Dead? Dave Randolph (Jan 16)
  • Re: Is ACID Dead? Roman Danyliw (Jan 16)
    • Re: Is ACID Dead? Owen McCusker (Jan 16)
    • Re: Is ACID Dead? lists (Jan 16)
  • RE: Is ACID Dead? Michael Pacheco (Jan 16)
• Help needed with confusing issue... Kelly Slavens (Jan 15)
• SnortCenter and MySQL Jeff Evenson (Jan 15)
• MMAP-ed libpcap for linux kernels including linux-2.6.x Phil Wood (Jan 15)
• Differences Between Versions Michael Thompson (Jan 15)
  • Re: Differences Between Versions Martin Olsson (Jan 16)
• Hey, how could i delete the alert log cuz /var is full soldier Mx (Jan 16)
  • unsubscribe Pete (Jan 16)
  • Re: Hey, how could i delete the alert log cuz /var is full Matt Kettler (Jan 16)
  • Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)
  • <Possible follow-ups>
  • Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)
  • RE: Hey, how could i delete the alert log cuz /var is full Bell, Josh (Jan 16)
• Snort Setup Guide w/Mandrake 9.2 Nick Duda (Jan 16)
• identify Chinese character in the snort binary log Bin Liu (Jan 16)
• Snort, Logging, and Windows 2000 John Guenin (Jan 16)
  • Re: Snort, Logging, and Windows 2000 Rob Lewis (Jan 16)
• [Fwd: Re: Error while compile snort with mysql version 4.0.17] bclark (Jan 16)
  • Re: [Fwd: Re: Error while compile snort with mysql version 4.0.17] Dirk Geschke (Jan 16)
• No portscan traffic? Peters, Michael D. (Jan 16)
• ERROR: unknown preprocessor "http_decode" Warner Joseph (Jan 16)
  • Re: ERROR: unknown preprocessor "http_decode" james (Jan 16)
  • Re: ERROR: unknown preprocessor "http_decode" Erek Adams (Jan 16)
  • <Possible follow-ups>
  • RE: ERROR: unknown preprocessor "http_decode" Warner Joseph (Jan 16)
  • RE: ERROR: unknown preprocessor "http_decode" Schmehl, Paul L (Jan 18)
• messages to syslog at startup. Dave Randolph (Jan 16)
  • Re: messages to syslog at startup. Martin Roesch (Jan 17)
• Snort setting off my pager Michael W. Lucas (Jan 16)
  • Re: Snort setting off my pager Jim Brown (Jan 17)
  • <Possible follow-ups>
  • RE: Snort setting off my pager Nick Duda (Jan 16)
• Compiling snort and mysql bclark (Jan 16)
  • Re: Compiling snort and mysql Dirk Geschke (Jan 16)
• Unified log format. Chris Keladis (Jan 16)
  • Re: Unified log format. Martin Roesch (Jan 17)
• im getting alot of FAlse alert that are making my /var partition fUll soldier Mx (Jan 17)
• Yahoo Instant Messenger Michael Little (Jan 18)
  • <Possible follow-ups>
  • RE: Yahoo Instant Messenger Biswas, Proneet (Jan 18)
    • Re: Yahoo Instant Messenger Ravi (Jan 19)
  • RE: Yahoo Instant Messenger CGhercoias (Jan 19)
  • RE: Yahoo Instant Messenger Biswas, Proneet (Jan 19)
• Device didn't translate Di Fresco Marco (Jan 18)
• the alert log is getting so huge in minutes! soldier Mx (Jan 19)
  • <Possible follow-ups>
  • RE: the alert log is getting so huge in minutes! Hudak, Tyler (Jan 19)
• Hey the option Dsize is useful against the buffer overflows ? soldier Mx (Jan 19)
  • Re: Hey the option Dsize is useful against the buffer overflows ? Matt Kettler (Jan 19)
• IPS Group test report now available Bob Walder (Jan 19)
• App Eventlog: missing event id Romulo M. Cholewa (Jan 19)
  • <Possible follow-ups>
  • App Eventlog: missing event id Romulo M. Cholewa (Jan 22)
• error- newbe Ronen Kfir (Jan 19)
• Is IPTables blocking Snort detection? Stephen W. Corey - 5535 (Jan 19)
  • Re: Is IPTables blocking Snort detection? Dirk Geschke (Jan 19)
  • Message not available
    • Re: Is IPTables blocking Snort detection? Matt Kettler (Jan 19)
• beagle worm Robert Vance Jr (Jan 19)
• Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
  • Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Dirk Geschke (Jan 19)
    • Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
      • Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Jeff Nathan (Feb 11)
• RE: Understanding what I am seeing - MS-SQL worm propagation attempt ... Michael Chapman (Jan 19)
  • EasyIDS updated Gregory W. Ratcliff (Jan 19)
• RE: Barnyard 0.1.0 and the "unable to find mysqlcli ent library" issue PPowenski (Jan 20)
• Snort 2.1.0, getting mixed up signatures. Patrik Astrom (Jan 20)
  • Re: Snort 2.1.0, getting mixed up signatures. Jason Haar (Feb 08)
    • Re: Snort 2.1.0, getting mixed up signatures. Erek Adams (Feb 09)
    • Re: Snort 2.1.0, getting mixed up signatures. Skip Carter (Feb 09)
• snort misses attacks it normaly detects dibo303 (Jan 20)
• Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 20)
  • <Possible follow-ups>
  • Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 21)
  • Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 22)
• Snort with Oracle Benny Late (Jan 20)
  • Re: Snort with Oracle Rick Coloccia (Jan 20)
  • Re: Snort with Oracle Matt Kettler (Jan 20)
  • <Possible follow-ups>
  • RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
  • RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
• ACID: Can not send emails... Sarmiento, Miguel (Jan 20)
• Signature question... Jeff Kell (Jan 20)
  • Re: Signature question... Jeff Penn (Jan 27)
• Frontends for Snort aravind babu (Jan 20)
  • RE: Frontends for Snort Jeff Dell (Jan 21)
  • <Possible follow-ups>
  • RE: Frontends for Snort Kaplan, Andrew H. (Jan 21)
  • RE: Frontends for Snort Grime, Richard S (Jan 21)
    • Re: Frontends for Snort deny1 (Jan 21)
    • RE: Frontends for Snort Brian Whitehead (Jan 22)
      • RE: Frontends for Snort Jeff Dell (Jan 22)
  • Re: Frontends for Snort deny1 (Jan 22)
• How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
  • Re: How do I supress file-logging but not database-logging? Dirk Geschke (Jan 21)
    • Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
      • Re: How do I supress file-logging but not database-logging? Bamm Visscher (Jan 21)
      • Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
  • Re: How do I supress file-logging but not database-logging? Frank Knobbe (Jan 21)
    • How to generate snort log file with the name format file_yyyymmdd Daily? Snortty (Jan 21)
• Portscans not displayed in ACID? Peters, Michael D. (Jan 21)
  • <Possible follow-ups>
  • RE: Portscans not displayed in ACID? Peters, Michael D. (Jan 23)
• portscan2 Fred McFeeters (Jan 21)
• Snort1.9 on RH7.3 Upgrade to Snort2.x on RH9 Escudero, Peter Louis (Jan 21)
• payload clarification Hudak, Tyler (Jan 21)
  • Re: payload clarification Jeremy Hewlett (Jan 31)
• Truncated TCP options? Jeff Kell (Jan 21)
  • Re: Truncated TCP options? MH (Jan 22)
  • <Possible follow-ups>
  • Truncated Tcp Options? Rich Adamson (Mar 15)
    • Re: Truncated Tcp Options? ypwhich (Mar 16)
      • Re: Truncated Tcp Options? Rich Adamson (Mar 16)
      • Re: Truncated Tcp Options? Chris Green (Mar 16)
      • Re: Truncated Tcp Options? Rich Adamson (Mar 16)
• Snort and fragmentation Hudak, Tyler (Jan 21)
• help Vimal Goel (Jan 21)
  • Re: help deny1 (Jan 21)
  • <Possible follow-ups>
  • help Hendry Fong (Mar 22)
• Using snort to listen on a nic without an IP Mark Reis (Jan 21)
  • Re: Using snort to listen on a nic without an IP james (Jan 21)
    • Re: Using snort to listen on a nic without an IP Frank Knobbe (Jan 21)
  • <Possible follow-ups>
  • Re: Using snort to listen on a nic without an IP M. Morgan (Jan 21)
  • RE: Using snort to listen on a nic without an IP Schmehl, Paul L (Jan 21)
  • RE: Using snort to listen on a nic without an IP List Mail (Jan 21)
  • Using snort to listen on a nic without an IP Mark Reis (Jan 22)
  • RE: Using snort to listen on a nic without an IP Vigilant Labs (Jan 22)
• Why the tag option and resp neither works! soldier Mx (Jan 21)
• snort 2.1.0 stops logging Pickel, Gerd - Betax-Systems GmbH (IT) (Jan 22)
• Libprelude working with snort 2.1.x Martin Olsson (Jan 22)
  • Re: Libprelude working with snort 2.1.x Martin Olsson (Jan 22)
    • Re: Re: [Snort-users] Libprelude working with snort 2.1.x Chris Green (Jan 22)
• mimail.c Biswas, Proneet (Jan 22)
• AW: snort 2.1.0 stops logging Pickel, Gerd - Betax-Systems GmbH (IT) (Jan 22)
• i use /etc/iinit.d/snort start but... soldier Mx (Jan 22)
• portscan alerts? Peters, Michael D. (Jan 22)
• Snort 2.1.0 rules won't update in SnortCenter Jeff Evenson (Jan 22)
  • Re: Snort 2.1.0 rules won't update in SnortCenter Jason Alexander (Jan 23)
  • <Possible follow-ups>
  • RE: Snort 2.1.0 rules won't update in SnortCenter Jeff Evenson (Jan 27)
• RE.: arp spoof Richard Pesce (Jan 22)
• port number or'ing Craig Mueller (Jan 22)
• ACID Alert Cache Josh Berry (Jan 22)
• Re: Snort-users digest, Vol 1 #3919 - 4 msgs Aaron (Jan 22)
• NEW TO SNORT -HELP ME vasanth b (Jan 22)
• need help Vimal Goel (Jan 22)
• any info about the interface deny (Jan 22)
• Mysql error ewingh (Jan 22)
• Snort 2.1 Install and Libpcre Error admin (Jan 22)
• Attack Detection: Then what Owais Bin Zuber (Jan 22)
  • <Possible follow-ups>
  • Re: Attack Detection: Then what M. Morgan (Jan 25)
• Snort FAQ Submission Erich Trowbridge (Jan 22)
• snort: database: mysql_error: Duplicate entry Adam Kaufman (Jan 22)
  • RE: snort: database: mysql_error: Duplicate entry Chris N (Jan 26)
  • <Possible follow-ups>
  • RE: snort: database: mysql_error: Duplicate entry Warner Joseph (Jan 30)
  • RE: snort: database: mysql_error: Duplicate entry Hutchinson, Andrew (Jan 31)
• Mysql Segmentation error and restarts Vijay Krishnan (Jan 22)
• Alert Testing Warner Joseph (Jan 22)
  • <Possible follow-ups>
  • RE: Alert Testing Warner Joseph (Jan 23)
  • FW: Alert Testing Warner Joseph (Jan 27)
• portscan2 vs portscan Fred McFeeters (Jan 22)
• detecting fragmented portscan with snort 2.1.0 Jochen (Jan 23)
• Getting Snort.org SID's with acid John Brewer (Jan 23)
• Snort MySQL problem Neil Fryer (Jan 23)
  • <Possible follow-ups>
  • RE: Snort MySQL problem Neil Fryer (Jan 23)
  • RE: Snort MySQL problem Neil Fryer (Jan 23)
  • RE: Snort MySQL problem Schmehl, Paul L (Jan 26)
  • RE: Snort MySQL problem Schmehl, Paul L (Jan 29)
• gen-msg.map additions? Peters, Michael D. (Jan 23)
• Answered my own question (mysql support).. chris (Jan 26)
• cost/benefit analysis of running Snort Tom Fulton (Jan 26)
  • <Possible follow-ups>
  • Re: cost/benefit analysis of running Snort M. Morgan (Jan 30)
• alert_syslog plugin problem Gema de Toro Sánchez (Jan 26)
  • <Possible follow-ups>
  • Re: alert_syslog plugin problem James Nonya (Jan 26)
• non-root user cannot run snort Robert Storey (Jan 26)
  • Re: non-root user cannot run snort Edin Dizdarevic (Jan 26)
    • sending paylog data (tcpdump formated) to more than 2 remote servers. samwun (Jan 26)
  • Re: non-root user cannot run snort Erwin Van de Velde (Jan 26)
  • Re: non-root user cannot run snort d_greenjr (Jan 26)
  • Re: non-root user cannot run snort Robert Storey (Jan 27)
  • Re: non-root user cannot run snort Robert Storey (Jan 27)
    • Re: non-root user cannot run snort Matt Kettler (Jan 27)
      • Re: non-root user cannot run snort Robert Storey (Jan 27)
      • Re: non-root user cannot run snort Edin Dizdarevic (Jan 29)
    • Re: non-root user cannot run snort Edin Dizdarevic (Jan 27)
  • Re: non-root user cannot run snort Brian (Jan 31)
  • <Possible follow-ups>
  • RE: non-root user cannot run snort Grime, Richard S (Jan 26)
    • location to download barnyard samwun (Jan 26)
• Security Event Management for Linux Josh Berry (Jan 26)
• Snort readng across switches? M. Morgan (Jan 26)
  • Message not available
    • Re: Snort readng across switches? Matt Kettler (Jan 26)
  • <Possible follow-ups>
  • RE: Snort readng across switches? SN ORT (Jan 27)
• Compromising Packet... Dusty Hall (Jan 26)
  • <Possible follow-ups>
  • Compromising Packet... Dusty Hall (Jan 26)
  • RE: Compromising Packet... Dusty Hall (Jan 26)
• New Worm / Virus - WORM_MIMAIL.R? sam (Jan 26)
  • Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Joe Stewart (Jan 28)
    • Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? sam (Jan 28)
      • Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)
      • RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Brian Gregorcy (Jan 28)
  • Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)
  • <Possible follow-ups>
  • RE: New Worm / Virus - WORM_MIMAIL.R? CGhercoias (Jan 27)
  • RE: New Worm / Virus - WORM_MIMAIL.R? Brian M. Diehl (Jan 27)
• (no subject) jhally (Jan 26)
  • <Possible follow-ups>
  • (no subject) tony . williams (Jan 26)
  • (no subject) Finney Charles E (Feb 16)
  • (no subject) sumit vora (Feb 22)
    • Re: (no subject) Keith W. McCammon (Feb 22)
  • (no subject) marcio (Feb 23)
  • (no subject) Kris (Mar 30)
• Port or'ing Craig Mueller (Jan 26)
• It is like "guardian" but then not. Try "GateKeeper". Alon Noy (Jan 27)
  • <Possible follow-ups>
  • It is like "guardian" but then not. Try "GateKeeper". Alon Noy (Jan 28)
• ACID / SnortSnarf Fred McFeeters (Jan 27)
• RE: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Jim Clews (Jan 27)
  • <Possible follow-ups>
  • RE: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Jim Clews (Jan 27)
  • RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Martin Jr., D. Michael (Jan 28)
    • Here are my updated MyDoom/MIMAIL.R and Variant signatures for Snort sam (Jan 28)
  • RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? SN ORT (Feb 02)
• Where Can i get any open standart for IDS Aaron Babalola (Jan 27)
  • Re: Where Can i get any open standart for IDS Keith W. McCammon (Jan 27)
• 'mysql' support is not compiled...OH YES IT IS chris (Jan 27)
  • Re: 'mysql' support is not compiled...OH YES IT IS Bamm Visscher (Jan 27)
    • Re: 'mysql' support is not compiled...OH YES IT IS chris (Jan 27)
  • Re: 'mysql' support is not compiled...OH YES IT IS Matt Southworth (Jan 27)
• question tslighter (Jan 27)
  • <Possible follow-ups>
  • Question Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
• Excluding Ip from Alert logging! Gabriel Moricz (Jan 27)
  • <Possible follow-ups>
  • Excluding Ip from Alert logging! Gabriel Moricz (Jan 27)
    • Re: Excluding Ip from Alert logging! Edin Dizdarevic (Jan 27)
• Status of IDMEF support? Joshua Wright (Jan 27)
  • Re: Status of IDMEF support? Joe McAlerney (Jan 27)
• [Snort-users]Problem with configuration jim_patterson (Jan 27)
• Snort 2.0.6 fails to close portscan.log on SIGHUP Bill McCarty (Jan 27)
• Needed: sample stunnel 4.04 stunnel.conf files Witt, Allen (Jan 27)
  • Re: Needed: sample stunnel 4.04 stunnel.conf files twig les (Jan 28)
  • RE: Needed: sample stunnel 4.04 stunnel.conf files robert schwartz (Jan 28)
• snort 2.1.0 bugs ? Koay Yee Chen (Jan 27)
  • same tcpdump.log to remote log server instead of local sensor samwun (Jan 27)
    • Re: same tcpdump.log to remote log server instead of local sensor Frank Knobbe (Jan 28)
      • RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
      • RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
      • RE: same tcpdump.log to remote log server instead oflocal sensor Frank Knobbe (Jan 30)
  • <Possible follow-ups>
  • snort 2.1.0 bugs ? Koay Yee Chen (Jan 27)
• RE: [Snort-sigs] Signature for "W32_Novarg_SCO_DOS" larosa, vjay (Jan 27)
• Snort errors on startup -- rules related? Ben Beeson (Jan 27)
  • Re: Snort errors on startup -- rules related? Josh Berry (Jan 28)
• Multihomed Sensor mailing-list (Jan 27)
  • <Possible follow-ups>
  • RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
  • RE: Multihomed Sensor Dean Davis (Jan 28)
  • RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
  • RE: Multihomed Sensor DeBerry, Casey (Jan 28)
  • RE: Multihomed Sensor mailing-list (Jan 31)
• Info Neil Fryer (Jan 27)
• 2 class C network Greg Chu (Jan 27)
  • Re: 2 class C network Jeff (Jan 31)
• Why resp and session option Dont work!? soldier Mx (Jan 28)
  • Re: Why resp and session option Dont work!? Jeremy Hewlett (Jan 31)
• AW: Status of IDMEF support? Poppi, Sandro (Jan 28)
• Re: Updating new virus signatures Michael . Mulholland (Jan 28)
• Hwscnqybfzr tony . williams (Jan 28)
• Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 28)
  • Re: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 28)
  • Re: Temporary "solution" to MyDoom worm Matt Kettler (Jan 31)
    • Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
  • <Possible follow-ups>
  • RE: Temporary "solution" to MyDoom worm snort-ml (Jan 30)
    • Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
• bravo tslighter (Jan 28)
• Origin 'Snort Alert' value in signature.sig_name field? Robert Craig (Jan 28)
• [Fwd: Auto update of sigs (was: Novarg Virus)] bclark (Jan 28)
• Question about snortcenter on OpenBSD 3.4 Jon (Jan 28)
• Snort-2.1.0 and flexresp2 James Nonya (Jan 29)
• A manual-tutorial-txt-paper about RULE OPTIONS? and... soldier Mx (Jan 29)
• preprocessor flow-portscan Kevin Amorin (Jan 29)
  • Re: preprocessor flow-portscan Chris Green (Jan 30)
• Multi-homed Sensor Enerio, Rico (Jan 29)
  • Re: Multi-homed Sensor Michael Boman (Jan 30)
  • RE: Multi-homed Sensor Jim Hendrick (Jan 30)
  • Re: Multi-homed Sensor Marc Spitzer (Jan 31)
• cost/benefit of Snort uuyys84 (Jan 29)
• About the ruletype syntax sutra (Jan 29)
  • Re: About the ruletype syntax Brian (Jan 30)
• Order on snort rules Nadia Guerroumi (Jan 29)
  • Re: Order on snort rules Edin Dizdarevic (Jan 30)
  • Re: Order on snort rules Jeremy Hewlett (Jan 30)
• Installing Snort on SuSe Linux machine John Ceballos-contr (Jan 29)
  • RE: Installing Snort on SuSe Linux machine KS (Jan 30)
  • Re: Installing Snort on SuSe Linux machine Tim Sutinen (Jan 31)
  • Re: Installing Snort on SuSe Linux machine Alexandr (Jan 31)
• Any known isssues Ravi (Jan 30)
  • <Possible follow-ups>
  • Any known isssues Ravi (Jan 31)
• Testing Snort-inline without any rules aravind babu (Jan 30)
  • <Possible follow-ups>
  • Re: Testing Snort-inline without any rules aravind babu (Jan 30)
• Snort-inline in embedded device aravind babu (Jan 30)
  • Re: Snort-inline in embedded device Matt Kettler (Jan 31)
    • Re: Snort-inline in embedded device ravivsn (Jan 31)
• Fw: Why logging the attacked one? Gabriel Moricz (Jan 30)
  • <Possible follow-ups>
  • Why logging the attacked one? Gabriel Moricz (Jan 30)
  • RE: Why logging the attacked one? Erickson Brent W KPWA (Jan 30)
  • Why logging the attacked one? Gabriel Moricz (Jan 31)
• GateKeeper for snort Alon Noy (Jan 30)
• snort 2.1 and stream4 snort user (Jan 30)
  • Re: snort 2.1 and stream4 Matt Kettler (Jan 30)
• FW: remote tcpdump output & analysis (database) McCash, John (Jan 30)
  • <Possible follow-ups>
  • remote tcpdump output & analysis (database) McCash, John (Jan 31)
    • Re: remote tcpdump output & analysis (database) Dirk Geschke (Jan 31)
• Duplicate entries John Creegan (Jan 30)
• RE: MyDoom/Novarg Martin Jr., D. Michael (Jan 30)
• Off topic- Your Favorite Linux Distro DeBerry, Casey (Jan 30)
  • Re: Off topic- Your Favorite Linux Distro David Alonso De La Vega Tapage (Jan 30)
  • Re: Off topic- Your Favorite Linux Distro Kristofer T. Karas (Jan 30)
  • Re: Off topic- Your Favorite Linux Distro Mark Nipper (Jan 31)
    • Re: Off topic- Your Favorite Linux Distro Paul Schmehl (Jan 31)
  • Re: Off topic- Your Favorite Linux Distro Tim Sutinen (Feb 01)
  • <Possible follow-ups>
  • RE: Off topic- Your Favorite Linux Distro Christopher Lyon (Jan 30)
    • RE: Off topic- Your Favorite Linux Distro Erek Adams (Jan 31)
  • Re: Off topic- Your Favorite Linux Distro M. Morgan (Feb 01)
• MyDoom DOS detection hugh_fraser (Jan 30)
• Quick stupid question James Nonya (Jan 30)
  • Re: Quick stupid question Michael Boman (Jan 30)
    • Re: Quick stupid question ravivsn (Jan 31)
      • Re: Quick stupid question Dragos Ruiu (Jan 31)
• Segfault with snort 2.0 Jeff Kell (Jan 30)
  • Re: Segfault with snort 2.0 James Edwards (Jan 31)
  • Re: Segfault with snort 2.0 Erek Adams (Jan 31)
• libmysqlclient.so.12 error when I start snort. John Brewer (Jan 30)
  • Re: libmysqlclient.so.12 error when I start snort. Dirk Geschke (Jan 31)
• [REPOST] Snort not loging on MySql Di Fresco Marco (Jan 30)
  • <Possible follow-ups>
  • [REPOST] Snort not loging on MySql Di Fresco Marco (Feb 02)
• Please help here vasanth b (Jan 31)
  • RE: Please help here Mark E. Donaldson (Jan 31)
• How to add preprocessor? Gema de Toro Sánchez (Jan 31)
• snort 2.1 & stream4 snort user (Jan 31)
• Hopefully someone else has a better grasp on HTTP/_Inspect Jason Kolberg (Jan 31)
  • Re: Hopefully someone else has a better grasp on HTTP/_Inspect Erek Adams (Jan 31)
• How to modify the signature reference in sid-msg.map Jinqiao Yu (Jan 31)
  • <Possible follow-ups>
  • How to modify the signature reference in sid-msg.map Jinqiao Yu (Jan 31)
• Snort Performance issues Marc Quibell (Jan 31)
• idea for detection of rouge nodes? Fred McFeeters (Feb 01)
  • Re: idea for detection of rouge nodes? James Edwards (Feb 01)
    • RE: idea for detection of rouge nodes? Fred McFeeters (Feb 02)
  • How are alerts being logged? Peggy Kam (Feb 02)
    • Re: How are alerts being logged? Erek Adams (Feb 02)
• Using ACID with Snort 2.1.0? Michael Steele (Feb 01)
• regarding snort rules naganandas (Feb 01)
  • Re: regarding snort rules Ravi (Feb 01)
    • W32.Novarg.A@mm worm Work!, but.... Snortty (Feb 02)
• [Looking for] Open source reporting tool Aaron (Feb 01)
  • Re: [Looking for] Open source reporting tool Michael Boman (Feb 01)
  • <Possible follow-ups>
  • Re: [Looking for] Open source reporting tool Aaron (Feb 02)
• Ethernet Tap Question smbrown (Feb 01)
  • <Possible follow-ups>
  • Re: Ethernet Tap Question M. Morgan (Feb 02)
  • RE: Ethernet Tap Question CGhercoias (Feb 02)
• Replicated sensors? Toby Rodwell (Feb 01)
• SnortCenter probelms Toby Rodwell (Feb 01)
• looking for working 2.1.0 Troy Jordan (Feb 01)
• Content scanning Heinrich vanRiel (Feb 01)
• Paul CTR Passey is no longer supporting the CSIRC Paul . CTR . Passey (Feb 01)
• Viirus rules Michael . Mulholland (Feb 02)
  • Re: Viirus rules Matt Kettler (Feb 02)
• CFP - ESORICS 2004 - Call for Papers Fabien Pouget (Feb 02)
• CFP - RAID 2004 - Call for Papers Fabien Pouget (Feb 02)
• snort and mysql unknown index (Feb 02)
  • Re: snort and mysql Edin Dizdarevic (Feb 02)
• RUXCON Call For Papers rux (Feb 02)
• Snort not loging on MySql Di Fresco Marco (Feb 02)
  • <Possible follow-ups>
  • RE: Snort not loging on MySql Michael Steele (Feb 02)
• Re: Snort-users] Here are my updated MyDoom/MIMAIL.R and Variant signatures for SN ORT (Feb 02)
  • RE: Snort-users] Here are my updated MyDoom/MIMAIL.R and Variant signatures for Sam Evans (Jan 31)
• Snort 2.1.0 mysql plug-in Bill-IS . Dixon (Feb 02)
• SNORT and Linux 8.0 Michael Karl (Feb 02)
  • Re: SNORT and Linux 8.0 Edin Dizdarevic (Feb 02)
  • <Possible follow-ups>
  • RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
  • RE: SNORT and Linux 8.0 PPowenski (Feb 02)
  • RE: SNORT and Linux 8.0 John Creegan (Feb 02)
  • RE: SNORT and Linux 8.0 Dave Randolph (Feb 02)
  • RE: SNORT and Linux 8.0 Thompson, Jimi (Feb 02)
    • Re: SNORT and Linux 8.0 Andy Richter (Feb 02)
    • Re: SNORT and Linux 8.0 Keith W. McCammon (Feb 02)
    • RE: SNORT and Linux 8.0 robert schwartz (Feb 02)
    • RE: SNORT and Linux 8.0 Jim Hendrick (Feb 02)
    • RE: SNORT and Linux 8.0 Matt Kettler (Feb 02)
  • RE: SNORT and Linux 8.0 Nick Duda (Feb 02)
  • RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
    • RE: SNORT and Linux 8.0 Erek Adams (Feb 02)
  • RE: SNORT and Linux 8.0 PPowenski (Feb 03)
    • setting up Snort for the first time Richard Worwood (Feb 03)
      • Re: setting up Snort for the first time Christian Ehlen (Feb 04)
• retrieve IDS from unix sock Matteo (Feb 02)
• RE: snort: database: mysql_error: Duplicate entry John Creegan (Feb 02)
• Snort dropping packets KS (Feb 02)
  • Re: Snort dropping packets Matt Kettler (Feb 02)
  • Re: Snort dropping packets Erek Adams (Feb 02)
• What to do with malicius encrypted code!??i soldier Mx (Feb 02)
  • Re: What to do with malicius encrypted code!??i Matt Kettler (Feb 03)
• Correct version of libpcap? Sheahan, Paul (Feb 02)
  • Re: Correct version of libpcap? Erek Adams (Feb 02)
  • Re: Correct version of libpcap? Christian Ehlen (Feb 03)
    • Re: *BSD performance (was:Correct version of libpcap?) Martin Olsson (Feb 04)
      • Re: Re: *BSD performance (was:Correct version of libpcap?) Christian Ehlen (Feb 07)
• Help needed with logs Peggy Kam (Feb 02)
  • Re: Help needed with logs Michael Boman (Feb 03)
• monitoring only occuring on snort host Ted Iglehart (Feb 02)
  • Re: monitoring only occuring on snort host Matt Kettler (Feb 03)
• DNS server keeps communicating with Darkprofits.net and darkprofits.com Marlon . Richards (Feb 02)
  • Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Sean Lazar (Feb 02)
  • Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Ben Nelson (Feb 03)
  • <Possible follow-ups>
  • RE: DNS server keeps communicating with Darkprofits.net and darkprofits.com Grime, Richard S (Feb 03)
• Obtain CVE id from unix sock output of Snort Matteo (Feb 03)
  • Re: Obtain CVE id from unix sock output of Snort Brian (Feb 03)
  • <Possible follow-ups>
  • RE: Obtain CVE id from unix sock output of Snort Biswas, Proneet (Feb 03)
    • Re: Obtain CVE id from unix sock output of Snort Brian (Mar 01)
• snapshot layouts on snort.org Brian (Feb 03)
  • Re: snapshot layouts on snort.org Andreas Östling (Feb 03)
• Re: setting up Snort for the first time bclark (Feb 03)
• how to start to read the snort source code Tao Peng (Feb 03)
  • Message not available
    • Re: how to start to read the snort source code Matt Kettler (Feb 03)
• Help with a new rule to detect web traffic Chris Hoover (Feb 03)
  • <Possible follow-ups>
  • RE: Help with a new rule to detect web traffic JP Vossen (Feb 05)
• Snort Mysql Acid Combo Sam Osuala (Feb 04)
  • Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
    • Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
      • Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
      • Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
      • Re: Snort Mysql Acid Combo Josh Berry (Feb 04)
  • Re: Snort Mysql Acid Combo Mark Fagan (Feb 04)
    • Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
  • RE: Snort Mysql Acid Combo Michael Steele (Feb 04)
  • Re: Snort Mysql Acid Combo Nick Oliver (Feb 04)
  • <Possible follow-ups>
  • Re: Snort Mysql Acid Combo M. Morgan (Feb 04)
• Question on snort redirecting WAN FAT WU (Feb 04)
  • Re: Question on snort redirecting Jack Whitsitt (jofny) (Feb 04)
  • Re: Question on snort redirecting Owen McCusker (Feb 04)
  • Re: Question on snort redirecting Matt Kettler (Feb 04)
• snort and honeypot WAN FAT WU (Feb 04)
  • Re: snort and honeypot Skip Carter (Feb 04)
• one IP Keming (Feb 04)
  • Re: one IP Matt Kettler (Feb 04)
  • <Possible follow-ups>
  • RE: one IP JP Vossen (Feb 05)
• Does barnyard work with snort2.1.0? David (Feb 04)
  • Re: Does barnyard work with snort2.1.0? Bamm Visscher (Feb 04)
  • <Possible follow-ups>
  • Re: Does barnyard work with snort2.1.0? David (Feb 05)
• Port scans not showing up in ACID. Peters, Michael D. (Feb 04)
  • RE: Port scans not showing up in ACID. Michael Steele (Feb 04)
  • <Possible follow-ups>
  • RE: Port scans not showing up in ACID. John Creegan (Feb 05)
  • RE: Port scans not showing up in ACID. John Creegan (Feb 05)
    • RE: Port scans not showing up in ACID. Michael Steele (Feb 05)
  • RE: Port scans not showing up in ACID. John Creegan (Feb 05)
  • RE: Port scans not showing up in ACID. John Creegan (Feb 05)
• drowning in http inspect NON RFC character alerts John York (Feb 04)
  • Re: drowning in http inspect NON RFC character alerts Jeremy Hewlett (Feb 05)
• Duplicate alerts John Creegan (Feb 04)
• Email Notification Methods? M. Morgan (Feb 04)
  • Re: Email Notification Methods? Dirk Geschke (Feb 04)
  • RE: Email Notification Methods? Michael Steele (Feb 04)
  • <Possible follow-ups>
  • Email Notification Methods? Jason Baeder (Feb 05)
  • RE: Email Notification Methods? Peters, Michael D. (Feb 05)
• error start snort metthewm (Feb 04)
• Snort 2.1.1-RC1 Available Jeremy Hewlett (Feb 04)
  • Re: [Snort-devel] Snort 2.1.1-RC1 Available snortdev (Feb 05)
• Scan Nmap, Multicast Address Özgüç Bayrak (Feb 05)
• attack simulation Bini Mary Thomas (Feb 05)
• syslog messages Henri Chevallier (Feb 05)
  • RE: syslog messages Erik Mintz (Feb 05)
    • snort-2.1.0 upgrade error Peggy Kam (Feb 05)
      • Re: snort-2.1.0 upgrade error Jeremy Hewlett (Feb 05)
      • Re: snort-2.1.0 upgrade error Peggy Kam (Feb 05)
  • <Possible follow-ups>
  • RE: syslog messages Nick Duda (Feb 05)
• Deleted FTP signatures Yanyan Yang (Feb 05)
  • oinkmaster.pl - Unable to download rules, Why?? Snortty (Feb 05)
    • Re: oinkmaster.pl - Unable to download rules, Why?? Andreas Östling (Feb 05)
    • Re: oinkmaster.pl - Unable to download rules, Why?? Timm Schneider (Feb 05)
• RE: drowning in http inspect NON SN ORT (Feb 05)
• RE: Re: *BSD performance (was:Correct version of libpcap?) Bradberry, John (Feb 05)
• RE: oinkmaster.pl - Unable to download rules, Why?? Schmehl, Paul L (Feb 05)
• Aberrant alerts with snort 2.1.0 build 9 John Sage (Feb 05)
  • Re: Aberrant alerts with snort 2.1.0 build 9 Jeremy Hewlett (Feb 05)
• How Safe: Construction and Use of a Passive Ethernet Tap bwood-lists (Feb 05)
• cross over cables Brian (Feb 05)
• snortrules-snapshot-2_1.tar.gz and flowbits? David Gianndrea (Feb 05)
  • Re: snortrules-snapshot-2_1.tar.gz and flowbits? Brian (Feb 06)
• Network Bypass Josh Berry (Feb 05)
• react: block not working Micheal.Cottingham (Feb 06)
  • Message not available
    • Re: react: block not working Matt Kettler (Feb 06)
  • Message not available
    • Re: react: block not working Matt Kettler (Feb 06)
  • <Possible follow-ups>
  • Re: react: block not working Micheal.Cottingham (Feb 06)
• Has any one tried SnorcCenter with Snort 2.1.1-RC1? crazy (Feb 06)
  • alert_syslog Peggy Kam (Feb 06)
    • Re: alert_syslog Josh Berry (Feb 06)
      • Re: alert_syslog Peggy Kam (Feb 06)
      • Re: alert_syslog Owen McCusker (Feb 06)
      • Sneeze Peggy Kam (Feb 06)
  • <Possible follow-ups>
  • Has any one tried SnorcCenter with Snort 2.1.1-RC1? crazy (Feb 07)
    • Re: Has any one tried SnorcCenter with Snort 2.1.1-RC1? Jason Alexander (Feb 09)
• Variables: How to read SN ORT (Feb 06)
• Snort Variables SN ORT (Feb 06)
  • Re: Snort Variables Matt Kettler (Feb 06)
  • <Possible follow-ups>
  • RE: Snort Variables bmcdowell (Feb 06)
• Snort Sensor Stiles, Eric (Feb 06)
  • Re: Snort Sensor Erek Adams (Feb 06)
  • <Possible follow-ups>
  • Re: Snort Sensor M. Morgan (Feb 06)
• MyDoom Outbound Impossible Detects McCash, John (Feb 06)
  • Message not available
    • Re: MyDoom Outbound Impossible Detects Chris Keladis (Feb 06)
  • <Possible follow-ups>
  • Re: MyDoom Outbound Impossible Detects McCash, John (Feb 06)
  • RE: MyDoom Outbound Impossible Detects John York (Feb 06)
  • Re: MyDoom Outbound Impossible Detects McCash, John (Feb 11)
  • Re: MyDoom Outbound Impossible Detects McCash, John (Feb 11)
• WINSNORT.com Announcement: MANDRAKE 9.2 Install Guide added Michael Steele (Feb 07)
• Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)
  • Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
    • Re: Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)
      • Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
• anything wrong with arpspoof preprocessor? Shoelace (Feb 08)
• Document for Snort 2.1.0 on Fedora Core 1 Patrick S. Harper (Feb 08)
• IDS Design Help Jake Rog (Feb 08)
  • <Possible follow-ups>
  • Re: IDS Design Help Richard Bejtlich (Feb 09)
  • RE: IDS Design Help hugh_fraser (Feb 09)
• PLEASE HELP HERE. vasanth b (Feb 08)
  • RE: PLEASE HELP HERE. Jim Hendrick (Feb 09)
  • <Possible follow-ups>
  • Re: PLEASE HELP HERE. M. Morgan (Feb 09)
• Problem with Snort-inline aravind babu (Feb 09)
  • Re: Problem with Snort-inline ravivsn (Feb 09)
• Help!! Problem testing Snort Gema de Toro Sánchez (Feb 09)
  • Re: Help!! Problem testing Snort ravivsn (Feb 09)
• invalid event id, eventlog, win32 Daniel Guido (Feb 09)
  • Re: invalid event id, eventlog, win32 Chris Reid (Feb 09)
  • RE: invalid event id, eventlog, win32 Michael Steele (Feb 09)
• snort and Tru64 Darryl Cook (Feb 09)
• IIS UNICODE Attack? WAN FAT WU (Feb 09)
• Need help with Sneeze Peggy Kam (Feb 09)
  • Re: Need help with Sneeze ravivsn (Feb 09)
    • false positive generator Peggy Kam (Feb 10)
      • Re: false positive generator twig les (Feb 10)
      • Re: false positive generator Dirk Geschke (Feb 11)
      • Re: false positive generator Matt Kettler (Feb 10)
      • Re: false positive generator Ravi (Feb 10)
      • Re: false positive generator Dirk Geschke (Feb 11)
• IDS Policy Manager 1.4.0 Beta Released Jeff Dell (Feb 09)
• Re: [rpms] snort-mysql rpm JP Vossen (Feb 09)
• Snort+Prelude Reporting DoS advisory Gene Gomez (Feb 09)
• ACID bug ?: changing pages within query result Vines Scott D 2d Lt AFFTC/IT (Feb 09)
• SNORT (Linux) / MySQL (Win32) MVIBE (Feb 09)
  • <Possible follow-ups>
  • Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 09)
    • RE: SNORT (Linux) / MySQL (Win32) Michael Steele (Feb 10)
    • Re: SNORT (Linux) / MySQL (Win32) MVIBE (Feb 10)
      • RE: SNORT (Linux) / MySQL (Win32) Fred McFeeters (Feb 11)
    • Re: SNORT (Linux) / MySQL (Win32) M. Salman Farisi (Feb 10)
      • Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 12)
      • Re: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
    • RE: SNORT (Linux) / MySQL (Win32) robert schwartz (Feb 12)
      • RE: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
  • Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 11)
• ACID Oliver (Feb 09)
  • <Possible follow-ups>
  • RE: ACID DeBerry, Casey (Feb 12)
    • RE: ACID Michael Steele (Feb 12)
  • ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
    • RE: ACID Fred McFeeters (Feb 23)
      • DB SNORT Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
      • RE: DB SNORT HuMPie (Feb 23)
      • Re: ACID Scott Elgram (Feb 24)
  • ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
  • ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 24)
• HOME_NET msalmanf (Feb 09)
  • Re: HOME_NET James Riden (Feb 10)
  • Re: HOME_NET Matt Kettler (Feb 10)
• problem logging Elena Escolano Torner (Feb 10)
  • <Possible follow-ups>
  • Re: problem logging M. Morgan (Feb 10)
    • Re: problem logging Elena Escolano Torner (Feb 10)
    • Re: problem logging Jeff Kell (Feb 10)
• DShield Information Dusty Hall (Feb 10)
• Duplicate key errors in ACID John Creegan (Feb 10)
• Duplicates in ACID John Creegan (Feb 10)
• RULES -> Unknown ClassType: MVIBE (Feb 10)
  • Re: RULES -> Unknown ClassType: Brian (Feb 10)
    • Re: RULES -> Unknown ClassType: MVIBE (Feb 10)
  • RE: RULES -> Unknown ClassType: Michael Steele (Feb 10)
  • <Possible follow-ups>
  • RULES -> Unknown Classtype: VIBE (Feb 11)
• MySQL signatures escaped unneccesarily? Rick Johnson (Feb 10)
• snort.conf and startup variables Derek (X-Networks) (Feb 10)
  • Re: snort.conf and startup variables Erek Adams (Feb 11)
• Configuring snort.conf James Chong (Feb 10)
  • Re: Configuring snort.conf Erek Adams (Feb 11)
• RE: false positive generator Bob Walder (Feb 11)
  • Re: false positive generator Dirk Geschke (Feb 11)
  • <Possible follow-ups>
  • RE: false positive generator Bob Walder (Feb 11)
    • Re: false positive generator Dirk Geschke (Feb 11)
• SNORT Rule for netbios brute force break-in Robert Caplan (Feb 11)
  • <Possible follow-ups>
  • RE: SNORT Rule for netbios brute force break-in Shaffer, Paul D (Feb 11)
  • SNORT Rule for netbios brute force break-in Robert Caplan (Feb 11)
  • RE: SNORT Rule for netbios brute force break-in larosa, vjay (Feb 11)
    • Base 64 encoding phorvati (Mar 04)
• snort sending snmp traps naganandas (Feb 11)
• IPless interface on Debian... Tobias Rice (Feb 11)
  • <Possible follow-ups>
  • Re: IPless interface on Debian... M. Morgan (Feb 11)
  • Re: IPless interface on Debian... Tobias Rice (Feb 11)
• old versions of snort? Karl Sjödahl (Feb 11)
  • Re: old versions of snort? Erek Adams (Feb 11)
• Plugin Ragip Yahsieli (Feb 11)
• -T option error crazy (Feb 11)
  • Re: -T option error Erek Adams (Feb 11)
    • Re[2]: -T option error crazy (Feb 12)
      • Re[2]: -T option error Erek Adams (Feb 11)
      • Re: Re[2]: -T option error Drew Smith (Feb 11)
      • Re: Re[2]: -T option error Erek Adams (Feb 11)
      • Re[3]: -T option error crazy (Feb 12)
      • Re[3]: -T option error Erek Adams (Feb 11)
      • Re[4]: -T option error crazy (Feb 12)
      • Re[4]: -T option error Erek Adams (Feb 13)
      • Message not available
      • Re[6]: -T option error crazy (Feb 16)
      • Integrate Snort with Remedy, Anyone Please??? Snortty (Feb 12)
      • Re: Integrate Snort with Remedy, Anyone Please??? Owen McCusker (Feb 12)
      • Re: Integrate Snort with Remedy, Anyone Please??? Jeff Nathan (Feb 12)
      • Re: Re[3]: -T option error AJ Butcher, Information Systems and Computing (Mar 25)
  • Re: -T option error Drew Smith (Feb 11)
• how to start snort as service ( with normal user priv. ) Antje Schlüschen (Feb 11)
• Documentation!! SN ORT (Feb 11)
  • Re: Documentation!! Matt Kettler (Feb 11)
    • Re: Documentation!! SN ORT (Feb 11)
      • Re: Documentation!! Matt Kettler (Feb 11)
  • <Possible follow-ups>
  • RE: Documentation!! Mike Koponick (Feb 12)
    • RE: Documentation!! SN ORT (Feb 12)
    • RE: Documentation!! Michael Steele (Feb 12)
• ASN.1 Signature Dragos Ruiu (Feb 11)
• Please virus scan your systems Vines Scott D 2d Lt AFFTC/IT (Feb 11)
  • Re: Please virus scan your systems Keith W. McCammon (Feb 11)
  • Re: Please virus scan your systems Bryan Irvine (Feb 11)
    • Re: Please virus scan your systems Matt Southworth (Feb 11)
      • Re: Please virus scan your systems Drew Smith (Feb 11)
    • Re: Please virus scan your systems Josh Berry (Feb 11)
    • Re: Please virus scan your systems Matt Kettler (Feb 11)
• [Snort-announce] IDS Policy Manager 1.4.0 Beta Released Jeff Dell (Feb 11)
• filters Drew Smith (Feb 11)
  • Re: filters Matt Kettler (Feb 11)
    • Re: filters Drew Smith (Feb 11)
• snort-2.2.1-RC1 compile error Ken Bergquist (Feb 11)
  • Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 12)
  • <Possible follow-ups>
  • snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
  • snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
  • Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
    • Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 13)
    • Re: snort-2.2.1-RC1 compile error Martin Roesch (Feb 13)
      • Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 16)
• ACID PHP MYSQL ERROR MVIBE (Feb 11)
  • Re: ACID PHP MYSQL ERROR Drew Smith (Feb 11)
  • <Possible follow-ups>
  • ACID PHP MYSQL ERROR VIBE (Feb 12)
• Re: Snort-users] ACID PHP MYSQL ERROR MVIBE (Feb 11)
  • RE: Re: Snort-users] ACID PHP MYSQL ERROR Michael Steele (Feb 11)
• RE:Subject: IPless interface on Debian... Holger . Woehle (Feb 12)
  • Re[2]: Subject: IPless interface on Debian... Patrick Sitton (Feb 12)
• Some thoughts on IDS types - request for clarification :) Emre Bastuz (Feb 12)
  • Re: Some thoughts on IDS types - request for clarification :) Matt Kettler (Feb 12)
• Question regarding creating rules in Snortcenter ... Michael Chapman (Feb 12)
  • Re: Question regarding creating rules in Snortcenter ... AJ Butcher, Information Systems and Computing (Mar 25)
• RE: Some thoughts on IDS types - request for clarif ication :) Darden, Patrick S. (Feb 12)
• RE: Integrate Snort with Remedy, Anyone Please??? Noble, Kevin (Feb 12)
• [Snort-users]Microsoft Vulnerability in Microsoft ASN.1 (KB828028) signature CGhercoias (Feb 12)
• Updating Rules? Dusty Hall (Feb 12)
  • Re: Updating Rules? Andreas Östling (Feb 12)
  • <Possible follow-ups>
  • RE: Updating Rules? Vines Scott D 2d Lt AFFTC/IT (Feb 12)
    • Re: Updating Rules? Andy Richter (Feb 12)
    • RE: Updating Rules? Paul Schmehl (Feb 12)
      • RE: Updating Rules? AJ Butcher, Information Systems and Computing (Mar 25)
  • RE: Updating Rules? John Creegan (Feb 12)
  • Re: Updating Rules? Dusty Hall (Feb 12)
    • Re: Updating Rules? Paul Schmehl (Feb 12)
• Email Syed Ali (Feb 12)
  • RE: Email Michael Steele (Feb 12)
  • <Possible follow-ups>
  • RE: Email Nick Duda (Feb 13)
• snort tsnmp trap naganandas (Feb 13)
• Flexresp is not working Dmitry (Feb 13)
  • Re: Flexresp is not working Eduardo E. Silva (Feb 13)
• (spp_frag2) Oversized fragment, probable DoS Finney Charles E (Feb 13)
  • Re: (spp_frag2) Oversized fragment, probable DoS Martin Roesch (Feb 13)
• header/alert mixup bug(s) in snort 2.1.0? McCash, John (Feb 13)
• Not alerting TCP. Mark Zerr (Feb 13)
• snort rules with OS info? Susan Coulter (Feb 13)
  • Re: snort rules with OS info? Martin Roesch (Feb 13)
• Snort logging way too much Ochronus (Feb 13)
  • Re: Snort logging way too much Martin Roesch (Feb 13)
    • Re[2]: Snort logging way too much Ochronus (Feb 13)
      • Message not available
      • Re[2]: Snort logging way too much Ochronus (Feb 15)
      • Block Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
      • Message not available
      • Re: Block Matt Kettler (Feb 16)
      • Re: Block Paul Schmehl (Feb 16)
      • Re: Block Frank Knobbe (Feb 16)
      • Re: Block Paul Schmehl (Feb 16)
      • Re: Block Frank Knobbe (Feb 16)
      • Re: Block Brian (Feb 16)
      • Re: Block Matt Kettler (Feb 17)
• Trouble compiling Snort-2.1.0: snprintf.c Tomasz Piotr Palarz (Feb 14)
• Mysql is collecting data from snort, Acid won't display it. Wally Bedford (Feb 14)
  • RE: Mysql is collecting data from snort, Acid won't display it. Michael Steele (Feb 14)
  • <Possible follow-ups>
  • RE: Mysql is collecting data from snort, Acid won't display it. Wally Bedford (Feb 15)
• preprocessor arpspoof, help! Daniel Ascensão (Feb 15)
  • <Possible follow-ups>
  • RE: preprocessor arpspoof, help! Daniel Ascensão (Feb 15)
  • preprocessor arpspoof, help! Daniel Ascensão (Feb 16)
• no problem installing snort, winpcap -- but.... b0b39-prgmr (Feb 15)
• Trouble compiling Snort-2.1.0: snprintf.c (fwd) Tomasz Piotr Palarz (Feb 15)
• Different Portscan format under 2.1.0 to 2.0.5 Stephen Meatheringham (Feb 15)
  • Re: Different Portscan format under 2.1.0 to 2.0.5 M. Salman Farisi (Feb 15)
• ACID and delete alerts cc (Feb 16)
  • RE: ACID and delete alerts Michael Steele (Feb 16)
    • Re: ACID and delete alerts cc (Feb 16)
      • RE: ACID and delete alerts Michael Steele (Feb 17)
  • <Possible follow-ups>
  • Re: ACID and delete alerts cc (Feb 17)
• Rules for Adware Darden, Patrick S. (Feb 16)
• arp preprocessor Daniel Ascensão (Feb 16)
• Difference Portscan format under 2.1.0 to 2.0.5 Stephen Meatheringham (Feb 16)
• Reserved characters in msg:"..."? John Sage (Feb 16)
  • Re: Reserved characters in msg:"..."? Martin Roesch (Feb 17)
    • New snort rule for WORM_NETSKY.B yet PLEASE??? Snortty (Feb 18)
      • Re: New snort rule for WORM_NETSKY.B yet PLEASE??? Matt Kettler (Feb 18)
  • <Possible follow-ups>
  • RE: Reserved characters in msg:"..."? CGhercoias (Feb 16)
• Re: Block M. Morgan (Feb 16)
• Snort and VPN Bala Ayres (Feb 16)
  • Re: Snort and VPN Matt Kettler (Feb 16)
    • Re: Snort and VPN Bala Ayres (Feb 16)
      • Re: Snort and VPN Matt Kettler (Feb 16)
• snort alerts Bala Ayres (Feb 17)
• Michael Mulholland/ISU/DFP is out of the office. Michael . Mulholland (Feb 17)
• Re: ARPSpoof! Jeff Nathan (Feb 17)
  • <Possible follow-ups>
  • Re: ARPSpoof! Jeff Nathan (Feb 17)
• Questions on traffic crtech (Feb 17)
• anomalous http server cc (Feb 17)
  • Re: anomalous http server Matt Kettler (Feb 18)
• Snort in VMware Brian McNeilly (Feb 18)
  • Re: Snort in VMware Stephen W. Thompson (Feb 19)
  • <Possible follow-ups>
  • RE: Snort in VMware Douglas McCrea (Feb 18)
  • Re: Snort in VMware M. Morgan (Feb 18)
    • Re: Snort in VMware Jeff (Feb 18)
  • RE: Snort in VMware DM (Feb 19)
  • Re: Snort in VMware Brian McNeilly (Feb 19)
  • Re: Snort in VMware M. Morgan (Feb 19)
    • Re: Snort in VMware Mark Fagan (Feb 19)
      • OT: Re: Snort in VMware/hubs Jeff (Feb 19)
      • Re: Snort in VMware Michael Stone (Feb 23)
• Change path for compiler Rowland, Krisa W ERDC-ITL-MS Contractor (Feb 18)
  • Message not available
    • Re: Change path for compiler Matt Kettler (Feb 18)
  • <Possible follow-ups>
  • Change path for compiler Rowland, Krisa W ERDC-ITL-MS Contractor (Feb 19)
• Why ionkmaster dont really upgrade rules,,? soldier Mx (Feb 18)
• NetSky worm signature definition...!!! Semerjian, Ohanes (Feb 18)
  • <Possible follow-ups>
  • RE: NetSky worm signature definition...!!! Tim Hergert (Feb 19)
    • RE: NetSky worm signature definition...!!! Shane Williams (Feb 19)
    • Performance Question Martin Bündgens (Feb 19)
      • Re: Performance Question twig les (Feb 19)
  • RE: NetSky worm signature definition...!!! Semerjian, Ohanes (Feb 19)
• ACID default display method Jason Humes (Feb 19)
• http insect Adams, Chris (Feb 19)
• Snort failing to start... Jason Humes (Feb 19)
  • Re: Snort failing to start... Joe Oligny (Feb 19)
  • Re: Snort failing to start... Matt Kettler (Feb 19)
• config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
  • Re: config PHP for Snort in RH9 Mark Fagan (Feb 19)
  • Re: config PHP for Snort in RH9 mel (Feb 19)
  • <Possible follow-ups>
  • RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
    • Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
  • RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
    • Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
• OT New information about clamav Paul Schmehl (Feb 19)
  • Re: OT New information about clamav Matt Kettler (Feb 20)
    • Re: OT New information about clamav Paul Schmehl (Feb 20)
• how to enable portscan alert M. Salman Farisi (Feb 19)
  • Re: how to enable portscan alert twig les (Feb 19)
• New version (1.3) of SnortSlinger available Ben Nelson (Feb 19)
  • Re: New version (1.3) of SnortSlinger available M. Salman Farisi (Feb 20)
    • Re: New version (1.3) of SnortSlinger available Ben Nelson (Feb 21)
• Snort on Linux with no IP Brian McNeilly (Feb 20)
  • Re: Snort on Linux with no IP James Riden (Feb 20)
  • Re: Snort on Linux with no IP Erek Adams (Feb 20)
  • Re: Snort on Linux with no IP Yonah Russ (Feb 24)
  • <Possible follow-ups>
  • RE: Snort on Linux with no IP Grejda, Eric (Feb 23)
    • RE: Snort on Linux with no IP Mark Fagan (Feb 23)
    • Re: Snort on Linux with no IP Tony Fraser (Feb 23)
  • Re: Snort on Linux with no IP Brian McNeilly (Feb 23)
  • RE: Snort on Linux with no IP Schmehl, Paul L (Feb 24)
    • RE: Snort on Linux with no IP ypwhich (Feb 24)
  • Re: Snort on Linux with no IP Gabriel L. Somlo (Feb 24)
• Please post a good Nachi.B Signature Dan (Feb 21)
  • Re: Please post a good Nachi.B Signature Erek Adams (Feb 21)
    • Re: Please post a good Nachi.B Signature Jason Haar (Feb 22)
  • <Possible follow-ups>
  • Re: Please post a good Nachi.B Signature Dan (Feb 21)
    • Re: Please post a good Nachi.B Signature James Riden (Feb 21)
  • Re: Please post a good Nachi.B Signature SN ORT (Feb 23)
• SQUID scan proxy attempt Fabio Viero (Feb 22)
  • Simple configuration Mario Guerendo (Feb 22)
    • RE: Simple configuration Mark E. Donaldson (Feb 22)
  • <Possible follow-ups>
  • SQUID scan proxy attempt Fabio Viero (Feb 24)
  • RE: SQUID scan proxy attempt Wally Bedford (Feb 24)
• Source IP 173.80.0.0 Ed (Feb 22)
  • Re: Source IP 173.80.0.0 ypwhich (Feb 24)
    • Re: Source IP 173.80.0.0 [revisited], bug? Ed (Mar 02)
      • RE: Source IP 173.80.0.0 [revisited], bug? Fred McFeeters (Mar 02)
      • Re: Source IP 173.80.0.0 [revisited], bug? ypwhich (Mar 02)
• Compiling mysql support into snort and barnyard Mark Olbert (Feb 22)
  • Re: Compiling mysql support into snort and barnyard Rahul (Feb 22)
  • Re: Compiling mysql support into snort and barnyard Dirk Geschke (Feb 23)
• barnyard file reading question Mark Olbert (Feb 22)
  • Re: barnyard file reading question AJ Butcher, Information Systems and Computing (Feb 23)
• 2.1.0 compile problems and primary development platform Williams Jon (Feb 23)
  • <Possible follow-ups>
  • RE: 2.1.0 compile problems and primary development platform Schmehl, Paul L (Feb 23)
• Odd alert on /bin/chmod rule GJ Philput (Feb 23)
• barnyard question Mark Olbert (Feb 23)
• Snort problem with postgresal Mario Soto Cordones (Feb 23)
• Remotely monitor a switch port... Ridlon, Michael (Feb 23)
  • Re: Remotely monitor a switch port... Erek Adams (Feb 23)
  • <Possible follow-ups>
  • Re: Remotely monitor a switch port... JP Vossen (Feb 23)
    • Re: Remotely monitor a switch port... Ridlon, Michael (Feb 24)
      • Re: Remotely monitor a switch port... JP Vossen (Feb 24)
  • RE: Remotely monitor a switch port... Chris Calaf (Feb 24)
• ERROR: unknown preprocessor "ø~_decode" Mario Soto Cordones (Feb 23)
  • Re: [Snort-users] ERROR: unknown preprocessor "ø~_decode" Rahul (Feb 23)
• Puresecure... Ridlon, Michael (Feb 23)
  • <Possible follow-ups>
  • RE: Puresecure... Shaffer, Paul D (Feb 23)
• Newbie Notes and Question on Rule Creation Mark Olbert (Feb 23)
• RE: DB SNORT Shawn Kottke (Feb 23)
• snortsam problem ultan lankford (Feb 23)
  • Re: snortsam problem Frank Knobbe (Feb 23)
• make: Fatal error in reader: Makefile, line 484: Unexpected end o f line seen Semerjian, Ohanes (Feb 23)
  • Re: make: Fatal error in reader: Makefile, line 484: Unexpected end o f line seen Erek Adams (Feb 23)
• Re: 2.1.0 compile problems... JP Vossen (Feb 23)
• Brian Denicola/US/ABNAMRO/NL is out of the office. brian . denicola (Feb 23)
• HTTP session packet capture seems borken Bill McCarty (Feb 24)
• Problem compiling Snort 2.1.1 and 2.1.0 on old RedHat 6.2 based system Jan Hugo Prins (Feb 24)
  • Snort Wireless and BSD A. Wright (Feb 24)
• Re: Snort-users digest, Vol 1 #3994 - 10 msgs ultan lankford (Feb 24)
• I have a problem with snort.conf Guillermo Andres Gómez (Feb 24)
  • Re: I have a problem with snort.conf Rahul (Feb 24)
    • Re: I have a problem with snort.conf twig les (Feb 24)
    • Message not available
      • Re: I have a problem with snort.conf Rahul (Feb 24)
  • <Possible follow-ups>
  • RE: I have a problem with snort.conf Neil Fryer (Feb 24)
• Short UDP Packet FG12sqTSS (Feb 24)
• Bad Loop Back Traffic Scott Elgram (Feb 24)
  • <Possible follow-ups>
  • Re: Bad Loop Back Traffic bclark (Feb 24)
    • Re: Bad Loop Back Traffic Mat Harris (Feb 24)
    • Re: Bad Loop Back Traffic Frank Knobbe (Feb 24)
    • Re: Bad Loop Back Traffic Scott Elgram (Feb 25)
  • RE: Bad Loop Back Traffic Finney Charles E (Feb 24)
    • Re: RE: Bad Loop Back Traffic Scott Elgram (Feb 25)
  • Re: RE: Bad Loop Back Traffic James Nonya (Feb 24)
  • Re: Bad Loop Back Traffic SN ORT (Feb 25)
    • Re: Bad Loop Back Traffic Scott Elgram (Feb 27)
  • Re: Bad Loop Back Traffic Mark . Schutzmann (Feb 27)
• snort+snmp traps naganandas (Feb 24)
• Flowbits Douglas McCrea (Feb 24)
  • <Possible follow-ups>
  • RE: Flowbits Peters, Michael D. (Feb 24)
  • Re: Flowbits Joe Matusiewicz (Feb 24)
  • Re: flowbits adam (Feb 24)
    • Re: Re: flowbits Andreas Östling (Feb 24)
  • RE: Re: flowbits Douglas McCrea (Feb 24)
  • Re: flowbits adam (Feb 24)
• Re: [Snort-sigs] Reporting false positive for Snort rule Josh Berry (Feb 24)
• RE: [elvandar] Re: Snort on Linux with no IP Remko Lodder (Feb 24)
• SNORT IN MULTIPLE INTERFACE CARD Mario Soto Cordones (Feb 24)
• Re: Snort-users digest, Vol 1 #3997 - 11 msgs Nigel Houghton (Feb 24)
• RHWS/Snort/Bonding Brian M. Diehl (Feb 24)
• Install of Snort2.1.1 Brad Rose (Feb 24)
  • Re: Install of Snort2.1.1 cc (Feb 24)
• xdecode Install of Snort2.1.1 Brad Rose (Feb 25)
• Re: Bad Loopback Traffic bclark (Feb 25)
• Snort Deployment Suggestions Tom Riley (Feb 25)
  • Re: Snort Deployment Suggestions Josh Berry (Feb 25)
  • <Possible follow-ups>
  • RE: Snort Deployment Suggestions Kreimendahl, Chad J (Feb 25)
    • RE: Snort Deployment Suggestions Josh Berry (Feb 25)
  • Snort Deployment Suggestions Tom Riley (Feb 27)
• Strange Traffic to 10.0.1.128 Dusty Hall (Feb 25)
• Building snort w/ mysql support BCalvert (Feb 25)
  • RE: Building snort w/ mysql support Mark E. Donaldson (Feb 25)
  • <Possible follow-ups>
  • RE: Building snort w/ mysql support Koren, Alexander (Feb 25)
    • RE: Building snort w/ mysql support M. Salman Farisi (Feb 25)
• Snort 2.1.1 final is available! Jeremy Hewlett (Feb 25)
• Garbling FTP alerts Gary_Portnoy (Feb 25)
• RE: [Snort-devel] Snort 2.1.1 final is available! Kumar, Manoj (Feb 25)
• RE: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 25)
  • <Possible follow-ups>
  • RE: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 27)
• FLOW question Steven Suppe (Feb 25)
• Segfault on fun funy rule Jason Monroe "JC" (Feb 25)
  • Re: Segfault on fun funy rule Erek Adams (Feb 25)
    • Re: Segfault on fun funy rule Jason Monroe "JC" (Feb 26)
• Error snort -c -T /etc/snort/snort.conf M. Salman Farisi (Feb 25)
  • Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
    • Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
• configure option "enable-linux-smp-stats" Nerijus Krukauskas (Feb 26)
  • Re: configure option "enable-linux-smp-stats" Jeremy Hewlett (Feb 27)
• Problem with building snort-2.1.1 on rh7.0 boka (Feb 26)
  • Re: Problem with building snort-2.1.1 on rh7.0 - solved boka (Feb 26)
• snort.conf questions NEWELL Craig -TSDC (Feb 26)
• [ANNOUNCE] Demo Version of SENTINIX NOW Available! Bob Radvanovsky (Feb 26)
• SNORT and VLans Puetz, Christoph (Feb 26)
  • Re: SNORT and VLans twig les (Feb 26)
  • <Possible follow-ups>
  • RE: SNORT and VLans Martin Jr., D. Michael (Feb 26)
    • Re: SNORT and VLans Jason Haar (Feb 26)
• snortdb-extra.gz Bob Von Ilten (Feb 26)
  • <Possible follow-ups>
  • RE: snortdb-extra.gz Shawn Kottke (Feb 26)
• Snort 1U Appliance for Sale on EBay Nicholas Bachmann (Feb 26)
  • <Possible follow-ups>
  • RE: Snort 1U Appliance for Sale on EBay Kreimendahl, Chad J (Feb 27)
    • Re: Snort 1U Appliance for Sale on EBay Brian (Feb 27)
      • Re: Snort 1U Appliance for Sale on EBay Frank Knobbe (Feb 27)
      • Re: Snort 1U Appliance for Sale on EBay Nicholas Bachmann (Feb 27)
  • RE: Snort 1U Appliance for Sale on EBay Keith Pachulski (Mar 01)
• RE: make: Fatal error in reader: Makefile, line 484 : Unexpected end o f line seen Semerjian, Ohanes (Feb 26)
  • Re: make: Fatal error in reader: Makefile, line 484 : Unexpected end o f line seen Jeremy Hewlett (Feb 27)
• alert refused to pass Jasmine CHUA (Feb 27)
  • <Possible follow-ups>
  • RE: alert refused to pass Jasmine CHUA (Feb 27)
• snort logging outbound traffic Ochronus (Feb 27)
• Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Gabriel Assis Amancio (Feb 27)
  • Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" M. Salman Farisi (Feb 27)
  • Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Jeremy Hewlett (Feb 27)
    • Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Kristofer T. Karas (Feb 27)
• SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 27)
  • Re: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Ian Macdonald (Feb 27)
  • Re: SNORT has memory leak on Linux Red hat 9 ypwhich (Feb 27)
    • Re: SNORT has memory leak on Linux Red hat 9 twig les (Feb 27)
  • <Possible follow-ups>
  • RE: SNORT has memory leak on Linux Red hat 9 SN ORT (Mar 01)
    • (http_inspect) NON-RFC HTTP DELIMITER Peggy Kam (Mar 01)
• Page not available Lynn (Feb 27)
  • RE: Page not available Michael Steele (Feb 27)
• P2P Rules and Sending TCP Resets. Rob Ward (Feb 27)
  • Re: P2P Rules and Sending TCP Resets. Josh Berry (Feb 27)
  • <Possible follow-ups>
  • RE: P2P Rules and Sending TCP Resets. Chas Tomlin (Feb 27)
• Adware/Malware Rules List Darden, Patrick S. (Feb 27)
  • RE: Adware/Malware Rules List Jerry Shenk (Feb 29)
    • RE: Adware/Malware Rules List Mark E. Donaldson (Feb 29)
  • Re: Adware/Malware Rules List Max Valdez (Mar 01)
    • Re: Adware/Malware Rules List Bryan Irvine (Mar 02)
  • <Possible follow-ups>
  • Re: Adware/Malware Rules List James Nonya (Mar 02)
    • RE: Adware/Malware Rules List Jerry Shenk (Mar 04)
• New Snortcenter 2.x Jason Alexander (Feb 27)
• Adware/Malware Rules List V2 Darden, Patrick S. (Feb 27)
  • <Possible follow-ups>
  • RE: Adware/Malware Rules List V2 Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 04)
  • RE: Adware/Malware Rules List V2 Darden, Patrick S. (Mar 05)
• Newbie Jim Brown (Feb 27)
  • Re: Newbie Josh Berry (Feb 27)
  • <Possible follow-ups>
  • Newbie Jim Brown (Feb 28)
    • RE: Newbie Michael Steele (Feb 28)
  • Newbie Jim Brown (Feb 28)
• TCP Resets Josh Berry (Feb 27)
  • Re: TCP Resets twig les (Feb 27)
    • Re: TCP Resets Josh Berry (Feb 27)
    • Re: TCP Resets Jeff Kell (Feb 27)
      • Re: TCP Resets Josh Berry (Feb 27)
  • <Possible follow-ups>
  • Re: TCP Resets Gary Flynn (Feb 28)
• Segmentation fault after installing 2.1.1 (and 2.1.1RC1). Bo Jacobsen (Feb 28)
  • Re: Segmentation fault after installing 2.1.1 (and 2.1.1RC1). Bo Jacobsen (Feb 28)
• ACID gives erroneous information Erwin Van de Velde (Feb 29)
  • Re: ACID gives erroneous information Josh Berry (Feb 29)
    • Re: ACID gives erroneous information Erwin Van de Velde (Feb 29)
• double decoding attack Mark Olbert (Feb 29)
  • <Possible follow-ups>
  • Re: double decoding attack Ben Beeson (Mar 01)
    • Re: double decoding attack Sean Lazar (Mar 01)
• Help with snort message Ben Beeson (Feb 29)
• ACID modification cc (Mar 01)
  • RE: ACID modification Michael Steele (Mar 01)
    • Re: ACID modification cc (Mar 02)
• acid error boka (Mar 01)
  • Re: acid error Thomas Bechtold (Mar 01)
    • Re: acid error boka (Mar 01)
• Acid/Snort not logging UDP packets Jim Brown (Mar 01)
  • Re: Acid/Snort not logging UDP packets Josh Berry (Mar 01)
• Snort/mysql/acid and dshield.org Miner, Jonathan W (Mar 01)
  • <Possible follow-ups>
  • Re: Snort/mysql/acid and dshield.org Dusty Hall (Mar 01)
• Quick snortsam question James Nonya (Mar 01)
• snort doesn't write to mysql Ochs, Pam (Mar 01)
  • <Possible follow-ups>
  • snort doesn't write to mysql Ochs, Pamela T [Contr (HPTI)] (Mar 01)
    • Re: snort doesn't write to mysql Josh Berry (Mar 01)
  • snort doesn't write to mysql Ochs, Pam (Mar 02)
  • snort doesn't write to mysql Ochs, Pam (Mar 02)
• snort postgresql rpm problem Jon Doe (Mar 01)
  • <Possible follow-ups>
  • RE: snort postgresql rpm problem Thompson, Jimi (Mar 01)
  • RE: snort postgresql rpm problem JP Vossen (Mar 01)
• how to remove snort completely santosh kamble (Mar 01)
• (error) error installing snort with mysql support santosh kamble (Mar 01)
• Newbie question: needed PC specs and performance R . Welz (Mar 01)
  • Newbie question: needed PC specs and performance R . Welz (Mar 01)
    • RE: Newbie question: needed PC specs and performance Fred McFeeters (Mar 01)
  • <Possible follow-ups>
  • RE: Newbie question: needed PC specs and performance CGhercoias (Mar 01)
• how to add new function to snort ow to use debug option Gaurav_Jindal (Mar 01)
• More TCP Reset Questions Josh Berry (Mar 01)
  • Re: More TCP Reset Questions Bamm Visscher (Mar 01)
  • Message not available
    • Re: More TCP Reset Questions Matt Kettler (Mar 01)
      • Re: More TCP Reset Questions Josh Berry (Mar 01)
      • Message not available
      • Re: More TCP Reset Questions Matt Kettler (Mar 01)
• mostly an (my)sql question. John (Mar 01)
  • <Possible follow-ups>
  • RE: mostly an (my)sql question. John (Mar 01)
  • Re: mostly an (my)sql question. Roman Danyliw (Mar 01)
• threshold and suppress ?? Andraz Sraka (Mar 01)
  • Re: threshold and suppress ?? Jason (Mar 02)
    • Re: threshold and suppress ?? Thomas Bechtold (Mar 02)
• No logs in MYSQL Database but logs on localhost logfiles? Shannon M. Anderson (Mar 01)
  • <Possible follow-ups>
  • FW: No logs in MYSQL Database but logs on localhost logfiles? Shannon M. Anderson (Mar 01)
• Investigating mangled packets from pre-processor twig les (Mar 01)
• Snort is exiting after start Daniel Jagodziński (Mar 02)
  • RE: Snort is exiting after start Jerry Shenk (Mar 02)
  • Re: Snort is exiting after start twig les (Mar 02)
• Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR"] Daniel J. Roelker (Mar 02)
• PHP install problem! BCalvert (Mar 02)
• Snort IPv6 Chas Tomlin (Mar 02)
• Re: (http_inspect) NON-RFC DELIMITER Nigel Houghton (Mar 02)
• undefined reference to `errno` ?? Marcin Laskowski (Mar 02)
  • <Possible follow-ups>
  • undefined reference to `errno` ?? Marcin Laskowski (Mar 04)
• List admin please... Ed (Mar 02)
• ACID working again cc (Mar 02)
• snort.org and sourcefire.com resolving no more? henk (Mar 03)
  • Re: snort.org and sourcefire.com resolving no more? John Sage (Mar 03)
• www.snort.org down? Michael Scheidell (Mar 03)
  • <Possible follow-ups>
  • www.snort.org down? Michael Scheidell (Mar 03)
    • Re: www.snort.org down? Mat Harris (Mar 03)
  • Re: www.snort.org down? jrhendri (Mar 03)
    • Re: www.snort.org down? Mat Harris (Mar 03)
• www.snort.org down due to DNS failure.... Shannon M. Anderson (Mar 03)
• simple rule help--detect unauthorized servers John York (Mar 03)
• Snort Install Shabbar Arsiwala (Mar 03)
  • <Possible follow-ups>
  • RE: Snort Install Shawn Kottke (Mar 03)
  • Snort Install Shabbar Arsiwala (Mar 08)
  • Snort install Mario Guerendo (Mar 14)
    • Re: Snort install Thomas Bechtold (Mar 14)
      • Snort install john greene (Mar 14)
      • RE: Snort install Amod K (Mar 14)
      • RE: Snort install Amod K (Mar 14)
  • Re: Snort install nhdave (Mar 14)
• alert messages Rodrigo B. Ramos (Mar 03)
• W32.Beagle.J Worm Signature? Mark . Schutzmann (Mar 03)
• Nmap Scan Not Detected John Redrichs (Mar 03)
• Snort log alert is not the same as the live alerts. vmlinuz Mandrake (Mar 04)
  • <Possible follow-ups>
  • Snort log alert is not the same as the live alerts. vmlinuz Mandrake (Mar 18)
• resp:rst_all not working Venkata Raghavan (Mar 04)
• Startup Problem RichardKebo (Mar 04)
• ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT Fred McFeeters (Mar 04)
• Rule Flow Jochen Vogel (Mar 04)
• flow-portscan really suitable ??? BIZOU (Mar 04)
  • <Possible follow-ups>
  • RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)
  • Re: RE: flow-portscan really suitable ??? BIZOU (Mar 04)
  • RE: RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)
  • Re: RE: RE: flow-portscan really suitable ??? BIZOU (Mar 05)
    • Re: RE: RE: flow-portscan really suitable ??? Jeremy Hewlett (Mar 05)
• Demark PureSecure questions sam (Mar 04)
  • Re: Demark PureSecure questions Ridlon, Michael (Mar 04)
  • Re: Demark PureSecure questions Kristofer T. Karas (Mar 04)
  • <Possible follow-ups>
  • RE: Demark PureSecure questions Nick Duda (Mar 05)
• Noisy Rules Paul Lane (Mar 04)
  • <Possible follow-ups>
  • Re: Noisy Rules Mark . Schutzmann (Mar 04)
  • RE: Noisy Rules Schmehl, Paul L (Mar 04)
• snort-replay for 2.1.1 Andreas Östling (Mar 04)
• Question about best hardware Mike Cohen (Mar 04)
  • Re: Question about best hardware Michael Sconzo (Mar 04)
  • <Possible follow-ups>
  • Re: Question about best hardware M. Morgan (Mar 05)
  • RE: Question about best hardware Kreimendahl, Chad J (Mar 05)
    • RE: Question about best hardware Jason Haar (Mar 07)
      • RE: Question about best hardware Josh Berry (Mar 08)
      • Re: Question about best hardware Michael Stone (Mar 09)
      • RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 09)
      • RE: Question about best hardware Josh Berry (Mar 10)
      • RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
    • Re: Question about best hardware Sigurd Urdahl (Mar 12)
  • RE: Question about best hardware SN ORT (Mar 08)
  • RE: Question about best hardware Michael Miller (Mar 08)
    • RE: Question about best hardware Josh Berry (Mar 10)
      • RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
  • RE: Question about best hardware Hutchinson, Andrew (Mar 08)
    • Re: Question about best hardware Jason Haar (Mar 08)
      • pcre.h error . David Alonso De La Vega Tapage (Mar 08)
      • creating tables .. David Alonso De La Vega Tapage (Mar 09)
      • Re: creating tables .. David Alonso De La Vega Tapage (Mar 09)
  • RE: Question about best hardware Kreimendahl, Chad J (Mar 09)
• Telnet and FTP Rodrigo B. Ramos (Mar 04)
• Embedded SPEC incorrect in v2.1.1 Dax Kelson (Mar 04)
  • <Possible follow-ups>
  • RE: Embedded SPEC incorrect in v2.1.1 JP Vossen (Mar 04)
• mysql_error: Access denied for user: 'snort@localhost gsrao (Mar 04)
  • Re: mysql_error: Access denied for user: 'snort@localhost Jeff Price (Mar 05)
• custom sig file Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 04)
  • <Possible follow-ups>
  • RE: custom sig file JP Vossen (Mar 04)
  • RE: custom sig file SN ORT (Mar 05)
• flexresp question ravath k (Mar 04)
  • <Possible follow-ups>
  • flexresp question ravath k (Mar 04)
  • Flexresp question ravath k (Mar 05)
    • Re: Flexresp question Kristofer T. Karas (Mar 05)
• sensor Dmitry Chorine (Mar 04)
  • Re: sensor twig les (Mar 04)
  • <Possible follow-ups>
  • RE: sensor Dmitry Chorine (Mar 04)
• E-mail Dmitry Chorine (Mar 04)
  • Re: E-mail twig les (Mar 04)
  • Re: E-mail Ben Nelson (Mar 04)
• have i been banned Fred McFeeters (Mar 04)
  • Re: have i been banned twig les (Mar 04)
  • Re: have i been banned Matt Kettler (Mar 05)
• Question of traffic result using snort? Jaeho Kwon (Mar 04)
• Repost: resp:rst_all not working Venkata Raghavan (Mar 05)
  • Re: Repost: resp:rst_all not working Matt Kettler (Mar 05)
    • Re: Repost: resp:rst_all not working Venkata Raghavan (Mar 05)
      • Re: Repost: resp:rst_all not working Matt Kettler (Mar 08)
• Barnyard payload Jochen Vogel (Mar 05)
• Snort in anomaly mode? Jason Humes (Mar 05)
• [OT] - RE: Repost: resp:rst_all not working bmcdowell (Mar 05)
  • RE: [OT] - RE: Repost: resp:rst_all not working Lucretia Enterprises (Mar 05)
• Help need in Snort configuration mohan Sharma (Mar 05)
  • Re: Help need in Snort configuration Ravi (Mar 08)
    • ignorehost in snort.conf Dose Not ignore my scanner, why? Snortty (Mar 10)
  • <Possible follow-ups>
  • RE: Help need in Snort configuration Nick Duda (Mar 05)
• Testing snort? Ben (Mar 06)
  • Re: Testing snort? Ciprian Badescu (Mar 08)
• Windows Set-up Chris Manteuffel (Mar 06)
  • RE: Windows Set-up Mark E. Donaldson (Mar 06)
• Win32 v2.1 as service - two instances? Rich Adamson (Mar 06)
  • Re: Win32 v2.1 as service - two instances? Chris Burton (Mar 06)
    • Re: Win32 v2.1 as service - two instances? Rich Adamson (Mar 06)
• Win32 v2.11 Build24 stable? Rich Adamson (Mar 06)
• Barnyard 0.2.0 beta1 is available Andrew R. Baker (Mar 07)
• Looking for Perl archive script for Snort with ACID and MySQL JP Vossen (Mar 07)
  • <Possible follow-ups>
  • RE: Looking for Perl archive script for Snort with ACID and MySQL Schmehl, Paul L (Mar 08)
• Help me slanducci (Mar 08)
• Re: Snort in anomaly mode Jason Humes (Mar 08)
• Help me it slanducci (Mar 08)
• I think it ok slanducci (Mar 08)
• Sensor Hardware jonasb (Mar 08)
• Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 08)
  • RE: Sensor logging at remote mysql db Michael Steele (Mar 08)
    • Re: Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 09)
      • Re: Sensor logging at remote mysql db AJ Butcher, Information Systems and Computing (Mar 10)
• Re: Snort-users digest, Vol 1 #4029 - 2 msgs jayesh (Mar 08)
• running snort in promiscuous mode Jan Hormann (Mar 09)
  • Re: running snort in promiscuous mode AJ Butcher, Information Systems and Computing (Mar 10)
• S2I compiler Denis Lyons (Mar 09)
• Sendig alerts to another system pierangelo motta (Mar 09)
• Setup & Configure Snort 2.1.1 on Windows XP? Danny Cannady (Mar 09)
  • Re: Setup & Configure Snort 2.1.1 on Windows XP? keith-list (Mar 09)
• Interesting problem with Snort 2.1.0 today -- sam (Mar 09)
  • Re: Interesting problem with Snort 2.1.0 today -- Jeremy Hewlett (Mar 10)
• Problems with links in ACID Luis Claudio R. da Silveira (Mar 09)
  • Re: Problems with links in ACID AJ Butcher, Information Systems and Computing (Mar 10)
• Snort error Danny Cannady (Mar 09)
  • <Possible follow-ups>
  • RE: Snort error Danny Cannady (Mar 09)
• Portscan traffic on ACID James Chong (Mar 09)
  • Re: Portscan traffic on ACID James Chong (Mar 09)
  • Re: Portscan traffic on ACID James Chong (Mar 09)
  • RE: No portscan still on ACID James Chong (Mar 09)
    • RE: RE: No portscan still on ACID Michael Steele (Mar 09)
• signature needed for imesh p2p Jasmine CHUA (Mar 10)
• failure to generate alerts from tcpdump file jwang (Mar 10)
  • Re: failure to generate alerts from tcpdump file ypwhich (Mar 10)
  • Re: failure to generate alerts from tcpdump file Matt Kettler (Mar 10)
• snort multi packet inspection Gaurav_Jindal (Mar 10)
• Time used by snort Geoff Craig (Mar 10)
• LogRep Mike Koponick (Mar 10)
• Question about passwd file Michael . Mulholland (Mar 10)
  • Re: Question about passwd file twig les (Mar 10)
• Snort log management Jason Humes (Mar 10)
  • <Possible follow-ups>
  • RE: Snort log management Jason Humes (Mar 11)
• Performance tuning for a G5 Xserve? David DeCoster (Mar 10)
• installing snort ? john greene (Mar 10)
  • Re: installing snort ? Matt Kettler (Mar 10)
    • commercial installations ? john greene (Mar 11)
• Patch for Snort FAQ Jason Monroe "JC" (Mar 10)
• flow-portscan. Chris Keladis (Mar 11)
• ACID 2.0? McCash, John (Mar 11)
  • RE: ACID 2.0? Fred McFeeters (Mar 11)
  • Re: ACID 2.0? SNORT (Mar 12)
• Looking for those who use LogSnorter Michael Shirk (Mar 11)
• installing snort ? (john greene) Edwin Ramos (Mar 11)
• Snort+iptables in the same machine Luis Claudio R. da Silveira (Mar 11)
  • Re: Snort+iptables in the same machine Nick Hatch (Mar 11)
  • <Possible follow-ups>
  • RE: Snort+iptables in the same machine SN ORT (Mar 12)
• generators-files Thomas Bechtold (Mar 12)
• Unified log - how binary are they? Sigurd Urdahl (Mar 12)
  • Re: Unified log - how binary are they? Andrew R. Baker (Mar 13)
• Problem stopping snort senthu (Mar 12)
• Snort, MySql, Apache, & PHP Problem - Checked by Vexira - Scott Bounds (Mar 12)
  • Re: Snort, MySql, Apache, & PHP Problem - Checked by Vexira - Jim Hendrick (Mar 12)
  • Hummm... Michael Steele (Mar 12)
    • RE: Hummm... Jerry Shenk (Mar 12)
      • Re: Hummm... Jason Haar (Mar 14)
      • Re: Hummm... ypwhich (Mar 14)
      • RE: Hummm... Michael Steele (Mar 14)
      • RE: Hummm... Ben (Mar 14)
      • RE: Hummm... Michael Steele (Mar 15)
      • Re: Hummm... Martin Roesch (Mar 15)
      • RE: Hummm... ypwhich (Mar 14)
      • RE: Hummm... Ted Kaczmarek (Mar 16)
      • Re: Hummm... AJ Butcher, Information Systems and Computing (Mar 15)
      • Re: Hummm... Martin Roesch (Mar 15)
      • Re: Hummm... Martin Roesch (Mar 15)
• Disable alerts from certain machines Whitfield, Ken (Mar 12)
  • RE: Disable alerts from certain machines Jerry Shenk (Mar 12)
    • RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 25)
      • RE: Disable alerts from certain machines - Not working for me? Andreas Östling (Mar 25)
      • RE: Disable alerts from certain machines - Not working for me? rodrigo . ramos (Mar 26)
      • RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 26)
  • Re: Disable alerts from certain machines Martin Roesch (Mar 31)
• Barnyard 0.2.0-beta2 available Andrew R. Baker (Mar 13)
• Tuning Signatures Jim Terry (Mar 13)
  • Re: Tuning Signatures AJ Butcher, Information Systems and Computing (Mar 15)
    • Re: Tuning Signatures Tod Beardsley (Mar 15)
• Init script Erwin Van de Velde (Mar 14)
• flow-portscan ravath k (Mar 15)
• Re: Hummm... Shannon M. Anderson (Mar 15)
  • <Possible follow-ups>
  • RE: Hummm... Kreimendahl, Chad J (Mar 15)
    • Re: Hummm... Martin Roesch (Mar 15)
  • RE: Hummm... Shannon M. Anderson (Mar 16)
    • Re: Hummm... Martin Roesch (Mar 17)
  • RE: Hummm... Kreimendahl, Chad J (Mar 16)
    • Re: Hummm... Martin Roesch (Mar 16)
  • RE: Hummm... Kreimendahl, Chad J (Mar 17)
  • RE: Hummm... Shaffer, Paul D (Mar 17)
• CVS FAQ? (snort and barnyard issues) Michael Miller (Mar 15)
  • Re: CVS FAQ? (snort and barnyard issues) Martin Roesch (Mar 15)
    • RE: CVS FAQ? ... Fred Portnoy (Mar 15)
  • Re: CVS FAQ? (snort and barnyard issues) Andrew R. Baker (Mar 15)
  • <Possible follow-ups>
  • RE: CVS FAQ? (snort and barnyard issues) Michael Miller (Mar 15)
• Logsnorter problem Carlos (Mar 15)
  • Re: Logsnorter problem Jason Haar (Mar 15)
  • <Possible follow-ups>
  • Logsnorter problem Carlos (Mar 18)
    • Re: Logsnorter problem Michael Boman (Mar 19)
      • Re: Logsnorter problem Carlos (Mar 18)
• Keeping separate databases? Jason Humes (Mar 15)
  • Re: Keeping separate databases? twig les (Mar 15)
  • Re: Keeping separate databases? Jason Haar (Mar 15)
  • <Possible follow-ups>
  • RE: Keeping separate databases? Jason Humes (Mar 15)
  • RE: Keeping separate databases? Jason Humes (Mar 16)
  • RE: Keeping separate databases? Jason Haar (Mar 16)
    • RE: Keeping separate databases? Jason Monroe "JC" (Mar 16)
      • Re: Keeping separate databases? Jason Haar (Mar 16)
• RE: How to delete alerts without acid SN ORT (Mar 15)
  • RE: How to delete alerts without acid twig les (Mar 15)
  • <Possible follow-ups>
  • RE: How to delete alerts without acid Jason Humes (Mar 15)
    • RE: How to delete alerts without acid SN ORT (Mar 15)
  • How to delete alerts without acid Jason Humes (Mar 16)
    • RE: How to delete alerts without acid Jerry Shenk (Mar 15)
  • RE: How to delete alerts without acid Hutchinson, Andrew (Mar 16)
  • RE: How to delete alerts without acid Schmehl, Paul L (Mar 16)
• winsnort install john greene (Mar 15)
  • RE: winsnort install robert schwartz (Mar 16)
• RE: CVS FAQ? ... Schmehl, Paul L (Mar 15)
• how to fast locate the rule by the alert? Lin Zhong (Mar 15)
• barnyard looses details WRT ACID? Jason Haar (Mar 15)
  • Re: barnyard looses details WRT ACID? Bamm Visscher (Mar 15)
    • Re: barnyard looses details WRT ACID? AJ Butcher, Information Systems and Computing (Mar 16)
• building snort from CVS Jason Monroe "JC" (Mar 15)
  • Re: building snort from CVS Michael Boman (Mar 16)
  • <Possible follow-ups>
  • Re: building snort from CVS Nigel Houghton (Mar 16)
• Re: Snort-users digest, Vol 1 #4045 - 13 msgs Nigel Houghton (Mar 15)
• Update rules....but not all SNORT (Mar 16)
  • <Possible follow-ups>
  • RE: Update rules....but not all Dan Fiorito (Mar 16)
• v2.1 config question Rich Adamson (Mar 16)
  • <Possible follow-ups>
  • RE: v2.1 config question Dave Randolph (Mar 16)
• snort db update Matteo (Mar 16)
• Generator ID in threshold directive Bill McCarty (Mar 16)
  • Re: Generator ID in threshold directive Jeremy Hewlett (Mar 19)
• Cannot archive alerts (ACID) Jeff Workman (Mar 16)
  • Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 16)
    • Re: Cannot archive alerts (ACID) Jeff Workman (Mar 19)
      • Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 17)
• FIltering out Internal Mail Logging frank.hodits (Mar 16)
  • <Possible follow-ups>
  • Re: FIltering out Internal Mail Logging Mark . Schutzmann (Mar 16)
• Are there any problems Snort 2.1.1 with ACID v0.9.6b23? Thomas Reisinger (Mar 16)
  • Re: Are there any problems Snort 2.1.1 with ACID v0.9.6b23? Paul Schmehl (Mar 16)
• Problem with compiling/installing snort 2.1.1 on RH 9.0 Thomas Reisinger (Mar 16)
  • Re: Problem with compiling/installing snort 2.1.1 on RH 9.0 Ted Kaczmarek (Mar 16)
• Best way to alert portscan activity? Rich (Mar 16)
• Snort log no longer updating Koski, Brian (Mar 16)
• Feature request: thresholds need another counter? Jason Haar (Mar 16)
  • Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 16)
    • Re: Feature request: thresholds need another counter? Jason (Mar 17)
      • Re: Feature request: thresholds need another counter? Frank Knobbe (Mar 18)
      • Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 19)
      • Re: Feature request: thresholds need another counter? Jason Haar (Mar 20)
    • Re: Feature request: thresholds need another counter? Michael Boman (Mar 19)
• portscan2 - display which ports scanned in acid Andy Simpson (Mar 17)
  • <Possible follow-ups>
  • portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)
    • Re: portscan2 - display which ports scanned in acid Marcin Laskowski (Mar 19)
  • RE: portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)
  • RE: portscan2 - display which ports scanned in acid Kreimendahl, Chad J (Mar 19)
• ACID: Unknown Database type specified: a DBtype of " was specified John (Mar 17)
  • RE: ACID: Unknown Database type specified: a DBtype of " was specified Lucretia Enterprises (Mar 17)
• ACID: Unknown Database type specified: a DBtype of " was specified (2) John (Mar 17)
• problem with ACID (portscan) Maxim (Mar 17)
  • Re: problem with ACID (portscan) Marcin Laskowski (Mar 17)
• log files Luong, Natalie N (Mar 17)
  • <Possible follow-ups>
  • Re: log files Dusty Hall (Mar 18)
• Hello I am new user Hemant Thakre (Mar 17)
• Icmp Ping cc (Mar 18)
  • RE: Icmp Ping Jerry Shenk (Mar 18)
    • RE: Icmp Ping Jim Hendrick (Mar 18)
      • Re: Icmp Ping cc (Mar 18)
      • RE: Icmp Ping Jerry Shenk (Mar 19)
    • Re: Icmp Ping cc (Mar 18)
      • RE: Icmp Ping Jim Hendrick (Mar 18)
      • RE: Icmp Ping Lucretia Enterprises (Mar 19)
• syslog-ng problem agnelo d (Mar 18)
  • <Possible follow-ups>
  • syslog-ng problem agnelo d (Mar 19)
  • syslog-ng problem agnelo d (Mar 19)
• Snort permissions problem Jason Humes (Mar 18)
  • Re: Snort permissions problem neil (Mar 18)
• How to tell snort version and upgrade Jason Humes (Mar 18)
  • Re: How to tell snort version and upgrade neil (Mar 18)
  • <Possible follow-ups>
  • RE: How to tell snort version and upgrade Jason Humes (Mar 18)
    • RE: How to tell snort version and upgrade neil (Mar 18)
• Snort running on two interfaces Jason Humes (Mar 18)
  • Re: Snort running on two interfaces neil (Mar 18)
  • Re: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 18)
  • <Possible follow-ups>
  • RE: Snort running on two interfaces Jason Humes (Mar 18)
    • RE: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 19)
• Script to install Snort and required packages Nelson, Gregg (Mar 18)
• RFC: SHELLCODE and WEDAV alerts Michael Shirk (Mar 18)
  • Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
    • Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
• Snort installation script Nelson, Gregg (Mar 18)
• Re: Snort-users digest, Vol 1 #4056 - 9 msgs SN ORT (Mar 18)
• What does the number in the binary log file name mean? Lin Zhong (Mar 18)
  • Re: What does the number in the binary log file name mean? Bamm Visscher (Mar 18)
• Making zero headway with barnyard Michael Miller (Mar 18)
  • Re: Making zero headway with barnyard Bamm Visscher (Mar 18)
  • <Possible follow-ups>
  • RE: Making zero headway with barnyard Michael Miller (Mar 19)
    • Re: Making zero headway with barnyard Bamm Visscher (Mar 19)
  • RE: Making zero headway with barnyard Michael Miller (Mar 19)
• 'mysql_error: Duplicate entry', what am I doing wrong? JP Vossen (Mar 18)
  • RE: 'mysql_error: Duplicate entry', what am I doing wrong? Mark E. Donaldson (Mar 19)
• PID Location Jim Gifford (Mar 19)
• problem with syslog-ng agnelo d (Mar 19)
  • <Possible follow-ups>
  • problem with syslog-ng agnelo d (Mar 19)
• Re: Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
  • <Possible follow-ups>
  • Re: Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
    • listening 2 interfaces at once? Peggy Kam (Mar 19)
      • Re: listening 2 interfaces at once? neil (Mar 19)
• Snort inline and ip_queue neil (Mar 19)
  • Re: Snort inline and ip_queue neil (Mar 19)
  • Re: Snort inline and ip_queue Stephan Scholz (Mar 23)
  • Re: Snort inline and ip_queue Ravi (Mar 23)
• Detecting use of Anonymous Proxies Eric Ferguson (Mar 19)
  • Re: Detecting use of Anonymous Proxies neil (Mar 19)
• Re: portscan2 - display which ports scanned in acid John Creegan (Mar 19)
• Event Correlation or Incident Management for Snort Database? McCash, John (Mar 19)
  • <Possible follow-ups>
  • RE: Event Correlation or Incident Management for Snort Database? hugh_fraser (Mar 19)
  • RE: Event Correlation or Incident Management for Snort Database? McCash, John (Mar 19)
• Re: listening 2 interfaces at once? Karpo, Derrick (Mar 19)
• FreeBSD install guide for Sguil 0.3.1 Richard Bejtlich (Mar 19)
• http_decode line in snort.conf gets garbled Christophe Zwecker (Mar 20)
  • <Possible follow-ups>
  • http_decode line in snort.conf gets garbled Christophe Zwecker (Mar 22)
    • Re: http_decode line in snort.conf gets garbled Rajesh Joseph (Mar 23)
• uricontent easily evaded on Apache Kanatoko (Mar 20)
• Exhausted - SNORT not logging to MySQL database Your Name (Mar 20)
  • Re: Exhausted - SNORT not logging to MySQL database Paul Schmehl (Mar 20)
  • RE: Exhausted - SNORT not logging to MySQL database Michael Steele (Mar 20)
    • Promiscuous Mode pfeito (Mar 20)
      • Re: Promiscuous Mode Paul Schmehl (Mar 20)
      • RE: Promiscuous Mode pfeito (Mar 21)
      • RE: Promiscuous Mode Paul Schmehl (Mar 21)
      • HOME_NET var on snort.conf pfeito (Mar 21)
      • Re: HOME_NET var on snort.conf Paul Schmehl (Mar 21)
      • Re: HOME_NET var on snort.conf neil (Mar 22)
      • RE: HOME_NET var on snort.conf pfeito (Mar 22)
      • RE: HOME_NET var on snort.conf pfeito (Mar 22)
      • RE: HOME_NET var on snort.conf Michael Boman (Mar 22)
      • RE: HOME_NET var on snort.conf pfeito (Mar 25)
  • RE: Exhausted - SNORT not logging to MySQL database Mark E. Donaldson (Mar 20)
• Snort Abend after BAD-TRAFFIC Mark . Schutzmann (Mar 21)
  • Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
  • <Possible follow-ups>
  • Re: Snort Abend after BAD-TRAFFIC Mark . Schutzmann (Mar 21)
    • Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
      • Re: Snort Abend after BAD-TRAFFIC Frank Knobbe (Mar 21)
      • Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
    • Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
  • Re: Snort Abend after BAD-TRAFFIC Steve Thompson (Mar 23)
• Truncated UDP Header Koren, Alexander (Mar 21)
• Open question regarding the future of Visual Intrusion Analyzer Eric Knight (Mar 21)
• Unzipping Question Mark Sargent (Mar 21)
  • Re: Unzipping Question Matt Kettler (Mar 21)
  • RE: Unzipping Question Mark Sargent (Mar 22)
• Snort No Output /MYSQL error Alan.Nguyenchan (Mar 21)
• snort gui management tool agnelo d (Mar 22)
  • RE: snort gui management tool Jeff Dell (Mar 22)
  • RE: snort gui management tool Mark E. Donaldson (Mar 22)
• portscan.log Mary M. Chaddock (Mar 22)
• Obtaining HTTP header information and Barnyard Christopher Bell (Mar 22)
• 2.1.1 crashes regularly on Fedora Core 1 (with 2 dumps) Crow, Owen (Mar 22)
• setting rules for snortsam MEGA Hospedagem (Mar 22)
• ATTACK RESPONSES 403 Forbidden Gould, Scott (Mar 22)
  • <Possible follow-ups>
  • RE: ATTACK RESPONSES 403 Forbidden Gould, Scott (Mar 23)
• Anybody is there Hemant Thakre (Mar 22)
• Linux RPMS Jason Monroe "JC" (Mar 22)
• flowcache stats pierangelo motta (Mar 23)
• have i beenn HACKED or rooted ?? soldier Mx (Mar 23)
  • <Possible follow-ups>
  • RE: have i beenn HACKED or rooted ?? Petriz, Pablo (Mar 23)
• MSSQL jeroen.koekkoek (Mar 23)
• Witty worm sig Dave Ellingsberg (Mar 23)
  • Re: Witty worm sig Tod Beardsley (Mar 23)
• Snort en mode NIDS sanaâ Aitouchen (Mar 23)
  • Re: Snort en mode NIDS neil (Mar 23)
  • Re: Snort en mode NIDS Ravi (Mar 23)
  • Re: Snort en mode NIDS Tomasz Piotr Palarz (Mar 23)
• Snort sensor setup Lance Boon (Mar 23)
  • RE: Snort sensor setup Michael Steele (Mar 23)
• Asymmetric routing and IDS correlation ? Glenn Forbes Fleming Larratt (Mar 23)
  • Re: Asymmetric routing and IDS correlation ? Rich Adamson (Mar 23)
  • Re: Asymmetric routing and IDS correlation ? Josh Berry (Mar 23)
    • Re: Asymmetric routing and IDS correlation ? Jason Haar (Mar 23)
  • Re: Asymmetric routing and IDS correlation ? Dirk Geschke (Mar 24)
  • Re: Asymmetric routing and IDS correlation ? Michael Richardson (Mar 25)
  • <Possible follow-ups>
  • RE: Asymmetric routing and IDS correlation ? Biswas, Proneet (Mar 23)
• Snort Logging Ragip Yahsieli (Mar 23)
• does --enable-flexresp(2) works? pierangelo motta (Mar 23)
  • Re: does --enable-flexresp(2) works? Paul Schmehl (Mar 23)
    • Re: does --enable-flexresp(2) works? pierangelo motta (Mar 24)
• AW: Witty worm sig peter . grosse-hering (Mar 23)
• Is snort dropping packets Jason Humes (Mar 23)
  • <Possible follow-ups>
  • Re: Is snort dropping packets John Creegan (Mar 23)
  • RE: Is snort dropping packets Jason Humes (Mar 24)
  • RE: Is snort dropping packets John Creegan (Mar 24)
  • RE: Is snort dropping packets Hutchinson, Andrew (Mar 24)
    • RE: Is snort dropping packets Rodrigo B. Ramos (Mar 24)
    • Re: Is snort dropping packets Jeff (Mar 24)
  • Re: Is snort dropping packets John Creegan (Mar 24)
• Snort with SPADE...snort in anomaly mode? Jason Humes (Mar 23)
  • RE: Snort with SPADE...snort in anomaly mode? pfeito (Mar 25)
• Detecting http 'basic-auth' brute force soidberg (Mar 23)
  • Re: Detecting http 'basic-auth' brute force Josh Berry (Mar 23)
    • Re: Detecting http 'basic-auth' brute force Jason Haar (Mar 23)
• Question about alert Jason Humes (Mar 23)
• Obtaining HTTP header info and Barnyard Christopher Bell (Mar 23)
  • <Possible follow-ups>
  • Obtaining HTTP header info and Barnyard Christopher Bell (Mar 25)
• Couple of quick questions Charles Lacroix (Mar 23)
  • Re: Couple of quick questions Bennett Todd (Mar 23)
    • Re: Couple of quick questions Jason Haar (Mar 23)
      • Re: Couple of quick questions Charles Lacroix (Mar 24)
• How to set thresholds parameters for various attack Gaurav_Jindal (Mar 23)
• Swatch configuration problem Alan (Mar 23)
  • <Possible follow-ups>
  • RE: Swatch configuration problem Vogle, Brian (Mar 24)
  • Re: Swatch configuration problem ids (Mar 24)
• active response + managing sensors Marcin Laskowski (Mar 24)
• SynFlood / Total Connection Count with Snort Andy Simpson (Mar 24)
• Apache Whitespace and Bare Byte Unicode Encoding Lane LiaBraaten (Mar 24)
• compiling snort with icc 8.0 Yonah Russ (Mar 24)
• Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • Re: Snort not logging to the /var/log/snort/alert file Rodrigo B. Ramos (Mar 24)
  • <Possible follow-ups>
  • RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
  • Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
    • Re: RE: Snort not logging to the /var/log/snort/alert file Michael Sconzo (Mar 24)
  • Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
  • RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
  • Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
  • Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
  • Snort not logging to the /var/log/snort/alert file ids (Mar 26)
• Flex Response + NIC Dusty Hall (Mar 24)
• Re: RE: Snort not logging to the /var/log/snort/alert f ile ids (Mar 24)
  • Snort check Martin Bündgens (Mar 24)
    • Re: Snort check Matt Kettler (Mar 24)
• Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • <Possible follow-ups>
  • Re: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
    • Re: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
• Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
  • RE: Snort not logging to the /var/log/snort/alert file Jim Hendrick (Mar 24)
  • Re: Snort not logging to the /var/log/snort/alert file Christopher Cramer (Mar 25)
  • <Possible follow-ups>
  • Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
    • RE: RE: Snort not logging to the /var/log/snort/alertfile Jim Hendrick (Mar 24)
      • Great news! Snort not logging to the /var/log/snort/aler tfile Alan (Mar 25)
      • RE: Great news! Snort not logging to the /var/log/snort/aler tfile Jim Hendrick (Mar 25)
    • Re: RE: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
• Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
• error while trying to install snort v2.1.1 with mySql v4.0.18 Luong, Natalie N (Mar 24)
  • Re: error while trying to install snort v2.1.1 with mySql v4.0.18 AJ Butcher, Information Systems and Computing (Mar 25)
• Content Usage Steve Johnson (Mar 24)
  • <Possible follow-ups>
  • Content Usage Steve Johnson (Mar 24)
    • Re: Content Usage Rodrigo B. Ramos (Mar 25)
• Incomplete RPC segment IntegPatchMgr (Mar 24)
  • <Possible follow-ups>
  • Incomplete RPC segment shivabasu (Mar 25)
• Snort, unified/database output plugins, session capture AJ Butcher, Information Systems and Computing (Mar 25)
  • Re: Snort, unified/database output plugins, session capture Andrew R. Baker (Mar 25)
    • Re: Snort, unified/database output plugins, session capture AJ Butcher, Information Systems and Computing (Mar 25)
• Winpcap 3.1 beta and Snort Joerg Abdinghoff (Mar 25)
• Snort Install - troubles Shane Cooper (Mar 25)
  • Re: Snort Install - troubles Glenn Forbes Fleming Larratt (Mar 25)
• Question about content keyword Steve Johnson (Mar 25)
  • <Possible follow-ups>
  • Re: Question about content keyword Dan (Mar 26)
• Auto magically building active host lists and ports...your thoughts ? Sean Wheeler (Mar 25)
• can Snort itself reconfigure a firewall customercare (Mar 25)
• Re: Snort en mode NIDS sanaâ Aitouchen (Mar 25)
  • <Possible follow-ups>
  • Re: Snort en mode NIDS ravivsn (Mar 29)
  • Re: Snort en mode NIDS Mark . Schutzmann (Mar 30)
• Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 25)
  • <Possible follow-ups>
  • Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 25)
  • RE: Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 29)
• problem mysql labyed souad (Mar 25)
• **S2I COMPILER** Denis Lyons (Mar 25)
• SQL error with WinSnort and ACID Kromodimedjo, John (Mar 25)
• Snort capabilities Marnus Marx (Mar 25)
  • Re: Snort capabilities AJ Butcher, Information Systems and Computing (Mar 26)
• Snort stopped receiving alerts Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
  • <Possible follow-ups>
  • RE: Snort stopped receiving alerts Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
  • RE: Snort stopped receiving alerts Shawn Kottke (Mar 25)
• Sensors 0 Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
• lost sensor Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
  • <Possible follow-ups>
  • lost sensor Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
  • RE: lost sensor Shawn Kottke (Mar 25)
• Snort and pcre error James Nonya (Mar 25)
  • Re: Snort and pcre error Brian (Mar 25)
• error Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
• TTL LIMIT Exceeded Sheahan, Paul (Mar 25)
  • RE: TTL LIMIT Exceeded Mark E. Donaldson (Mar 26)
    • Re: TTL LIMIT Exceeded Jason (Mar 26)
    • RE: TTL LIMIT Exceeded Alejandro Flores (Mar 27)
• Barnyard 0.2.0-rc1 available Andrew R. Baker (Mar 25)
• Snort + Acid Cyril Beaufrere (Mar 26)
  • Re: Snort + Acid AJ Butcher, Information Systems and Computing (Mar 26)
    • Re: Snort + Acid Cyril Beaufrere (Mar 26)
  • Re: Snort + Acid Tom Cinqmars (Mar 29)
  • Re: Snort + Acid Tom Cinqmars (Mar 29)
• Duplicate entry message Maetzky, Steffen (Extern) (Mar 26)
  • Re: Duplicate entry message Max Valdez (Mar 26)
• TCP port 0 traffic Max Valdez (Mar 26)
• problem with snort and guardian Marcin Laskowski (Mar 26)
  • Re: problem with snort and guardian Alejandro Flores (Mar 27)
  • Re: problem with snort and guardian Max Valdez (Mar 27)
• ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.4alpha for snort 2.1.1 released Sandro Poppi (Mar 27)
• Oinkmaster 1.0 beta1 Andreas Östling (Mar 28)
• odd traffic Jose_Maria_Gonzalez (Mar 29)
  • Re: odd traffic Michael Boman (Mar 29)
  • Re: odd traffic AJ Butcher, Information Systems and Computing (Mar 29)
• Reconstruction of TCP packets Rajesh Joseph (Mar 29)
  • Re: Reconstruction of TCP packets Dirk Geschke (Mar 29)
    • Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
      • Re: Reconstruction of TCP packets Jason Haar (Mar 29)
      • Re: Reconstruction of TCP packets Rajesh Joseph (Mar 30)
      • Re: Reconstruction of TCP packets Dirk Geschke (Mar 30)
      • Re: Reconstruction of TCP packets Rajesh Joseph (Mar 31)
      • Re: Reconstruction of TCP packets Dirk Geschke (Mar 31)
• global threshold quesiton David Wilburn (Mar 29)
  • <Possible follow-ups>
  • Re: global threshold quesiton Charles Lacroix (Mar 29)
• Snort/Barnyard/MySQL/ACID - Duplicate entry Maetzky, Steffen (Extern) (Mar 29)
  • Re: Snort/Barnyard/MySQL/ACID - Duplicate entry Andrew R. Baker (Mar 29)
• Snort & OpenBSD (sparc64) hb (Mar 29)
• Barnyard and duplicate entries Maetzky, Steffen (Extern) (Mar 29)
  • Re: Barnyard and duplicate entries AJ Butcher, Information Systems and Computing (Mar 29)
• snort with openbsd and oracle Oturan Boga (Mar 29)
• Snort Virus Detector Jimmy Norton (Mar 29)
  • <Possible follow-ups>
  • RE: Snort Virus Detector Williams Jon (Mar 29)
• RE: RE: Snort 2.1.1 Issues with MySQL Connect on So laris 2.8 Anderson, Don (Mar 29)
• How to achieve alerts from tcpdump files? jwang (Mar 29)
  • <Possible follow-ups>
  • Re: How to achieve alerts from tcpdump files? Nigel Houghton (Mar 30)
• Problem with ethercard and promiscuous mode Jim Patterson (Mar 29)
  • Re: Problem with ethercard and promiscuous mode Josh Berry (Mar 30)
    • Re: Problem with ethercard and promiscuous mode Jim Patterson (Mar 31)
• snort and tap ethernet Alessandro Fiorenzi (Mar 29)
  • Re: snort and tap ethernet AJ Butcher, Information Systems and Computing (Mar 30)
  • Re: snort and tap ethernet Craig Paterson (Mar 30)
  • <Possible follow-ups>
  • Re: snort and tap ethernet Mark . Schutzmann (Mar 30)
  • RE: snort and tap ethernet Spencer, Arthur (Mar 30)
• Swatch throttle problems Alan (Mar 30)
• OpenSource Alternative to SourceFire's RNA Josh Berry (Mar 30)
  • Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
    • Message not available
      • Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
    • Re: OpenSource Alternative to SourceFire's RNA Josh Berry (Mar 31)
• Questions about alerts from TCPDUMP jwang (Mar 30)
• flow-portscan, pcap files, and timestamps.. Erik Fichtner (Mar 30)
  • Re: flow-portscan, pcap files, and timestamps.. Chris Green (Mar 30)
• False Positive or not? Cody R. Smith (Mar 30)
  • Re: False Positive or not? Max Valdez (Mar 30)
  • Re: False Positive or not? AJ Butcher, Information Systems and Computing (Mar 31)
• Cisco Device Exploit Perl Script Mark . Schutzmann (Mar 30)
  • Re: Cisco Device Exploit Perl Script Ben Nelson (Mar 30)
  • <Possible follow-ups>
  • RE: Cisco Device Exploit Perl Script Perrymon, Josh L. (Mar 30)
  • RE: Cisco Device Exploit Perl Script Mark . Schutzmann (Mar 31)
• ACID/Traffic Matching? Danny Cannady (Mar 30)
• Problem Compiling 2.1.1 on FreeBSD 5.1-RELEASE eric-dated-1083277626 . 193075aa63e273 (Mar 30)
• syslog-ng email alerts agnelo d (Mar 30)
• 127.0.0.1 Snort Man (Mar 30)
• AW: OpenSource Alternative to SourceFire's RNA Poppi, Sandro (Mar 31)
  • <Possible follow-ups>
  • AW: OpenSource Alternative to SourceFire's RNA Sean Wheeler (Mar 31)
• WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) Uso (Mar 31)
  • Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)
    • Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)
• snort/mudpit - status Maetzky (extern) (Mar 31)
• Technically speaking G DINESH (Mar 31)
  • Re: Technically speaking Matt Kettler (Mar 31)
• Barnyard Problem with Payload and IPHeader Jochen Vogel (Mar 31)
• TCP and ACID Kromodimedjo, John (Mar 31)
  • RE: TCP and ACID Michael Steele (Mar 31)
  • <Possible follow-ups>
  • RE: TCP and ACID Shawn Kottke (Mar 31)
  • RE: TCP and ACID Kromodimedjo, John (Mar 31)
  • RE: TCP and ACID Kromodimedjo, John (Mar 31)
• Snort code sumanth subramanian (Mar 31)
  • Re: Snort code Rajesh Joseph (Mar 31)
  • Re: Snort code Matt Kettler (Mar 31)
• Snort on Windows 2000 Denise James (Mar 31)
  • <Possible follow-ups>
  • RE: Snort on Windows 2000 Engle, Kurt (Mar 31)
• Is there any statistic for snort rules false positive alert? Lin Zhong (Mar 31)
  • Re: Is there any statistic for snort rules false positive alert? Keith W. McCammon (Mar 31)
• aggregating perfmonitor stats Gary_Portnoy (Mar 31)
• how to block P2P with snort Sylvain BERTRAND (Mar 31)
  • Re: how to block P2P with snort Charles Lacroix (Mar 31)
    • Re: how to block P2P with snort Sylvain BERTRAND (Mar 31)
      • Re: how to block P2P with snort Charles Lacroix (Mar 31)
• Snort 2.1.2 released! Jeremy Hewlett (Mar 31)
• Announce: FLoP-1.2.0 Dirk Geschke (Mar 31)

Previous period

Next period