Snort: by date

1805 messages starting Mar 31 04 and ending Jun 30 04
Date index | Thread index | Author index

Wednesday, 31 March

RE: WinSNORT: PHP and MSSQL problem: Pleaserecompile PHP with the necessary library (--enable-mssql) Michael Steele
RE: TCP and ACID Michael Steele
Re: Reconstruction of TCP packets Rajesh Joseph
Re: how to block P2P with snort Ravi
Re: Problem Compiling 2.1.1 on FreeBSD 5.1-RELEASE eric-dated-1083277626 . 193075aa63e273
source address of 127.0.0.1 Zeeshan Ahmed
127.0.0.1 Snort Man

Thursday, 01 April

old snort log Fabrizio Tivano
SnortInline - Barnyard - no ipheader & payload Jochen Vogel
Re: 127.0.0.1 Edin Dizdarevic
Yahoo Mesengger Muhammad Reza
Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing
OpenAanval Intrusion Detection Console problem faizaln
looking for applications Gema de Toro Sánchez
Re: how to block P2P with snort Sylvain BERTRAND
SNORT Plugin to block the traffic Zeeshan Ahmed
Spool Processors Gary_Portnoy
Anyone ever use Harvester? Jason Humes
Using ACID for SNMP and SYSLOG messages? Jason Humes
Re: OpenAanval Intrusion Detection Console problem James Nonya
Question about http_insepct Thomas Bechtold
Re: SNORT Plugin to block the traffic Matt Kettler
Re: Spool Processors Dirk Geschke
Re: Spool Processors Gary_Portnoy
(no subject) eric-dated-1083277626 . 193075aa63e273
Re: SNORT Plugin to block the traffic Michael Sconzo
Re: Spool Processors Josh Berry
Re: (no subject) Michael Sconzo
OSSIM? Jason Humes
Re: Spool Processors Dirk Geschke
RE: (no subject) SRH-Lists
[Snort-Users] differentiate between eth0 and eth1 eamonn doyle
Simple FTP login request rule - just not so simple to me! JPP
Snort / ACID problem Perrymon, Josh L.
RE: TCP and ACID Kromodimedjo, John
RE: Snort / ACID problem Jim Cervantes
Re: TCP and ACID Shawn Kottke
[Snort-Users] differentiate between eth0 and eth1 in logs eamonn doyle
Re: Simple FTP login request rule - just not so simple to me! Matt Kettler
Installing Snort on OpenBSD based on RH WS3 or FreeBSD doc's on snort site Jacob, Raymond A Jr
Re: Simple FTP login request rule - just not so simple to me! JPP
Re: [Snort-Users] differentiate between eth0 and eth1 Alejandro Flores
Re: OpenAanval Intrusion Detection Console problem faizaln
RE: Installing Snort on OpenBSD based on RH WS3 or FreeBSD doc's on snort site robert schwartz
Re: OpenAanval Intrusion Detection Console problem Alejandro Flores
RE: Simple FTP Login Request rule......................... JPP
OSSIM Installation Altrock, Jens

Friday, 02 April

Re: OSSIM Installation AJ Butcher, Information Systems and Computing
snortsam.conf.sample Zeeshan Ahmed
AW: OSSIM Installation Altrock, Jens
Re: AW: OSSIM Installation AJ Butcher, Information Systems and Computing
arpwatch patch no ipv4 url ? ( auto rule assignment project) Sean Wheeler
Re: SNORT Plugin to block the traffic Ravi
Re: arpwatch patch no ipv4 url ? ( auto rule assignment project) AJ Butcher, Information Systems and Computing
HELP: Error MSSQL and ACID Kromodimedjo, John
RE: [Snort-Users] differentiate between eth0 and eth1 in logs Jim Hendrick
ARP Spoof does not show MAC Kim Wall
Re: [Snort-Users] differentiate between eth0 and eth1 in logs Edin Dizdarevic
Re: [Snort-Users] differentiate between eth0 and eth1 in logs eamonn doyle
Re: ARP Spoof does not show MAC Stephen W. Thompson
Missing table for Acid and Snort William Hillis
Re: SNORT Plugin to block the traffic Matt Kettler
RE: [Snort-Users] differentiate between eth0 and eth1 in logs Matt Kettler
RE: TCP and ACID Thompson, Jimi
Re: snortsam.conf.sample Frank Knobbe
Snort + acid + mysql Nils Fragoso
RE: HELP: Error MSSQL and ACID Michael Steele
RE: fin-no-ack scans Fred Portnoy
Barnyard snorts, but no Alerts cached Michael Miller
RE: Snort + acid + mysql Michael Miller
RE: Snort + acid + mysql Noble, Kevin
RE: HELP: Error MSSQL and ACID Kromodimedjo, John
RE: TCP and ACID Kromodimedjo, John

Saturday, 03 April

ghosting a snort server??? Pat Delaney
RE: ghosting a snort server??? Jordan, Jason A
RE: ghosting a snort server??? Pat Delaney
Startup Problem eric-dated-1083277626 . 193075aa63e273
Re: Barnyard snorts, but no Alerts cached Andrew R. Baker

Sunday, 04 April

Need help in interpreting port scans. cg16uy
VLAN Tagged Traffic - Some being missed Aaron
Using BPF Filters for GRE, OSPF, BGP, IGMP Aaron
RE: ghosting a snort server??? hugh_fraser
Re: Using BPF Filters for GRE, OSPF, BGP, IGMP Frank Knobbe
Event supression problem Zphosis De Extrodinaire
Layer 2 Rules Capability Kim Wall
Re: Event supression problem Zphosis De Extrodinaire
Acid Archive Error Kalajzich, Damon
Re: Using BPF Filters for GRE, OSPF, BGP, IGMP Aaron

Monday, 05 April

Re: Event supression problem Nerijus Krukauskas
please helpe-me IDS snort Alessandro Wesley
Re: please helpe-me IDS snort pheusion () snet net
Re: Question about http_insepct Daniel J. Roelker
ARP Spoof does not show MAC Kim Wall
local.rules problem zeineb sellami
RE: Cisco Device Exploit Perl Script Jason Truong
Snort is running, what else can I do now? Fragoso, Nils (Copenhagen)
Algorithm Josh Berry
Rules with multiple contents specified gurmeet singh
RE: Snort 2.1.0 with snortcenter v1.0 Markus . Becker
Re: OpenSource Alternative to SourceFire's RNA Andy Cuff
snort/mudpit - status Maetzky (extern)
Re: Startup Problem Michael Boman
Re: Snort en mode NIDS sanaâ Aitouchen
RE: OpenAanval Intrusion Detection Console problem Miller, Travis P.
Re: VLAN Tagged Traffic - Some being missed Mark . Schutzmann
Re: VLAN Tagged Traffic - Some being missed Mark . Schutzmann
Re: Layer 2 Rules Capability Matt Kettler
Re: Snort en mode NIDS Mark . Schutzmann
Re: Rules with multiple contents specified Alejandro Flores
Re: Using BPF Filters for GRE, OSPF, BGP, IGMP Frank Knobbe
RE: OpenAanval Intrusion Detection Console problem Tobias Rice
Snortcenter: "No Update This Time" M. Morgan
W32 Welchia.Nachi? Wichman, Larry
W32 Welchia.Nachi? Mark Gilbert
Archiving In Acid Kalajzich, Damon

Tuesday, 06 April

Customizing snort rules simonkc
Re: Customizing snort rules Edin Dizdarevic
RE: Customizing snort rules simonkc
Using Snort & DB to remove false alarms Sean Wheeler
Re: Customizing snort rules Edin Dizdarevic
Re: Snortcenter: "No Update This Time" AJ Butcher, Information Systems and Computing
Re: Customizing snort rules AJ Butcher, Information Systems and Computing
SnortCenter+Sensor problem Naveen C Joshi
Re: SnortCenter+Sensor problem AJ Butcher, Information Systems and Computing
Snort "Feel-Good" Mark . Schutzmann
RE: Using Snort & DB to remove false alarms Kreimendahl, Chad J
display/log IPv6 traffic Akolinare
RE: snort/mudpit - status Truax, Shawn (MBS)
New SUG established Schmehl, Paul L
Snort database problem Laura
RE: Snort database problem Hutchinson, Andrew
Re: Snort database problem Dirk Geschke
Re: Snort database problem Mark Fagan
RE: Snort database problem Michael Steele
RE: Using Snort & DB to remove false alarms Jason Haar
Re: Snort + acid + mysql Patrick S. Harper - CISSP RHCT MCSE
Re: Using Snort & DB to remove false alarms Brian
Re: Using Snort & DB to remove false alarms Jason Haar
Binding snort to multiple interfaces eric-dated-1083277626 . 193075aa63e273

Wednesday, 07 April

Re: Snort "Feel-Good" AJ Butcher, Information Systems and Computing
Re: Announce: FLoP-1.2.0 AJ Butcher, Information Systems and Computing
What Might I have Missed? RH72, Snort, MySql, PHP, Adodb, Acid Bruce D. meyer
Re: What Might I have Missed? RH72, Snort, MySql, PHP, Adodb, Acid Alejandro Flores
RE: SnortCenter+Sensor problem Naveen C Joshi
Re: Re: [Snort-users] Announce: FLoP-1.2.0 Dirk Geschke
RE: Using Snort & DB to remove false alarms Kreimendahl, Chad J
Re: Customizing snort rules Rodrigo B. Ramos
(no subject) Christian Morales
snort sanaâ Aitouchen
Binding snort to multiple interfaces heric-dated-1083277626 . 193075aa63e273
problem creating database Laura del Pino
RE: OSSIM? Lior
Re: Snort database problem Michael Boman
Re: Snort en mode NIDS sanaâ Aitouchen
Re: Using Snort & DB to remove false alarms Michael Boman
snort locked into using one signature Spencer Anderson
Re: snort locked into using one signature James Nonya
RE: Binding snort to multiple interfaces Patrick Harper
RE: problem creating database Patrick Harper
Are there any rules for the new W32.Gaobot.WX worms? Lin Zhong
Re: problem creating database Frank Meerkoetter
Re: Binding snort to multiple interfaces eamonn doyle
remote sensor config Zondlo, Zack
Re: Binding snort to multiple interfaces eric-dated-1083277626 . 193075aa63e273
Re: Binding snort to multiple interfaces eric-dated-1083277626 . 193075aa63e273
Re: Binding snort to multiple interfaces Rolf A. Vaglid
upgrade from snort 2.0.1 -> 2.1.2: guardian blocks common http access Walter Joman
Re: snort locked into using one signature Matt Kettler
What Might I have Missed? RH72, Snort, MySql,PHP, Adodb, Acid Bruce D. meyer
RE: problem creating database Che Wan Zaharudin
RE: remote sensor config Che Wan Zaharudin
Warning*: session_start() Jacob, Raymond A Jr
RE: Warning*: session_start() solved I think it was a chroot issue in OpenBSD once Jacob, Raymond A Jr

Thursday, 08 April

acid on windows agnelo d
RE: remote sensor config AJ Butcher, Information Systems and Computing
2.1.2 dropping packets Stuart Archer
RE: acid on windows Jim Clews
Re: What Might I have Missed? RH72, Snort, MySql,PHP, Adodb, Acid Alejandro Flores
Dynamic IP address and Sensor Id Robert Hendrickx
Snort testing David Nardoni
Snort on Windows problem Aijaz Ahmed
Snort running but no alert show in ACID michela.gandolfo_external
Re: Dynamic IP address and Sensor Id Nerijus Krukauskas
libmysqlclient.so.12 Gary Borgeson
new product integrating snort and nessus Neal Timm
RE: Snort testing Patrick Harper
RE: Snort on Windows problem Paul Martin
Acid database Error William Hillis
Re: libmysqlclient.so.12 Dirk Geschke
RE: Using Snort & DB to remove false alarms Kreimendahl, Chad J
Re: Acid database Error Josh Berry
snort_archive and snort_log dbnames in acid Jacob, Raymond A Jr
Setting up notifications in Snort Paul Martin
RE: snort_archive and snort_log dbnames in acid Harper, Patrick
Is there a contrib/create_mysql script to create the snort_archive database and an acid option to schedule archiving? Jacob, Raymond A Jr
Signatures, priorities and database Dirk Geschke
ACID Search/Filter Questions McCash, John
RE: acid on windows Michael Steele
RE: Setting up notifications in Snort Harper, Patrick

Friday, 09 April

RE: Setting up notifications in Snort Alan
RE: Setting up notifications in Snort Alan
Fw: libmysqlclient.so.12 SNORT
RE: Setting up notifications in Snort Noble, Kevin
Re: libmysqlclient.so.12 Nicholas Brawn
Monitoring multiple devices with SNORT David Nardoni
Howto clean Snort mysql logs Olivier PERROT
Flow-portscan configuration how-to Guillaume Arcas
WatchHog Released - a web-based snort alert analyser. Randy Walinga
RE: Monitoring multiple devices with SNORT Truax, Shawn (MBS)
Re: WatchHog Released - a web-based snort alert analyser. Mark . Schutzmann
RE: WatchHog Released - a web-based snort alert analyser. Randy Walinga

Saturday, 10 April

Re: WatchHog Released - a web-based snort alert analyser. Paul Schmehl
RE: WatchHog Released - a web-based snort alert analyser. Michael Steele
ignore host? MEGA Hospedagem
Re: ignore host? eric-dated-1083277626 . 193075aa63e273
RE: WatchHog Released - a web-based snort alert analyser. Randy Walinga
Re[2]: ignore host? MEGA Hospedagem
Re: ignore host? eric-dated-1083277626 . 193075aa63e273
Portscan Detection eric-dated-1083277626 . 193075aa63e273
SSL traffic Frank Dobb
Re: SSL traffic eric-dated-1083277626 . 193075aa63e273
Re: SSL traffic Frank Meerkoetter
RE: ignore host? Randy Walinga
Re: ignore host? Andreas Östling

Sunday, 11 April

Re: SSL traffic Jason Haar
Some worm? Jan Hugo Prins

Monday, 12 April

RE: Monitoring multiple devices with SNORT Harper, Patrick
SSL traffic Frank Dobb
ruleset priority Brian D. Hamm
RE: SSL traffic Harper, Patrick
Re: Some worm? Matt Kettler
IDS provisioning site analysis tool? Williams Jon
RE: IDS provisioning site analysis tool? Jerry Shenk
Flow-portscan oddity Kreimendahl, Chad J
output database - log vs. alert Zondlo, Zack
multiple instances, three nics, one box Zondlo, Zack
Re: multiple instances, three nics, one box Bennett Todd
Re: Flow-portscan oddity Guillaume Arcas

Tuesday, 13 April

ubject: Norman Internet Protection - Malware Warning! jhaar
Hot XXX Streaming Videos, FREE Clips jhaar
RE: Hot XXX Streaming Videos, FREE Clips General Information
Error DESH SRIVASTAVA
Re: Flow-portscan oddity Martin Roesch
Re: IDS provisioning site analysis tool? Martin Roesch
RE: IDS provisioning site analysis tool? Williams Jon
Re: Error Edin Dizdarevic
Re: IDS provisioning site analysis tool? Martin Roesch
RE: Flow-portscan oddity Kreimendahl, Chad J
Re: Flow-portscan oddity Guillaume Arcas
RE: Flow-portscan oddity Douglas McCrea
Re: Error Matt Kettler
Re: Snort-users digest, Vol 1 #4136 - 8 msgs Donald G Meyett
Snort's Processing Rate Sherif Yusuf
RE: Snort's Processing Rate Matt Gibson
RE: Flow-portscan oddity Todd_Pratt
Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor
Using Snort with WhatsUp Gold? Paul Martin
RE: Snort's Processing Rate Kreimendahl, Chad J
RE: Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Chat/IM Harper, Patrick
Re: Chat/IM Remko Lodder
RE: Chat/IM Harper, Patrick
RE: Flow-portscan oddity Kreimendahl, Chad J
Re: Chat/IM Craig Paterson
Re: Snort's Processing Rate Matt Kettler
Re: Chat/IM Bryan Irvine
Re: Chat/IM Matt Kettler
RE: Chat/IM Larry Pitcher
Free Security product nt
Fw: Lesbian Mpeg jhaar
ubject: Norman Internet Protection - Malware Warning! jhaar
Videos Clips...SeXxXy jhaar
snort alerts backup agnelo d
Re: Using Snort with WhatsUp Gold? Guillaume Arcas
Re: snort alerts backup Guillaume Arcas

Wednesday, 14 April

Unknown keyword ' flowbits' Haim Stotsky
block p2p traffic khaled fawzy
RE: Snort's Processing Rate Bob Walder
thresholding: How to get the sig_id? Maetzky (extern)
Re: thresholding: How to get the sig_id? Dirk Geschke
RE: Unknown keyword ' flowbits' adam.w.hogan
Re: block p2p traffic Charles Lacroix
RE: Flow-portscan oddity Todd_Pratt
RE: Flow-portscan oddity Dusty Hall
RE: Fw: Lesbian Mpeg Harper, Patrick
RE: Flow-portscan oddity Douglas McCrea
Cannot recompile Snort after patching it! d . deboni
RE: Fw: Lesbian Mpeg Joe Matusiewicz
RE: Fw: Lesbian Mpeg Randy Walinga
Re: Chat/IM Mark . Schutzmann
RE: Fw: Lesbian Mpeg Brian F. Vaughan
Re: Fw: Lesbian Mpeg jon baer
RE: Fw: Lesbian Mpeg Keith Loyd
NETBIOS SMB winreg access (unicode) Perrymon, Josh L.
RE: Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Fw: Lesbian Mpeg SRH-Lists
RE: Fw: Lesbian Mpeg Mark . Schutzmann
RE: NETBIOS SMB winreg access (unicode) Perrymon, Josh L.
RE: Fw: Lesbian Mpeg Shannon M. Anderson
RE: NETBIOS SMB winreg access (unicode) larosa, vjay
Re: can Snort itself reconfigure a firewall Matt Kettler
Re: Flow-portscan oddity Chris Green
RE: Chat/IM Lyons, Jon
Problem compiling MySQL Support into Snort Tony Howlett
rule help for a beginner [long sorry] eamonn doyle
Re: rule help for a beginner [long sorry] Alejandro Flores
Movie jhaar
Todd Pratt is out until Friday the 16th Todd_Pratt

Thursday, 15 April

spp_portscan2 issues Marlon . Richards
stream4: possible EVASIVE RST <-> EVASIVE RST Maetzky (extern)
snort rules updating on windows Romulo M. Cholewa
setting threshold for snort signatures agnelo d
RE: Problem compiling MySQL Support into Snort Harper, Patrick
snortcenter:problem of connection to snortcenter agent sanaâ Aitouchen
I am sure an easy answer Vojtech, John
Re: setting threshold for snort signatures Guillaume Arcas
RE: I am sure an easy answer Vojtech, John
Ethernet Tap Altrock, Jens
Re: spp_portscan2 issues Marlon . Richards
thresholding: SMNP alerts Maetzky (extern)
RE: Fw: Lesbian Mpeg Dave Dearinger
RE: Chat/IM Joe Thompson
Two easy questions dlimanov
Re: setting threshold for snort signatures Matt Kettler
portscan2 output phani kumar
Re: Two easy questions Demetri Mouratis
Re: spp_portscan2 issues Matt Kettler
Re: Two easy questions John Creegan
Urls accessed Laura
[OT] What happened to Erek? David
RE: Urls accessed Perrymon, Josh L.
Re: Ethernet Tap Matt Kettler
file upload detection. Rajeev Kapoor
Re: Ethernet Tap Sean Lazar
Re: Fw: Lesbian Mpeg Jason Haar
RE: I am sure an easy answer Michael Steele
Snortcenter Running Snort ? HELP... Brian Webster
Much Better Screen Shots for WatchHog Randy Walinga
Re: Fw: Lesbian Mpeg James Riden
snort rules updating on windows Romulo M. Cholewa
RE: Flow-portscan oddity Jasmine CHUA

Friday, 16 April

Snortcenter? Maetzky (extern)
AW: Ethernet Tap Altrock, Jens
Re: Snortcenter? Keith W. McCammon
RE: Snortcenter? Paul Martin
Problem patching Snort d . deboni
Re: AW: Ethernet Tap Matt Kettler
Re: Snortcenter? Keith W. McCammon
Re: Ethernet Tap Richard Bejtlich
Problem patching Snort d . deboni
Content rule problem Antonio Eugenio Villar
RE: snort rules updating on windows Romulo M. Cholewa
Error In snort HELP!!! Cody R. Smith
Re: Content rule problem Matt Kettler
Re: [OT] What happened to Erek? Matt Kettler
Re: Problem patching Snort Frank Knobbe
Passive Ether Tap Matt Nelson
FW: Passive Ether Tap Matt Nelson
Re: Problem patching Snort Antonio Eugenio Villar
Re: Problem patching Snort Frank Knobbe
Various Alerts and Logging Bill Parker

Saturday, 17 April

snort -c /etc/snort/snort.conf fatal error VanZee, Timothy
Re: snort -c /etc/snort/snort.conf fatal error nhdave
Re: Various Alerts and Logging Antonio Eugenio Villar
Re: Binding snort to multiple interfaces Max Valdez
Re: snort -c /etc/snort/snort.conf fatal error Patrick S. Harper

Sunday, 18 April

Logging Options w/o MySQL Kim Wall
TCP packets detection problem ? Michal Kowalski

Monday, 19 April

Re: Snortcenter? AJ Butcher, Information Systems and Computing
Low Snort performances Gianluca Murgia
Re: Low Snort performances Edin Dizdarevic
RE: Low Snort performances Bob Walder
Re: Logging Options w/o MySQL Todd_Pratt
Snorting on 2 interfaces Conan the Librarian
RE: Problem compiling MySQL Support into Snort Fowler, Mike
RE: Low Snort performances todb
RE: Low Snort performances Bob Walder
Re: TCP packets detection problem ? Antonio Eugenio Villar
Create ACID AG Naveen C Joshi
Snortcenter jeep 94
RE: Low Snort performances todb
Re: TCP packets detection problem ? Josh Berry
RE: Snorting on 2 interfaces Harper, Patrick
Snot Newb Question Shaun Gray
RE: Low Snort performances Richard Bejtlich
RE: Create ACID AG Harper, Patrick
Re: Snot Newb Question Bryan Irvine
RE: Snot Newb Question Shaun Gray
RE: Snot Newb Question Bryan Irvine
RE: Snortcenter Eric Hines
RE: Snot Newb Question Bryan Irvine
RE: Snot Newb Question Shaun Gray
RE: Snot Newb Question Bryan Irvine
RE: Create ACID AG Michael Steele
RE: Snot Newb Question Harper, Patrick
RE: Snot Newb Question Mark Fagan
RE: Snot Newb Question Shaun Gray
RE: Snot Newb Question Harper, Patrick
RE: Snot Newb Question Harper, Patrick
RE: Low Snort performances SN ORT
RE: Snot Newb Question Randy Walinga
help with mysql.php3 script problems ultan lankford
multiple NICs on OpenBSD 3.4 Jacob, Raymond A Jr
snort and snortsam snort teste
Leasing snort system Mario Guerendo
Re: snort and snortsam Frank Knobbe
Re: Leasing snort system James Riden
openaanval calling home BM HM
Sneaky traffic WAS: RE: openaanval calling home Travis Wixel
RE: Sneaky traffic WAS: RE: openaanval calling home Travis Wixel
RE: Create ACID AG Naveen C Joshi

Tuesday, 20 April

RE: Low Snort performances Zphosis De Extrodinaire
problem with acivate/dynamic rule: WARNING: an activation rule with no dynamic rules matched! Nicolas Dresse
RE: Snortcenter AJ Butcher, Information Systems and Computing
RE: Leasing snort system Keith Loyd
RE: Leasing snort system Jim Clews
Snort syslog + mysql + eventlog Romulo M. Cholewa
Not logging everything Chuck Holley
RE: Not logging everything Fred Portnoy
RE: Not logging everything Chuck Holley
RE: Leasing snort system Harper, Patrick
new snortrules via ftp? Maetzky (extern)
Re: Low Snort performances Chris Green
RE: Snort Newb Question Cont.... Harper, Patrick
Snort and snortsam snort teste
possible php problem dekid2
Re: possible php problem Bryan Irvine
Re: possible php problem dekid2
RE: possible php problem Harper, Patrick
Re: possible php problem tslighter
snort.conf Chuck Holley
Re: possible php problem (fwd) dekid2
Re: possible php problem jon baer
Re: snort.conf Matt Kettler
Re: possible php problem BM HM

Wednesday, 21 April

Re: snort.conf AJ Butcher, Information Systems and Computing
Re: snort.conf James Riden
snort_acid_rh9.pdf Maetzky (extern)
Nimda 1287 rule Henderson Rachel (ITCS) s045
Snortsam log to database and correlation with snortdb Chan Kien Eng
contrib/snortpp.c? Maetzky (extern)
RE: Nimda 1287 rule Donofrio, Lewis
Problem IPSet dono levert
RE: snort -c /etc/snort/snort.conf fatal error Harper, Patrick
RE: snort_acid_rh9.pdf Harper, Patrick
IPSet Problem dono levert
Viewing packets logged to database WITHOUT alert Tuttle, Matthew D.
emailing alerts Scott Skrogstad
Barnyard vs. Mudpit jonasb
Re: Snortsam log to database and correlation with snortdb Frank Knobbe
Re: IPSet Problem Matt Kettler
RE: emailing alerts Mike Koponick
RE: Leasing snort system Corey Rock
Re: emailing alerts Matt Kettler
Re: emailing alerts Edin Dizdarevic
AW: Snortsam log to database and correlation with snortdb Sean Wheeler
HTTP_PORTS Chuck Holley
Re: HTTP_PORTS Matt Kettler
problems updating rules with oinkmaster Gus Fritschie
RE: HTTP_PORTS Chuck Holley
RE: HTTP_PORTS Chuck Holley
Yet another alert not being logged to mysql database Jacob, Raymond A Jr
ERROR: Undefined variable name dlimanov
Yet another alert not being logged to mysql database[edited] Jacob, Raymond A Jr
Snort 2.1.3 RC1 available Jeremy Hewlett
Maximum Hardware Capacity for sensor Brian Webster
RE: snort -c /etc/snort/snort.conf fatal error Paul Schmehl
Re: snort_acid_rh9.pdf Paul Schmehl
ids problems Jasmine CHUA
Snort Service - Win2k Adv Server alagappan
Re: problems updating rules with oinkmaster Andreas Östling

Thursday, 22 April

RE: ids problems Jasmine CHUA
Re: ids problems Guillaume Arcas
RE: Snortsam log to database and correlation with snortdb Che Wan Zaharudin
Re: Snorting on 2 interfaces AJ Butcher, Information Systems and Computing
RE: ids problems Guillaume Arcas
Snort as IPS Nicolas Saurbier
RE: ids problems Jasmine CHUA
IDS problems -> part two (unresolved) Jasmine CHUA
RE: Snort as IPS Che Wan Zaharudin
RE: Barnyard vs. Mudpit Truax, Shawn (MBS)
RE: problems updating rules with oinkmaster Lancaster, J Jackson Contr SAF/FMPT
RE: Snorting on 2 interfaces Truax, Shawn (MBS)
RE: ERROR: Undefined variable name Harper, Patrick
a lot of Loopback traffic being logged. Chuck Holley
RE: problems updating rules with oinkmaster Rowland, Krisa W ERDC-ITL-MS Contractor
snort daemon not getting Tinni
Password characters that snort does not like Harper, Patrick
RE: problems updating rules with oinkmaster Andreas Östling
I've read FAQ; Need switch/hub advice. Shaun T. Erickson
RE: Nimda 1287 rule Donofrio, Lewis
RE: snort daemon not getting Harper, Patrick
RE: ids problems Guillaume Arcas
Re: problems updating rules with oinkmaster Gus Fritschie
Re: Snort as IPS Guillaume Arcas
Running Snort in Sniffer mode Marlon . Richards
OpenBSD 3.4 snort--X-->mysql not working and I don't see any errors on startup Jacob, Raymond A Jr
doubts about how many false positives exists Ernesto
Re: help with mysql.php3 script problems ultan lankford
Re: a lot of Loopback traffic being logged. Matt Kettler
RE: a lot of Loopback traffic being logged. Chuck Holley
RE: a lot of Loopback traffic being logged. Matt Kettler
Re: Password characters that snort does not like Matt Kettler
RE: problems updating rules with oinkmaster Paul Schmehl
RE: Snort Service - Win2k Adv Server Michael Steele
RE: problems updating rules with oinkmaster Rowland, Krisa W ERDC-ITL-MS Contractor
Oinkmaster Problem Line 791 Josh Berry
Re: problems updating rules with oinkmaster Andreas Östling
Yup it's the hardware question... (again) Brian Webster
RE: a lot of Loopback traffic being logged. Harry Bloomberg
RE: problems updating rules with oinkmaster Gus Fritschie
RE: a lot of Loopback traffic being logged. Fred Portnoy
Re: Oinkmaster Problem Line 791 Andreas Östling
RE: problems updating rules with oinkmaster Andreas Östling
Re: NetSky worm signature definition...!!! Matt Linton
Re: doubts about how many false positives exists Matt Kettler
Re: Running Snort in Sniffer mode Matt Kettler
No logs are being generated Tinni
No logs are being generated Tinni
Need configuration help Tinni
Re: a lot of Loopback traffic being logged. Mark . Schutzmann

Friday, 23 April

Ossim Framework Altrock, Jens
How to start snort for multiple servers' traffic Tinni
Re: How to start snort for multiple servers' traffic Edin Dizdarevic
Re: Ossim Framework AJ Butcher, Information Systems and Computing
RE: a lot of Loopback traffic being logged. Chuck Holley
virus-tracing with snort? Maetzky (extern)
RE: a lot of Loopback traffic being logged. Fred Portnoy
RE: a lot of Loopback traffic being logged. Mark . Schutzmann
Oinkmaster woops Rowland, Krisa W ERDC-ITL-MS Contractor
RE: a lot of Loopback traffic being logged. Chuck Holley
Re: Oinkmaster woops Andreas Östling
RE: a lot of Loopback traffic being logged. Fred Portnoy
Rules for non existent IPs Marc Cozzi
Re: Rules for non existent IPs Frank Knobbe
RE: Rules for non existent IPs Frank Knobbe
Loopback traffic Rodrigo B. Ramos
RE: Loopback traffic Chuck Holley
FW: (reality check)Solved(i think):OpenBSD 3.4 snort--X-->mysql alerts now being generated Jacob, Raymond A Jr

Saturday, 24 April

Getting more paranoid by the minute. :-/ Shaun T. Erickson
Re: Getting more paranoid by the minute. :-/ Paul Schmehl
Re: Getting more paranoid by the minute. :-/ Chris Burton
RE: Getting more paranoid by the minute. :-/ Romulo M. Cholewa
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson
Re: Getting more paranoid by the minute. :-/ Demetri Mouratis
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson

Sunday, 25 April

RE: Getting more paranoid by the minute. :-/ Jim Hendrick
RE: a lot of Loopback traffic being logged. Milan Kocián
Re: Getting more paranoid by the minute. :-/ Alejandro Flores
Snort is not responding to the other hosts in the same network Tinni
Re: Snort is not responding to the other hosts in the same network Demetri Mouratis

Monday, 26 April

Re: Getting more paranoid by the minute. :-/ AJ Butcher, Information Systems and Computing
RE: Create ACID AG Naveen C Joshi
Running Libnet 1.0.x and 1.1.x on the same machine... Nicolas Saurbier
Re: Create ACID AG Nick Oliver
Problems with snort Adriano Bandeira de Araújo
Signature Database Lancaster, J Jackson Contr SAF/FMPT
Snort for WIndows newbie question... Ambrose, Joseph
RE: Loopback traffic Matt Kettler
RE: Problems with snort Harper, Patrick
RE: Create ACID AG Michael Steele
MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?) McCash, John
RE: Getting more paranoid by the minute. :-/ Donofrio, Lewis
RE: Snort for WIndows newbie question... Ambrose, Joseph
Re: Getting more paranoid by the minute. :-/ Andreas
Re: Problems with snort Alejandro Flores
Re: Getting more paranoid by the minute. :-/ Shaun T. Erickson
Fatal Error, Quitting.. dlimanov
RE: Fatal Error, Quitting.. Paul Martin
Re: Snort for WIndows newbie question... Matt Kettler
RE: Fatal Error, Quitting.. Harper, Patrick
RE: Fatal Error, Quitting.. dlimanov
Error compiling Snort 2.1.3 RC1 Gary_Portnoy
Re: Fatal Error, Quitting.. James Riden

Tuesday, 27 April

perfmonitor Maetzky (extern)
RE: Fatal Error, Quitting.. Bob Walder
RE: Create ACID AG Naveen C Joshi
RE: Create ACID AG Naveen C Joshi
MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?) McCash, John
RE: Create ACID AG James Ashton
snortcenter server soula soumi
snortsam trouble bonnie
Re: Which version started support for PCRE? Stef
Snort/Linux Dropping Packets snort user
AW: emailing alerts Freddie Soerensen
slackware how-to osama
RE: Create ACID AG Fowler, Mike
Snort newbie Chris Strzelczyk
Viewing packets logged to database WITHOUT alert Tuttle, Matthew D.
Viewing packets logged to database WITHOUT alert Tuttle, Matthew D.
Content across multiple packets Not detected by Snort Dennis George
Viewing packets logged to database WITHOUT alert Tuttle, Matthew D.
Traffic Generator / Host Emulator Josh Gomez
Which version started support for PCRE? Stef
Snort to detect Window worms & scanners etc. Jorgen Lundman
Snort Logging to SQL Server 2000? McCash, John
Re: slackware how-to Michael Sconzo
Log analysis without ACID Frank Barton
Snort start up on Multiple interface Brian Webster
Re: MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?) Tony Ly
Re: MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?) todb
RE: MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?) McCash, John
where can I find info about rules? Marcin Laskowski
RE: Log analysis without ACID Michael Steele
Re: Snort start up on Multiple interface Matt Kettler
RE: Snort start up on Multiple interface Truax, Shawn (MBS)
Re: Log analysis without ACID Michael Sconzo
Re: where can I find info about rules? Matt Kettler
Re: Snort start up on Multiple interface Daniel Wittenberg
Snort re-setup issues Greg Webster
database output plugin sensor_name parameter and ACID strangeness Muntner, Adam
RE: Snort re-setup issues Truax, Shawn (MBS)
snort >= 2.1.2 on OpenBSD -current and memory limits Jon Hart
RE: database output plugin sensor_name parameter and ACID strangeness Che Wan Zaharudin
Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world Jack McDonough
2.1.3RC1 event_queue and custom ruletypes/log rules? Erik Fichtner

Wednesday, 28 April

IDS and Firewall Kernel The Canine
Re: IDS and Firewall Ravi
RE: Create ACID AG Naveen C Joshi
Re: IDS and Firewall Marcin Laskowski
Re: Snort start up on Multiple interface Edin Dizdarevic
Error compiling Snort Gary_Portnoy
RE: Snort for WIndows newbie question... Ambrose, Joseph
Re: IDS and Firewall Alejandro Flores
RE: IDS and Firewall Jim Hendrick
Re: IDS and Firewall Kernel The Canine
portscan question Darryl Cook
Re: Low Snort performances Nicholas Brawn
Question on stream4 preprocessor sgt_b
Setup help requested Bodo Gabor
Re: Error compiling Snort George Theall
RE: Snort for WIndows newbie question... Romulo M. Cholewa
Re: Snort start up on Multiple interface Matt Kettler
Re: IDS and Firewall Matt Kettler
Re: portscan question Darryl Cook
rules Macaluso Aldo
Re: Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world twig les
RE: Setup help requested Jim Hendrick
VPNs and TCP Matt Linton
RE: Snort for WIndows newbie question... Michael Steele
snort dropping 48% ?? Sheahan, Paul
snort dropping 48% Sheahan, Paul
test - please disregard Sheahan, Paul
Re: portscan question Matt Kettler
Re: rules Matt Kettler
RE: Snort for WIndows newbie question... Matt Kettler
sguil-0.4.0 Released Bamm Visscher
Re: Snort start up on Multiple interface Edin Dizdarevic
Output log_null and -N don't work Sheahan, Paul
RE: IDS and Firewall Shaffer, Paul D
Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? McCash, John
Re: Snort start up on Multiple interface Matt Kettler
Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? (more debug info) McCash, John
Re: rules Alejandro Flores
RE: Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? Keith Loyd
Re: IDS and Firewall James Riden
RE: Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? (more debug info) Keith Loyd
Re: IDS and Firewall Matt Kettler
Re: snort dropping 48% Matt Kettler
legit network-traffic generating tool? siddharth thakkar
Re: Snort start up on Multiple interface Edin Dizdarevic

Thursday, 29 April

Compilation problem Ramesh Pillai
Re: Compilation problem siddharth thakkar
Snort on Suse Linux - snortd paths Neil Wellard
Database not suported after compillation, pls HELP Bodo Gabor
Re: Log analysis without ACID Frank Barton
Re: Compilation problem Ramesh Pillai
RE: IDS and Firewall Shaffer, Paul D
Re: Snort start up on Multiple interface Milo Velimirovic
RE: Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? (more debug info) McCash, John
TCP Session logging with ACID jonasb
RE: Re: Log analysis without ACID Kreimendahl, Chad J
RE: Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? (more debug info) McCash, John
RE: Re: Log analysis without ACID Randy Walinga
Re: Getting more paranoid by the minute. :-/ Corey Rock
Problems with jpgraph and ACID ... Michael Chapman
RE: IDS and Firewall Matt Kettler
Content string search across packets sowdambiga karthikeyan
Multiple sensors on 1 box? Travis Wixel
Re: Content string search across packets Matt Kettler
RE: Snort re-setup issues Greg Webster

Friday, 30 April

RE: Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? McCash, John
Re: Problems with jpgraph and ACID ... AJ Butcher, Information Systems and Computing
Re: TCP Session logging with ACID AJ Butcher, Information Systems and Computing
Re: Problems with jpgraph and ACID ... Matthias Güntert
Re: snort >= 2.1.2 on OpenBSD -current and memory limits Jon Hart
Re: Error compiling Snort Gary_Portnoy
Error while starting snort François Delaby
RE: Problems with jpgraph and ACID ... Michael Chapman
Re: Error while starting snort Matt Kettler
Re: Error while starting snort François Delaby
Snort Rule Downloading - No Updates Since 4/15? Snortty
RE: Snort Rule Downloading - No Updates Since 4/15? Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Snort Rule Downloading - No Updates Since 4/15? Gus Fritschie
RE: Snort Rule Downloading - No Updates Since 4/15? Snortty

Saturday, 01 May

[OpenBSD 3.4 + snort 2.0.0b72] Strange Bad Traffic alert generating from 127.0.0.1:80 to the firewall's external ip Calyth
Barnyard 0.2.0 available Andrew R. Baker
RE: [OpenBSD 3.4 + snort 2.0.0b72] Strange Bad Traffic alert generating from 127.0.0.1:80 to the firewall's external ip Corey Rock
logging directory "/var/log/snort" Corey Rock
Re: logging directory "/var/log/snort" sgt_b
Re: logging directory "/var/log/snort" Corey Rock
Re: logging directory "/var/log/snort" sgt_b
Re: logging directory "/var/log/snort" Corey Rock
Sasser.b Worm Signature and Information Mark . Schutzmann

Sunday, 02 May

Re: [OpenBSD 3.4 + snort 2.0.0b72] Strange Bad Traffic alert generating from 127.0.0.1:80 to the firewall's external ip Calyth
RE: Sasser.b Worm Signature and Information larosa, vjay
RE: Sasser.b Worm Signature and Information larosa, vjay
(no subject) Nitin KAPOOR
(no subject) Nitin KAPOOR

Monday, 03 May

Re: Error while starting snort Nerijus Krukauskas
[OBSD 3.4 and Snort 2.0.0b72] snort does not handle kill -hup well when user/group param specified Calyth
SNORT Analyzer with PHP and MySQL M. Salman Farisi
Re: Error while starting snort François Delaby
Re: Snort-users digest, Vol 1 #4200 - 4 msgs attechni
Re: Snort on Suse Linux - snortd paths Manuel Balderrábano
Re: Question on stream4 preprocessor sgt_b
Problem to configure IDS with snort-wireless Piergiorgio Venuti
Re: Log analysis without ACID BM HM
SnortSNMP : [was Re: [Snort-announce] Snort 2.1.3 RC1 available:] Glenn Mansfield Keeni
sensor on ACID console Naveen C Joshi
Increase in nmap pings Michael Schwartzkopff
RE: Snort Rule Downloading - No Updates Since 4/15? M. Morgan
RE: Snort Rule Downloading - No Updates Since 4/15? Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Increase in nmap pings Miner, Jonathan W
newbie ? about tcp packet collection for specific ip Janet Norton
RE: Increase in nmap pings Chuck Holley
Re: 2.1.3RC1 event_queue and custom ruletypes/log rules? Jeremy Hewlett
RE: Snort Rule Downloading - Working now! Snortty
RE: Increase in nmap pings Miner, Jonathan W
RE: Increase in nmap pings Frank Knobbe
Re: 2.1.3RC1 event_queue and custom ruletypes/log rules? Bamm Visscher
RE: Increase in nmap pings Larry Pitcher
Logically truncated snortrules-snapshot tarball [was: Re: Snort Rule Downloading] Kristofer T. Karas
MS SQL database information Gargac. Jeff
Re: newbie ? about tcp packet collection for specific ip sgt_b
Re: Increase in nmap pings Michael Schwartzkopff
RE: Snort Rule Downloading - Working now! (NOT!!!) McCash, John
-N option doesn't work Sheahan, Paul
ICMP echo rules Mario Guerendo
ICMP echo packets Mario Guerendo
Re: MS SQL database information Tony Carter
RE: MS SQL database information Jeff Dell

Tuesday, 04 May

Snort Users Group, DC - Q2 Meeting Planning Keith W. McCammon
Need help with snort output to bash script. Thomas Lauret
RE: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) McCash, John
RE: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) Vogle, Brian
RE: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) McCash, John
Internet Update in snortcenter John Hally
Re: Logically truncated snortrules-snapshot tarball [was: Re: Snort Rule Downloading] Brian
RE: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) Frank Knobbe
Re: Internet Update in snortcenter jonasb
Re: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) Jason
Typical barnyard compile problems Mike Cohen
snort log files Michael Banta
email alert configuration Rajesh
Re: email alert configuration Ravi
Re: snort log files Ravi
Re: email alert configuration Rajesh

Wednesday, 05 May

Re: email alert configuration Edin Dizdarevic
AW: Typical barnyard compile problems Povel, Michael
Barnyard & SnortAlog Cédric BLIN
Re: Snort Rule Downloading - Working now! (NOT!!!) (update use -CURRENT for 2.1.2) M. Morgan
Unified Alert logs and portscan alarms Povel, Michael
output log format Janet Norton
Re: Typical barnyard compile problems Bamm Visscher
Re: [Barnyard-users] Typical barnyard compile problems (mysql error) Andreas
Re: Need help with snort output to bash script. Matt Kettler
RE: Typical barnyard compile problems Michael Shirk
Hi everyone ! Zhaofu
normal vs. malicious icmp echo Mario Guerendo
Re: normal vs. malicious icmp echo Erik Fichtner

Thursday, 06 May

AW: Barnyard & SnortAlog Povel, Michael
AW: Barnyard & SnortAlog Povel, Michael
RE: Internet Update in snortcenter Truax, Shawn (MBS)
Re: normal vs. malicious icmp echo Matt Kettler
Log file owned by root problem bitless
RE: snort dropping 48% Sheahan, Paul
Re: Log file owned by root problem sgt_b
Re: Log file owned by root problem Matt Kettler
Re: snort dropping 48% sgt_b
RE: snort dropping 48% Sheahan, Paul
Re: normal vs. malicious icmp echo Milo Velimirovic
Re: Log file owned by root problem Bamm Visscher
Re: snort dropping 48% sgt_b
Snort and Barnyard question about syslog output. Timothy W Morrison
Re: Snort and Barnyard question about syslog output. Bamm Visscher
RE: snort dropping 48% Sheahan, Paul
RE: snort dropping 48% SN ORT
RE: snort dropping 48% Frank Knobbe
RE: snort dropping 48% Lyons, Jon
Re: snort dropping 48% sgt_b
Problem detecting MS-SQL sa login failures? Anton Christian
Re: Problem detecting MS-SQL sa login failures? Brian

Friday, 07 May

RE: snort dropping 48% Josh Berry
Re: snort dropping 48% Josh Berry
RE: snort dropping 48% Chuck Holley
RE: Snort-users digest, Vol 1 #4212 - 5 msgs Jason Biggin
RE: snort dropping 48% Josh Berry
RE: snort dropping 48% Sheahan, Paul
RE: snort dropping 48% Josh Berry
RE: snort dropping 48% larosa, vjay
RE: snort dropping 48% larosa, vjay
RE: snort dropping 48% Sheahan, Paul
RE: snort dropping 48% Sheahan, Paul
RE: snort dropping 48% Sheahan, Paul
RE: snort dropping 48% larosa, vjay
RE: snort dropping 48% Josh Berry
(no subject) ac107029
Snort-Hardware integration ac107029
max_queue_events Thomas Bechtold

Saturday, 08 May

IDS alert Naveen C Joshi
Re: IDS alert Ravi
Is there such a thing as a morning after IDS? Jacob, Raymond A Jr
Re: Is there such a thing as a morning after IDS? Nicholas W. Oliver
Question about 'logto' and 'log_tcpdump' Lin Zhong
RE: Is there such a thing as a morning after IDS? Hutchinson, Andrew

Sunday, 09 May

SNMP bassem tannous
Newbie - Rules updates, multiple interfaces, etc. Mark G. Spencer
Confused about rules and logs b311b-snort

Monday, 10 May

Re: Confused about rules and logs Richard Bejtlich
Re: IDS alert Michael Shirk
Re: Re: Confused about rules and logs b311b-snort
RE: SNMP Harper, Patrick
Re: same problem as you Snortty
RE: [Snort-devel] max_queue_events Marc Norton
where can i find info about events derk van de Velde
Re: Re: same problem as you Dirk Geschke
logfile problem Dino
RE: Typical barnyard compile problems Mike Cohen
Log file owned by root problem bitless
RUXCON Final Call For Papers RUXCON Staff
Typical barnyard compile problems (Povel, Michael) Mike Cohen
about some error ajay sahasrabudhe
RE: snort dropping 48% Jon Lyons
RE: snort dropping 48% Michael Boman
max_queue_events Thomas Bechtold
How do I convert a snort source IP Number to IP address in Microsoft SQL Server Joe Stocker
Fw: stream4 preprocessor and resetting the stream due to alert William Metcalf
Typical barnyard compile problems (mysql error) Thomas Bechtold
newbie ? about tcp packet collection for specific ip Janet Norton
Snort sensor and mysql setup Lance Boon
Re: Confused about rules and logs Richard Bejtlich
Re: Newbie - Rules updates, multiple interfaces, etc. Richard Bejtlich
Re: where can i find info about events Matt Kettler
Snort and reserved words PATENAUDE, PATRICK
Re: How do I convert a snort source IP Number to IP address in Microsoft SQL Server AJ Butcher, Information Systems and Computing
Re: Typical barnyard compile problems (Povel, Michael) Thomas Bechtold
RE: Log file owned by root problem SRH-Lists
Re: Snort and reserved words Matt Kettler
different logging options. Timothy W Morrison
Re: snort >= 2.1.2 on OpenBSD -current and memory limits Jon Hart
Re: Is there such a thing as a morning after IDS? M. Morgan
Re: How do I convert a snort source IP Number to IP address in Microsoft SQL Server b311b-snort
Re: different logging options. Jason Monroe "JC"
RE: about some error Harper, Patrick
RE: Snort sensor and mysql setup Harper, Patrick

Tuesday, 11 May

IMAP Auth Literal Overflow Sonika Malhotra
Re: How do I convert a snort source IP Number to IP address in Microsoft SQL Server AJ Butcher, Information Systems and Computing
New Sasser Worm Signatures Alan
snort http_inspect nyarlathothep () libero it
Flow-portscan Jochen Vogel
oops... the conf file nyarlathothep () libero it
http_inspect : It nyarlathothep () libero it
Rule not working simonkc
Malware Rules Updated Darden, Patrick S.
[snort-users] Blocking with a PIX d . deboni
first post to this maillist steph march
RE: [snort-users] Blocking with a PIX Hutchinson, Andrew
RE: [snort-users] Blocking with a PIX d . deboni
RE: [snortsam-discussion] Blocking with a PIX d . deboni
RE: snort dropping 48% Kreimendahl, Chad J
RE: [snort-users] Blocking with a PIX d . deboni
Re: snort 2.1.1 on Solaris 8 is WORKING now. Snortty
Re: first post to this maillist Matt Kettler
Re: snort http_inspect sgt_b
Re: Typical barnyard compile problems Olaf Schreck
Snort speed limit? Sheahan, Paul
RE: New Sasser Worm Signatures Sheahan, Paul
Re: snort http_inspect Jeremy Hewlett
Re: first post to this maillist Nick Oliver
Re: RE: New Sasser Worm Signatures ids
Re: RE: Re: New Sasser Worm Signatures ids
Re: Snort speed limit? Matt Kettler
Multiple output plugins Gary_Portnoy
Re: ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT Brian
snort on a worksation (fc1) <-- router <-- cable-modem <-- internet steph march
Re: snort 2.1.1 on Solaris 8 is WORKING now. Marcus
P2P Gnutella Signature does a more precise or final version of the signature exist? Jacob, Raymond A Jr
Re: snort on a worksation (fc1) <-- router <-- cable-modem <-- internet Matt Kettler
Stupid Question Bell, Josh
RE: Stupid Question larosa, vjay

Wednesday, 12 May

No alert detection on alert console Naveen C Joshi
Re: snort 2.1.1 on Solaris 8 is WORKING now. Cedric Guillotin
RE: Stupid Question AJ Butcher, Information Systems and Computing
RE: No alert detection on alert console Truax, Shawn (MBS)
[snort-users] Bad Performance d . deboni
Reppeated warnings Manuel Balderrábano
RE: [snort-users] Bad Performance Jim Hendrick
Strange packet phasma
wireless patch wireless
Re: Strange packet todb
Snort but no alert nyarlathothep () libero it
RE: Snort but no alert Michael Steele
RE: Snort but no alert Nick Duda
new Barnyard new snortb Chuck Holley
Re: new Barnyard new snortb Michael Anderson
Re: snort 2.1.1 on Solaris 8 is WORKING now. Alain Defrance
RE: Snort-users digest, Vol 1 #4222 - 9 msgs Danista R. Lata
RE: about some error ajay sahasrabudhe
Re: new Barnyard new snortb Michael Anderson
Barnyard issues Gary_Portnoy
How to reference a $var in pcre? Kirk Vogelsang
RE: about some error Michael Steele
Re: How to reference a $var in pcre? Matt Kettler

Thursday, 13 May

snort and firewall all in one machine Peggy Kam
logging to a remote database with mudpit Maetzky, Steffen (Extern)
RE: snort and firewall all in one machine Harper, Patrick
Re: snort and firewall all in one machine Peggy Kam
RE: Snort but no alert nyarlathothep () libero it
RE: logging to a remote database with mudpit Lance Boon
Detecting SYN Floods Sheahan, Paul
display/log IPv6 traffic ? Akolinare
Re: snort and firewall all in one machine Matt Kettler
RE: Snort-users digest, Vol 1 #4232 - 9 msgs MOUTON Michael OF/UNPS
Applied Watch sherri.harper
RE: logging to a remote database with mudpit Lance Boon
RE: different logging options. -- Applied Watch Eric Hines
Re: Applied Watch Frank Knobbe
RE: Applied Watch sherri.harper
Re: different logging options. -- Applied Watch Brian
RE: new Barnyard new snortb Chuck Holley
RE: different logging options. -- Applied Watch Eric Hines
Re: Applied Watch Jason
Re: new Barnyard new snortb Bamm Visscher
Re: different logging options. -- Applied Watch Brian
Re: Typical barnyard compile problems Richard Bejtlich
Administrativia: No advertising please Andrew R. Baker
Re: Administrativia: No advertising please James Riden
question about the snort final stat Lin Zhong
RE: Problem compiling MySQL Support into Snort Tony Howlett
Snort pass rules failing Jerry Shenk
Re: Snort pass rules failing Matt Kettler
RE: Snort pass rules failing Jerry Shenk
RE: Snort pass rules failing Jerry Shenk
RE: Administrativia: No advertising please Michael Steele
Re: Administrativia: No advertising please Shaun T. Erickson
Re: Administrativia: No advertising please James Riden
FW: Administrativia: No advertising please Eric Hines
Re: FW: Administrativia: No advertising please Frank Knobbe
Re: FW: Administrativia: No advertising please Frank Knobbe
HTTP Protocol Analysis Sonika Malhotra

Friday, 14 May

Re: Snort-users digest, Vol 1 #4234 - 12 msgs attechni
Re: display/log IPv6 traffic ? Dirk Geschke
gigabit passive tap Istvan Csabai
Re: HTTP Protocol Analysis Sonika Malhotra
Re: HTTP Protocol Analysis Sonika Malhotra
Re: HTTP Protocol Analysis Jason
RE: new Barnyard new snortb Chuck Holley
Specific Host Filter Todd.Lambdin
Re: Specific Host Filter Frank Knobbe
RE: Specific Host Filter Eric Hines
Re: wireless patch Steffen Pfendtner
RE: Specific Host Filter Todd.Lambdin
Re: {SPAM} can Snort itself reconfigure a firewall Matt Kettler
Re: new Barnyard new snortb Michael Anderson
Re: Administrativia: No advertising please Martin Roesch
RE: Administrativia: No advertising please SRH-Lists
Re: Re: Snort-users digest, Vol 1 #4234 - 12 msgs Jason
Re: Administrativia: No advertising please M. Jamil
Re: Administrativia: No advertising please Martin Roesch
Re: Administrativia: No advertising please Martin Roesch
Re: FW: Administrativia: No advertising please James Riden
RE: Administrativia: No advertising please Kreimendahl, Chad J

Saturday, 15 May

Oinkmaster v1.0 released. Andreas Östling
localhost alert kev . p
SnortDB-Extra Issues Josh Berry
attack classification Marcin Laskowski

Sunday, 16 May

RE: Snort-users digest, Vol 1 #4239 - 5 msgs New Kabon
Methods for Analyzing Data Vernon Webb
Re: Methods for Analyzing Data Keith W. McCammon

Monday, 17 May

About virus.rules etienne . causse
RE: Snort but no alert nyarlathothep () libero it
Re: HTTP Protocol Analysis Ms.Sonika Malhotra
Re: HTTP Protocol Analysis Keith W. McCammon
attack classification Marcin Laskowski
Snort is running, but doesn't fill IDS/ACID with alerts andreis
http_decode unknown preprocessor fatal error Alessandro Fiorenzi
Re: About virus.rules Matt Kettler
Re: About virus.rules Michael Sconzo
Snort is running, but doesn't fill IDS/ACID with alerts andreis
question about snort... actually cvs john greene
Re: question about snort... actually cvs Frank Knobbe
Re: About virus.rules Frank Knobbe
Re: About virus.rules Michael Sconzo
Re: About virus.rules Frank Knobbe
Re: About virus.rules Jason Haar

Tuesday, 18 May

help Lillebø Harald Sindre
Re: http_decode unknown preprocessor fatal error Nerijus Krukauskas
Error starting stunnel Maetzky, Steffen (Extern)
Snort functionality I cant find? Derick Wong
RE: Error starting stunnel Jeff Dell
Strange ICMP Ron Shuck
Tuning guidelines/HOWTO for flow-portscan anyone? McCash, John
future IPv6 version Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Strange ICMP Baxter, Anthony (ABAXTER)
Re: future IPv6 version Matt Kettler
2.1.3rc1 Performance Gary_Portnoy
Code modification/s Arpan Acharya
Can snort output the total size of packets processed in the final statistic report? Lin Zhong

Wednesday, 19 May

PortScan Configuration in snort.conf Ruiyuan Jiang
Re: 2.1.3rc1 Performance Dirk Geschke
RE: PortScan Configuration in snort.conf Michael Steele
Re: 2.1.3rc1 Performance Gary_Portnoy
Re: Code modification/s Matt Kettler
Flex-Response, anyone using it? Dusty Hall
Re: 2.1.3rc1 Performance Dirk Geschke
missing reference for correlation nyarlathothep () libero it
Re: 2.1.3rc1 Performance Gary_Portnoy
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
RE: 2.1.3rc1 Performance Gary_Portnoy
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
RE: PortScan Configuration in snort.conf Ruiyuan Jiang
RE: 2.1.3rc1 Performance Gary_Portnoy
Re; Flex-Response, anyone using it? Richard Bejtlich
Re: Re; Flex-Response, anyone using it? Marcin Laskowski
RE: 2.1.3rc1 Performance Dirk Geschke
SnortCenter-Acid-SuSE byte_test issue Mike Feetham
Re: Flex-Response, anyone using it? Paul Schmehl
loopback traffic Security Personnel
RE: 2.1.3rc1 Performance Gary_Portnoy
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
RE: 2.1.3rc1 Performance John Creegan
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
Re: Re; Flex-Response, anyone using it? James Riden
http-decode SN ORT
Re; loopback traffic Richard Bejtlich
Re: loopback traffic Matt Kettler
snort tables (mysql) Cesar
Re: loopback traffic Security Personnel
Re: loopback traffic James Riden
Re: Flex-Response, anyone using it? Jason Haar
Re: Re; loopback traffic Frank Knobbe
RE: snort tables (mysql) Truax, Shawn (MBS)
Re: Flex-Response, anyone using it? James Riden
Re: Flex-Response, anyone using it? Jason
Re: Flex-Response, anyone using it? James Riden
RE: 2.1.3rc1 Performance Darren Webb

Thursday, 20 May

Re: SnortCenter-Acid-SuSE byte_test issue AJ Butcher, Information Systems and Computing
Ignoring arbitrary ports for certain rules AJ Butcher, Information Systems and Computing
how to handle this problem derk van de Velde
Re: how to handle this problem AJ Butcher, Information Systems and Computing
RE: how to handle this problem derk van de Velde
RE: how to handle this problem AJ Butcher, Information Systems and Computing
Logging specific alerts to syslog Devanathan, Balaji (Corporate, consultant)
RE: Logging specific alerts to syslog Jeff Dell
Snort and high performance networks Christopher Rapier
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
FW: Flex-Response, anyone using it? IDont ThinkSo
RE: loopback traffic Bob Sukovich
RE: 2.1.3rc1 Performance snort user
RE: Snort and high performance networks Kreimendahl, Chad J
RE: 2.1.3rc1 Performance Gary_Portnoy
RE: how to handle this problem Corey Rock
R: Snort and high performance networks Fausto Marzi
Re: Snort and high performance networks Christopher Rapier
Sensor Agent at Remote machine Naveen C Joshi
Re: Ignoring arbitrary ports for certain rules Matt Kettler
RE: 2.1.3rc1 Performance Kreimendahl, Chad J
RE: Flex-Response, anyone using it? CGhercoias
RE: Snort and high performance networks Kreimendahl, Chad J
GRE preprocessor Jenkinson, John P (SAIC)
RE: 2.1.3rc1 Performance Gary_Portnoy
Re: Flex-Response, anyone using it? Jason
BACKDOOR QAZ Worm Client Login access? False positive? sart
Re: Snort and high performance networks Chris Rapier
Re: Snort and high performance networks Chris Rapier
Re: Flex-Response, anyone using it? James Riden
RE: Snort and high performance networks Kreimendahl, Chad J
Re: FW: Flex-Response, anyone using it? Paul Schmehl
About to setup snort Shaun T. Erickson
which rules to download lola marais
ANVIL Adriel T. Desautels
Re: which rules to download Matt Kettler
Re: BACKDOOR QAZ Worm Client Login access? Matt Kettler
Re: which rules to download lola marais
RE: About to setup snort Truax, Shawn (MBS)
Re: About to setup snort Richard Bejtlich
Come hither payload Gould, Scott
Re: About to setup snort James Edwards
RE: Come hither payload Gould, Scott

Friday, 21 May

Re: Ignoring arbitrary ports for certain rules AJ Butcher, Information Systems and Computing
RE: how to handle this problem derk van de Velde
RE: ANVIL - WAS [Snort-users] which rules to download Harper, Patrick
Re: snort http_inspect alerts still flooding on snort 2.1.2.... Snortty
RE: (2) how to handle this problem derk van de Velde
RE: Snort and high performance networks Rafael Ortega
Re: About to setup snort Shaun T. Erickson
2.1.3rc1 Performance RESULTS Gary_Portnoy
Port mirroring Boswell, Richard
Re: BACKDOOR QAZ Worm Client Login access? sart
Re: Re: About to setup snort Shaun T. Erickson
RE: Snort and high performance networks snort user
RE: ANVIL - WAS [Snort-users] which rules to download Adriel T. Desautels
Re: Snort and high performance networks Jeff Coppock
Re: Snort and high performance networks Christopher Rapier
Re: Port mirroring Matt Kettler
RE: ANVIL - WAS [Snort-users] which rules to download Corey Rock
Re: Snort and high performance networks snort user
RE: Snort and high performance networks SN ORT
Why the EAP traffic do not show in the snort final stat? Lin Zhong
Can snort use an unconfigured interface? Shaun T. Erickson
RE: 2.1.3rc1 Performance RESULTS Kreimendahl, Chad J
RE: Snort and high performance networks Rafael Ortega
RE: Snort and high performance networks Kreimendahl, Chad J
RE: 2.1.3rc1 Performance RESULTS Gary_Portnoy
Re: Can snort use an unconfigured interface? Bennett Todd
RE: Can snort use an unconfigured interface? Corey Rock
Packet Payload database? Scott Zawalski
The logged snort alert # and the final stat do not match Lin Zhong
Libnet 1.0.2a with Libnet 1.1.x Joshua Berry
Re: Can snort use an unconfigured interface? Matt Kettler
massive rule update coming Brian
Re: Libnet 1.0.2a with Libnet 1.1.x Dirk Geschke
RE: Libnet 1.0.2a with Libnet 1.1.x Joshua Berry
Re: Can snort use an unconfigured interface? Shaun T. Erickson
RE: Come hither payload--->>>Fixed Gould, Scott
barnyard manual bonnie buwono

Saturday, 22 May

RE: 2.1.3rc1 Performance RESULTS Dirk Geschke
Re: [Snort-sigs] Packet Payload database? Rodrigo Ramos
are snortalog thing ok here derk van de Velde
where can i find the relation derk van de Velde
RE: how to handle this problem Corey Rock
Re: Re: About to setup snort Bamm Visscher

Sunday, 23 May

flow-portscan. Chris Keladis
Snort-Wireless on Linksys WRT54G Steffen Pfendtner
Re: Snort and high performance networks Jason Haar

Monday, 24 May

Re: are snortalog thing ok here Cédric BLIN
Re: are snortalog thing ok here jeremy chartier
RE: are snortalog thing ok here derk van de Velde
RE: Sensor Agent at Remote machine Naveen C Joshi
Re: are snortalog thing ok here jeremy chartier
Fatal Error cause snort can not startup kinux
RE: Fatal Error cause snort can not startup Harper, Patrick
Re: Snort and high performance networks Aaron
Snort getting RNA-like overhaul? Keith W. McCammon
Partial system crash while snort exiting Richard Lang
Re: Snort getting RNA-like overhaul? Sam
Disable rules Jorge Cláudio
RE: Fatal Error cause snort can not startup SN ORT
Re: Disable rules Matt Kettler
RE: Disable rules Harper, Patrick
High Speed Network Cards + rules? Adriel T. Desautels
Re: High Speed Network Cards + rules? Keith W. McCammon
Re: High Speed Network Cards + rules? Christopher Rapier
Re: High Speed Network Cards + rules? Matt Kettler
Re: High Speed Network Cards + rules? Tod Beardsley
Re: [Snort-sigs] RE: Ignoring Win32 SNMP printer checks Nerijus Krukauskas
Re: High Speed Network Cards + rules? James Riden

Tuesday, 25 May

Re: Re: Snort and high performance networks Micha Silver
Re: High Speed Network Cards + rules? James Riden
Forcing mudpit to use a special port for stunnel Maetzky, Steffen (Extern)
RE: Forcing mudpit to use a special port for stunne l McGuire, Dennis
Barnyard woes David
Re: Barnyard woes Dirk Geschke
snort-wireless on Linksys WRT54G wireless
RE: Barnyard woes VanBrecht, Jason
question about barnyard logging to remote mySQL database. Timothy W Morrison
AW: Barnyard woes Maetzky, Steffen (Extern)
Re: Barnyard woes Bamm Visscher
Re: question about barnyard logging to remote mySQL database. Bamm Visscher
Gaobot worm Pat Delaney
How to Triggering Windows Exploits? ids
RE: How to Triggering Windows Exploits? Joshua Berry
Re: RE: How to Triggering Windows Exploits? ids
Re: Re: Snort and high performance networks Aaron
Re: How to Triggering Windows Exploits? James Riden

Wednesday, 26 May

RE: RE: How to Triggering Windows Exploits? Alan
RE: How to Triggering Windows Exploits? Alan
RE: RE: How to Triggering Windows Exploits? Alan
Re: Re: Snort and high performance networks Micha Silver
Re: RE: How to Triggering Windows Exploits? Hendo
Re: Barnyard woes David
Snort Block Plugin. akhenato () montevideo com uy
Re: Snort Block Plugin. Matt Kettler
Re: Gaobot worm Matt Kettler
Re: Snort Block Plugin. Nicolas Saurbier
RE: Snort Block Plugin. CGhercoias
wildcards in rules? Sheahan, Paul
Re: Snort Block Plugin. akhenato () montevideo com uy
Future plans Paul Schmehl
Why the alert # in the snort final stat do not match the alert # in log? Lin Zhong
Re: wildcards in rules? Matt Kettler
Snort 2.1.3rc1 core dump Gary_Portnoy
Re: Flex-Response, anyone using it? Jason
Custom rules Devanathan, Balaji (Corporate, consultant)

Thursday, 27 May

Re: Snort 2.1.3rc1 core dump Dirk Geschke
Honeynet Security Console 1.0 Final Released Jeff Dell
RE: Problems with jpgraph and ACID . rod
RE: a lot of Loopback traffic being logged. rod
Guardian with Snort claudio antonio
RE: a lot of Loopback traffic being logged. Alejandro Flores
how to clean up database? Cesar
Stream4 Mangling? SRH-Lists
RE: Stream4 Mangling? Jim Cervantes
Re: Snort 2.1.3rc1 core dump Jeremy Hewlett
Apache/Acid + server Cilin
Re: Apache/Acid + server James Riden
Suspect activity: proxy scan attempts, SNMP access, etc Saken Seifullin

Friday, 28 May

barnyard problem Jasmine CHUA
RE: a lot of Loopback traffic being logged. rod
Snort not Alerting Shaun Gray
Snort, Barnyard, Acid - Lack of paylod John J. Nagro
Re: Apache/Acid + server Nigel Houghton
OT: ACID php pre-req question. Shaun T. Erickson
Re: Snort, Barnyard, Acid - Lack of paylod Michael Anderson
Snort capturing ARP packets sgt_b
Typot BACKDOOR _JusSx_
system setup for SNORT: looking for recommendation Jeff Schmidt (CACL Tech Asst)
Re: system setup for SNORT: looking for recommendation twig les
Not loggin to MySQL Database Vernon Webb
RE: Typot BACKDOOR David
RE: barnyard problem David
RE: Snort capturing ARP packets David

Saturday, 29 May

performance monitoring nt
Re: About virus.rules nt
RE: performance monitoring Darren Webb
RE: Not loggin to MySQL Database David
Re: performance monitoring Erik Fichtner
Flow Portscan James Ashton
RE: Not loggin to MySQL Database Truax, Shawn (MBS)
BARE BYTE UNICODE ENCODING Annie Green
Re: About virus.rules kenw
Re: About virus.rules Nick Hatch

Monday, 31 May

100 Client VPN Steven Coutts
Re: 100 Client VPN The Shell
Re: 100 Client VPN Steven Coutts
Unknown rule type: iis_unicode_map Mark Wade

Tuesday, 01 June

Re: performance monitoring AJ Butcher, Information Systems and Computing
Re: system setup for SNORT: looking for recommendation AJ Butcher, Information Systems and Computing
RE: Snort-users digest, Vol 1 #4273 - 4 msgs Pedro Jorge Barradas
RE: Unknown rule type: iis_unicode_map Harper, Patrick
RE: Not loggin to MySQL Database Harper, Patrick
RE: Not loggin to MySQL Database Vernon Webb
Re: Snort, Barnyard, Acid - Lack of paylod Michael Anderson
RE: Problems with jpgraph and ACID . rod
Only half off topic..maybe Jeff Price
RE: Snort and high performance networks Esler, Joel - Contractor
RE: Snort and high performance networks Rafael Ortega
barnyard issues David
Snort, Apache, PHP, MySQL and Acid installation problem with SNORT Ramesh Pillai
patch for flow portscan preprocessor's deficient logging Holt Sorenson
I don't understand this snort alert, "NETBIOS SMB IPC$ share unicode ....{ICMP}" L HR
RE: Problems with jpgraph and ACID . rod
Case Study Leland
BARE BYTE UNICODE ENCODING Annie Green
RE: Only half off topic..maybe Harper, Patrick
RE: Snort, Apache, PHP, MySQL and Acid installation problem with SNORT Harper, Patrick
RE: barnyard issues SRH-Lists
Did they read it? email tracking service Dave Dearinger
Samba and "BAD-TRAFFIC 0 ttl" alerts hugh_fraser
Re: Samba and "BAD-TRAFFIC 0 ttl" alerts Max Valdez
ACID setup question Shaun T. Erickson
Re: Flow Portscan Chris Green
Re: Did they read it? email tracking service Matt Kettler
Re: Did they read it? email tracking service Matt Kettler
Re: ACID setup question Paul Schmehl
Re: ACID setup question Shaun T. Erickson
Re: ACID setup question Paul Schmehl
Re: Only half off topic..maybe Jeff Price
Re: ACID setup question Shaun T. Erickson
Enabling Flex-resp simonkc

Wednesday, 02 June

Snort on Mac OSX Eric
Bare Byte Unicode Encoding Pedro Jorge Barradas
Snort& Intrusion Prevention Maetzky, Steffen (Extern)
Re: Snort on Mac OSX Guillaume Arcas
Re: Only half off topic..maybe David Alonso De La Vega Tapage
Re: Enabling Flex-resp Guillaume Arcas
Flexresp: react combined with a content-list Maetzky, Steffen (Extern)
RE: Only half off topic..maybe Harper, Patrick
RE: Bare Byte Unicode Encoding Pedro Jorge Barradas
updating snort rules with oinkmaster Pascal.Dubach
Re: updating snort rules with oinkmaster John J. Nagro
Re: ACID setup question Shaun T. Erickson
No mysql support error Cockerham, John (US SSA)
Snort Installation on Win2K problems geomax
RE: No mysql support error Jeff Evenson
Re: Snort& Intrusion Prevention Frank Knobbe
RE: No mysql support error Harper, Patrick
Re: ACID setup question Paul Schmehl
Re: Snort& Intrusion Prevention Matt Kettler
Bug with pcap filters? Jason Haar
L3 retriever false positive for windows ping? Corey Rock
RE: Snort Installation on Win2K problems Michael Steele
RE: Stream4 Mangling? (more details/debugging) SRH-Lists
Unsubscribe CC8(fzlXaB"HH( Scott Charleson
Re: ACID setup question Shaun T. Erickson
Cant see alert for rule Tom Fulton
Alert classification and priority Gary_Portnoy
RE: Cant see alert for rule Tom Fulton
RE: Cant see alert for rule Harper, Patrick
Snort 2.1.3 Released Jeremy Hewlett
Re: updating snort rules with oinkmaster Andreas Östling
Re: Cant see alert for rule Jeff Coppock
RE: Cant see alert for rule Tom Fulton
Snort VoIP derek-murphy
RE: Cant see alert for rule Tom Fulton
Re: ACID setup question Paul Schmehl

Thursday, 03 June

Re: Alert classification and priority Dirk Geschke
AW: Snort& Intrusion Prevention Maetzky, Steffen (Extern)
Snort Logs [HITCON VIRUS CHECK: OK] Maik . Linnemann
RE: Snort Logs [HITCON VIRUS CHECK: OK] Miner, Jonathan W (CSC) (US SSA)
Re: Alert classification and priority Gary_Portnoy
Re: Re: Snort Logs [HITCON VIRUS CHECK: OK] Maik . Linnemann
Re: Alert classification and priority Dirk Geschke
Excluding IPs in HOME_NET? Paul Martin
RE: Snort& Intrusion Prevention Joshua Berry
RE: Stream4 Mangling? (more details/debugging) SRH-Lists
Burp! Schmehl, Paul L
Linux Newb:No Alert Logging Shaun Gray
Re: Cant see alert for rule SN ORT
re: alert archive question Lindsay Hunt
RE: Excluding IPs in HOME_NET? Harper, Patrick
Re: Alert classification and priority SN ORT
Re: AW: Snort& Intrusion Prevention Matt Kettler
RE: Excluding IPs in HOME_NET? SRH-Lists
ACID Graphs SN ORT
RE: Cant see alert for rule Tom Fulton
RE: Linux Newb:No Alert Logging Harper, Patrick
Danny Li/AP/NSC is out of the office. Danny Li
RE: AW: Snort& Intrusion Prevention Eric Hines
Find out your snort database size Lance Boon
RE: Linux Newb:No Alert Logging Shaun Gray
re: snort archive database question Lindsay Hunt
HOME_NET question sart
When does snort/ACID do DNS lookups Humes, David G.
RE: Snort and high performance networks Corey Rock
RE: When does snort/ACID do DNS lookups Adriel T. Desautels
RE: When does snort/ACID do DNS lookups todb
Re: ACID Graphs Bryan Irvine
Re: AW: Snort& Intrusion Prevention Ravi Kumar

Friday, 04 June

RE: Excluding IPs in HOME_NET? AJ Butcher, Information Systems and Computing
RE: HOME_NET question Truax, Shawn (MBS)
Anyone using SnortCenter w/ ACiD? Timothy W Morrison
ru.le to detect lots of syn pkts? Rich Adamson
RE: When does snort/ACID do DNS lookups Truax, Shawn (MBS)
Re: ru.le to detect lots of syn pkts? AJ Butcher, Information Systems and Computing
Re: Anyone using SnortCenter w/ ACiD? AJ Butcher, Information Systems and Computing
RE: Anyone using SnortCenter w/ ACiD? Naveen C Joshi
How do I upgrade Snort to the latest version? Lance Boon
FAQ: RE: Anyone using SnortCenter w/ ACiD? AJ Butcher, Information Systems and Computing
Re: ru.le to detect lots of syn pkts? Paul Schmehl
Re: ru.le to detect lots of syn pkts? Matt Kettler
Re: ru.le to detect lots of syn pkts? Rich Adamson
Re: ru.le to detect lots of syn pkts? Rich Adamson
Help please: libpcre.so.0: cannot open shared... Gustavo Gomes
Re: Help please: libpcre.so.0: cannot open shared... Matt Kettler
RE: Help please: libpcre.so.0: cannot open shared... David
Re: Snort on Mac OSX Doug Nordwall
Re: How do I upgrade Snort to the latest version? Doug Nordwall
Snort and ACID - how to determine if logging is happening correctly Jeff Schmidt (CACL Tech Asst)
Barnyard w/ mysql issues Phinizy William
RE: How do I upgrade Snort to the latest version? Lance Boon
Win32 v2.13 build 27 problem Rich Adamson
Re: ru.le to detect lots of syn pkts? Paul Schmehl
Re: ru.le to detect lots of syn pkts? Rich Adamson
Re: ru.le to detect lots of syn pkts? Paul Schmehl
Re: Barnyard w/ mysql issues Richard Bejtlich
RE: Re: Barnyard w/ mysql issues Phinizy William
Eagle X Like Instillation for Linux steve

Saturday, 05 June

RE: Eagle X Like Instillation for Linux Corey Rock
RE: Help please: libpcre.so.0: cannot open shared... Corey Rock
Multiple Snort sensor with MYSQL and ACID Primero
Multiple Snort sensor with MYSQL and ACID Primero
(no subject) Mike Cohen
PHP complaint about GD Snort IDS
toll for snort rules management Primero
RE: toll for snort rules management Jeff Dell
RE: Multiple Snort sensor with MYSQL and ACID Jeff Dell
RE: Multiple Snort sensor with MYSQL and ACID Gould, Scott

Sunday, 06 June

upriviileged snort user (was Re: (no subject)) Ken Gunderson
Snort for Windows Memory Climbing Eric Knight
Re: upriviileged snort user (was Re: (no subject)) Dirk Geschke
RE: Help please: libpcre.so.0: cannot open shared... Lorenz.Graf
Re: Suspect activity: proxy scan attempts, SNMP access, etc Saken Seifullin
Re: Suspect activity: proxy scan attempts, SNMP access, etc Sean Lazar

Monday, 07 June

Event-Correlation& avoiding false positives Maetzky, Steffen (Extern)
Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... soldier Mx
AW: Upgrading snort 2.0.* to -> 2.1.2 , and now i c ant .... Poppi, Sandro
flowbits together with stream4_reassemble question Per Kristian
Classification of Snort-Rules into Applications kinek
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Gary_Portnoy
Classification of Snort-Rules into Applications kinek
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman
Re: (no subject) Matt Kettler
Re: (no subject) Mike Cohen
RE: Event-Correlation& avoiding false positives Kreimendahl, Chad J
Re: (no subject) Matt Kettler
RE: Event-Correlation& avoiding false positives Eric Hines
(no subject) Michael Shirk
RE: Snort on Mac OSX Michael Shirk
what does it mean ? Laskowski
trouble connecting barnyard to a remote mysql database. Timothy W Morrison
Re: Event-Correlation& avoiding false positives Brian
RE: Snort on Mac OSX Guillaume Arcas
Testing Snort? Jeff Schmidt (CACL Tech Asst)
Re: Snort and ACID - how to determine if logging is happening correctly Timothy W Morrison
RE: Testing Snort? Jeff Dell
Re: Testing Snort? mbusigin
RE: trouble connecting barnyard to a remote mysql database. Lance Boon
Can you see anything wrong with these rules/snort.conf? Tom Fulton
Re: Testing Snort? Michael Sconzo
Re: Testing Snort? sgt_b
RE: trouble connecting barnyard to a remote mysql database. Timothy W Morrison
how to delete records from acid? Primero
RE: Testing Snort? Richard Bejtlich

Tuesday, 08 June

RES: Guardian with Snort Franco Catena
Tools for sending email alerts from snort Travis . Landry
Re: Tools for sending email alerts from snort Dirk Geschke
Mudpit & pcap. Chris Keladis
snort data sheet mark jon
RE: Tools for sending email alerts from snort Joshua Berry
Taps, Rx Only Cables & Hubs - Which one(s)? Jim Richards
Taps, Rx Only Cables & Hubs - Which one(s)? Jim Richards
Landesk Joshua Berry
Taps, Rx Only Cables & Hubs - Which one(s)? Jim Richards
RE: Event-Correlation& avoiding false positives hugh_fraser
RE: Taps, Rx Only Cables & Hubs - Which one(s)? Mike Walter
Re: Taps, Rx Only Cables & Hubs - Which one(s)? Rich Adamson
Re: Taps, Rx Only Cables & Hubs - Which one(s)? Matt Kettler
TFTP root directory alert Rowland, Krisa W ERDC-ITL-MS Contractor
Promiscuous fails with -D Brei, Matt
Where I can find a tap to buy? Gustavo Gomes
Regaring SnortCentre Jospeh
Snort Frontend on Windows Jospeh
RE: Snort Frontend on Windows Jeff Dell
RE: TFTP root directory alert Jerry Shenk
Re: TFTP root directory alert Matt Kettler
Re: RES: Guardian with Snort bonnie buwono
Re: Where I can find a tap to buy? Ty Bodell
SnortDB Extra Joshua Berry
Re: Where I can find a tap to buy? Matt Kettler
Re: Snort Frontend on Windows Ty Bodell
Report a bug? Rich Adamson
Re: how to delete records from acid? Jeff Coppock
Re: Event-Correlation& avoiding false positives DK
visual DB sheme Knobloch, Katherine
RE: visual DB sheme Jeff Dell
RE: Tools for sending email alerts from snort Edwin Beekman

Wednesday, 09 June

Snort + Guardian + Acid dont run Franco Catena
create a html page with snort mysql db Jan Hormann
Re: SnortDB Extra Gary_Portnoy
RE: create a html page with snort mysql db McGuire, Dennis
RE: Tools for sending email alerts from snort Harper, Patrick
Re: create a html page with snort mysql db Nerijus Krukauskas
Re: Snort + Guardian + Acid dont run Alejandro Flores
Re: create a html page with snort mysql db prabu
RE: SnortDB Extra Joshua Berry
Re: create a html page with snort mysql db Jan Hormann
RE: create a html page with snort mysql db Edwin Beekman
Information Snort 2.1.3 Rodrigo Ramos
Re: Information Snort 2.1.3 Brian
Setting up Oinkmaster Lance Boon
Barnyard newbie questions. Shaun T. Erickson
Adding outbound rules to snort ruleset Jerry Shenk
Re: Report a bug? Jeremy Hewlett
RE: Barnyard newbie questions. Lance Boon
RE: Adding outbound rules to snort ruleset Williams Jon
windows 2000 snort and promiscuous mode interfaces Robert . Perez
Intrusion Prevention System Ragip Yahsieli
what does it mean ? Laskowski
RE: Snort on Mac OSX Joel Esler
flowbits together with stream4_reassemble question Per Kristian Johnsen
Use Snort to detect viruses? Justin McLeod
Regaring SnortCentre Jospeh
Easy way to test snort Marc Daniels
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman
flowbits together with stream4_reassemble question Per Kristian Johnsen
W32.HLLW.Nebiwo Rule Jose De Leon
Problems with IDS File of Snort
flowbits together with stream4_reassemble question Per Kristian Johnsen
RE: Adding outbound rules to snort ruleset Jerry Shenk
Multiple instances of snort on a bonded interface Miles Stevenson
Re: Use Snort to detect viruses? Matt Kettler
Re: Intrusion Prevention System Michael Sconzo
New Sguil 0.4.0 installation guide Richard Bejtlich
Re: Easy way to test snort todb
Spyware rules for Snort Jason Haar
Really cheeky feature request Jason Haar
Re: Snort + Guardian + Acid dont run pvm
SID in syslog messages Devanathan, Balaji (Corporate, consultant)

Thursday, 10 June

Re: create a html page with snort mysql db Nerijus Krukauskas
Re: Problems with IDS File of Snort Cédric BLIN
AW: Barnyard newbie questions. Maetzky, Steffen (Extern)
Wu-Manber, Aho-Corasick, Boyer Moore. kinek
Type:11 Code:0 TTL EXCEEDED IN TRANSIT Franco Catena
Snort-Inline on RedHat 9 HowTo Maetzky, Steffen (Extern)
RE: Snort-Inline on RedHat 9 HowTo Jeff Dell
Re: Spyware rules for Snort Keith W. McCammon
Re: AW: Barnyard newbie questions. Shaun T. Erickson
Announcement PigMail v. 1.01 Adam Ely
RE: Intrusion Prevention System Harper, Patrick
RE: AW: Barnyard newbie questions. Truax, Shawn (MBS)
Danny Li/AP/NSC is out of the office. Danny Li
Favorite Ethernet Tap's Gary Borgeson
RE: Favorite Ethernet Tap's Kreimendahl, Chad J
Re: AW: Barnyard newbie questions. Tom Arseneault
Problems with Snort on SuSE Linux 9.1 (Kernel 2.6) Eric Hines
RE: Problems with Snort on SuSE Linux 9.1 (Kernel 2.6) Tom Fulton
RE: snort data sheet Corey Rock
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... soldier Mx
Snort and MySQL - clearing alerts George Laiacona
Re: Problems with Snort on SuSE Linux 9.1 (Kernel 2.6) Eric Hines
Re: Snort and MySQL - clearing alerts Paul Schmehl
Re: Upgrading snort 2.0.* to -> 2.1.2 , and now i cant .... Michael Boman
RE: Favorite Ethernet Tap's Gould, Scott
Snort IDS OUTPUT TO PRINTER Aaron Russ
using a tap Altrock, Jens
Re: using a tap Michael Boman

Friday, 11 June

Re: Wu-Manber, Aho-Corasick, Boyer Moore. Matt Kettler
RE: Promiscuous fails with -D Corey Rock
RE: Multiple instances of snort on a bonded interface Corey Rock
RE: Favorite Ethernet Tap's CGhercoias
RE: Snort IDS OUTPUT TO PRINTER Jerry Shenk
SNORT 101 IDS - HELP Hari Om
RE: using a tap Gould, Scott
Re: Multiple instances of snort on a bonded interface Miles Stevenson
RE: Disable alerts from certain machines - Not working for me? Snortty
VoIP Vulnerabilities Grant Macaulay
Timezone issue Mike Feetham
RE: Favorite Ethernet Tap SN ORT
RE: Promiscuous fails with -D Corey Rock
RE: VoIP Vulnerabilities Jeremy Junginger
catching many-to-one attacks twig les
Ready! Set! ... Nothing :-/ Shaun T. Erickson

Sunday, 13 June

AW: using a tap Altrock, Jens
Problems to install Snort on Fedora RC2 Karl-Heinz Schulz
Re: Ready! Set! ... Nothing :-/ Shaun T. Erickson

Monday, 14 June

2.1.3 Multiple events/packet sekure
DC SUG Meeting - Next Thurs., June 24 Keith W. McCammon
Re: Ready! Set! ... Nothing :-/ David
Windows32 Snort without WPcap.dll? Steven Bairstow
Export variables into snort startup process DeBerry, Casey
Re: Windows32 Snort without WPcap.dll? Keith W. McCammon
Brazilian users Rodrigo Ramos
Re: Windows32 Snort without WPcap.dll? Steven Bairstow
Re: Problems to install Snort on Fedora RC2 Brian
Rule update question Nick Duda
ACID Archive data Peggy Kam
Configuring PHP 4.3.6 on SuSE 9.0 Pro Tom Fulton
Snort message: Unable to create an IPSet from any ... ? James Sinnamon
snort output: Unable to create an IPSet from any ... ? James Sinnamon
Re: Snort message: Unable to create an IPSet from any ... ? Paul Schmehl
Re: Snort message: Unable to create an IPSet from any ... ? James Sinnamon
ACID error loading db abstraction library Tom Fulton

Tuesday, 15 June

Nothing written to logfiles James Sinnamon
updating rules bonnie buwono
snort.conf and ruleset-update Nicolas Saurbier
RE: Windows32 Snort without WPcap.dll? Michael Steele
Re: Rule update question Andreas Östling
Re: updating rules Andreas Östling
RE: Export variables into snort startup process Brian Jameson
SNMP missing community string attempt Alan Barnes
Re: Export variables into snort startup process Brian
Re: ACID error loading db abstraction library Paul Schmehl
Re: Nothing written to logfiles Paul Schmehl
RE: Help please: libpcre.so.0: cannot open shared.. . Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Help please: libpcre.so.0: cannot open shared.. . Matt Kettler
Snort on Crossbeam C30 Christopher.Lewis
Re: RE: Favorite Ethernet Tap Jeff Price
Snort message: Unable to create an IPSet from any ... ? James Sinnamon
Re: Snort message: Unable to create an IPSet from any ... ? Mike Mestnik
RE: Snort on Crossbeam C30 Joshua Berry
Snort and Cacti Error "SNMP missing community string attempt" Alan Barnes
Attempted Information Leak & Misc activity Laskowski
RE: Problems Upgrading Rowland, Krisa W ERDC-ITL-MS Contractor
Re: Problems Upgrading sekure
Help! Kim.Sassaman
RE: Problems Upgrading Matt Kettler
Re: Problems Upgrading Bamm Visscher
Re: Problems Upgrading Kenneth Kron
What is home net Aaron Russ
Re: Nothing written to logfiles James Sinnamon

Wednesday, 16 June

RE: What is home net Kim.Sassaman
Kernel space Cédric BLIN
Re: What is home net sekure
RE: Help! David
NEWBIE: Snort Atkins, Dwane P
Snort for RHAS rel. 2.1AS (Pensacola)? Shaun T. Erickson
RE: [Snort-sigs] Holy false Positives Lance Boon
RE: NEWBIE: Snort Atkins, Dwane P
Re: 2.1.3 Multiple events/packet sekure
Ok, Ok - I know - http_inspect Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Ok, Ok - I know - http_inspect Jeff Dell
Re: Problems Upgrading Matt Kettler
Re: Kernel space Matt Kettler
(no subject) Zurt
Barnyard And Snort bonnie buwono
multiple instances of snort service Gargac. Jeff
RE: Ok, Ok - I know - http_inspect Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Ok, Ok - I know - http_inspect Jeff Dell
RE: Help! Kim.Sassaman
RE: Ok, Ok - I know - http_inspect Koski, Brian
Re: Kernel space Michael Boman

Thursday, 17 June

Output Plugin Jürgen Schinker
RE: Output Plugin Jeff Dell
Best Practices for external sensors jonasb
Re: Best Practices for external sensors Todd_Pratt
Snort Management Console Atkins, Dwane P
RE: Ok, Ok - I know - http_inspect SN ORT
Passive email archive Miles Stevenson
How can I recognize rules with high false positive rate? Ali Zand
Re: Passive email archive Brian
Re: How can I recognize rules with high false positive rate? sekure
How can I recognize Snort rules with high false positive rate? Ali Zand
RE: Ok, Ok - I know - http_inspect Snortty
Re: Ok, Ok - I know - http_inspect sekure
Re: Ok, Ok - I know - http_inspect sekure
Re: Ok, Ok - I know - http_inspect Snortty
Re: Best Practices for external sensors M. Morgan
Acid not loggin Laura
RE: Acid not loggin Shawn Kottke
RE: Acid not loggin Kim.Sassaman
Re: How can I recognize Snort rules with high false positive rate? Keith W. McCammon
Re: How can I recognize Snort rules with high false positive rate? Jason Haar
Re: How can I recognize Snort rules with high false positive rate? Keith W. McCammon

Friday, 18 June

Re: Output Plugin Alejandro Flores
Re: Ok, Ok - I know - http_inspect Snortty
Re: Ok, Ok - I know - http_inspect sekure
RE: [Snort-sigs] signature doesn't match Joshua Berry
Re: Ok, Ok - I know - http_inspect Jeff Kell
Re: Ok, Ok - I know - http_inspect Snortty
RE: Configuring PHP 4.3.6 on SuSE 9.0 Pro Corey Rock
RE: Best Practices for external sensors Truax, Shawn (MBS)
RE: Snort Management Console Truax, Shawn (MBS)
pacsec.jp/core04 Call For Papers Dragos Ruiu
Re: Ok, Ok - I know - http_inspect SN ORT
Re: Ok, Ok - I know - http_inspect Chris Keladis
Problems with snort -A Pat Smith
Re: SNMP Glenn Mansfield Keeni
RE: Snort Management Console Eric Hines
Re: Re: How can I recognize Snort rules with high false positive rate? Ali Zand

Saturday, 19 June

IDS Policy Manager Documentation Uso
RE: IDS Policy Manager Documentation Jeff Dell
Tap problem. Paul W Halliday
Re: Tap problem. Frank Knobbe
Re: Tap problem. Paul W Halliday

Sunday, 20 June

snortreport and jpgraph Patrick Marquetecken

Monday, 21 June

Snort 2.1.x support on Win32 Koski, Brian
Re: Problems with snort -A Josh Berry
possible causes of source and destination ip from external network Annie Green
Re: possible causes of source and destination ip from external network Keith W. McCammon
Is this a successful hack attempt?...How serious? Suggestions? Sanjay Arora
RE: possible causes of source and destination ip fr om external network Truax, Shawn (MBS)
Re: Is this a successful hack attempt?...How serious? Suggestions? Brian King
Re: Is this a successful hack attempt?...How serious? Suggestions? sekure
Re: Snort 2.1.x support on Win32 Rich Adamson
RE: Blocking specific port or IP address Alina Lebrato
Re: Blocking specific port or IP address sekure
Re: Blocking specific port or IP address Eric Hines

Tuesday, 22 June

RE: Snort 2.1.x support on Win32 Rich Adamson
Re: Blocking specific port or IP address Steve Suppe
Thresholding enhancement? Rich Adamson
Barnyard not inserting into acid_* Rudi Starcevic

Wednesday, 23 June

Snort compilation Daniel Walther
Log to pipe Daniel Walther
Alert file question Jason Fischer
Re: Barnyard not inserting into acid_* sekure
Re: Rule update question Andreas Östling
Re: Alert file question sekure
Send logs to Windows Event Log Karl-Heinz Schulz
Postgresql + Snort Wireless on WRT54g: DB timestamp errors Steffen Pfendtner
DC Snort Users Group - Meeting Tomorrow (6/24)! Keith W. McCammon
Network Behaviour Anomoly Detection crayola
Re: Network Behaviour Anomoly Detection Jon Baer
advice on content rule for outgoing email jeffs
Re: snortreport and jpgraph Paul Schmehl
Re: Barnyard not inserting into acid_* Rudi Starcevic
RE: Network Behaviour Anomoly Detection Michael Cunningham

Thursday, 24 June

BPF-Filter Maetzky, Steffen (Extern)
Re: BPF-Filter Thomas Bechtold
Re: BPF-Filter Edin Dizdarevic
RE: RE: Network Behaviour Anomoly Detection Jerry Shenk
Re: RE: Network Behaviour Anomoly Detection security
IDS Policy Manager 1.4 Released Jeff Dell
RE: Barnyard not inserting into acid_* VanBrecht, Jason
Re: Alert file question Jason Fischer
Re: Barnyard not inserting into acid_* sekure
RE: Snort-users digest, Vol 1 #4337 - 10 msgs Chet Patel
help Garry Murdoch
RE: [Snort-sigs] SID 2404, NETBIOS SMB-DS Session Setup AndX request unicode username overflow attempt Lance Boon
Re: help Matt Kettler
Re: help sekure
Re: advice on content rule for outgoing email Matt Kettler
Re: RE: Network Behaviour Anomoly Detection Martin Roesch
Suspicious Traffic ISP Toolz
Re: Barnyard not inserting into acid_* Rudi Starcevic

Friday, 25 June

traffic detection Muhammad Reza
how to make a single unified syslog file ke chen
Logging local traffic Max Walshe
Logging traffic on Win2k loopback adaptor Max Walshe
help snort Razia Mir
Another Barnyard Question Lance Boon
Snort invented by the NSA? Keith W. McCammon
Re: Suspicious Traffic Matt Kettler
Re: Snort invented by the NSA? Frank Knobbe
Re: Another Barnyard Question Andrew R. Baker
Re: Snort invented by the NSA? Martin Roesch
Multiple Subnets in sr net Devanathan, Balaji (Corporate, consultant)
RE: Another Barnyard Question Lance Boon
RE: Multiple Subnets in sr net Jeff Dell
Re: Multiple Subnets in sr net Frank Knobbe
RE: Multiple Subnets in sr net Murray, Todd
RE: Multiple Subnets in sr net Devanathan, Balaji (Corporate, consultant)
RE: Multiple Subnets in sr net Jeff Dell
RE: Multiple Subnets in sr net Frank Knobbe

Saturday, 26 June

Re: RE: Network Behaviour Anomoly Detection pieter claassen
FATAL ERROR in bad-traffic.rules Xantius
Snort max at 256 simultaneous TCP stream? Tom Fulton
RE: Snort max at 256 simultaneous TCP stream? Tom Fulton
RE: FATAL ERROR in bad-traffic.rules Mark E. Donaldson
Re: FATAL ERROR in bad-traffic.rules Xantius
Re: Snort max at 256 simultaneous TCP stream? Edin Dizdarevic

Sunday, 27 June

snort not logging alerts Nicholas Bernstein
Re: snort not logging alerts Xantius
Re: FATAL ERROR in bad-traffic.rules Xantius
When did this change? Paul Schmehl
RE: When did this change? Jeff Dell
RE: When did this change? Paul Schmehl

Monday, 28 June

snort signature simulation tools praveen kundurthi
Réf. : [Snort-users] snort signature simulation tools etienne . causse
Integretion Firewall Gustavo Gomes
snort-nessus-correlation: honeysuckle vs. ids alert verification Maetzky, Steffen (Extern)
Re: snort signature simulation tools security
[Snort-users] Réf. : [Snort-users] snort signature simulation tools snort-users-admin
Re: FATAL ERROR in bad-traffic.rules Martin Roesch
Re: Integretion Firewall Matt Kettler
Re: Snort max at 256 simultaneous TCP stream? Martin Roesch
Re: help snort Martin Roesch
uricontent and pcre Matthew Grandison
Re: uricontent and pcre Keith W. McCammon
Re: snort not logging alerts SN ORT
problem with the portscan-ignore preprocessor Murray, Todd
RE: problem with the portscan-ignore preprocessor Murray, Todd
Snort on an OpenBSD firewall Sean Brown
2.1.3 and IPv6 Rowland, Krisa W ERDC-ITL-MS Contractor
Compiling Snort source code Hussein Osman
Re: Snort on an OpenBSD firewall Dragos Ruiu
Re: Snort on an OpenBSD firewall Sean Brown
Re: 2.1.3 and IPv6 Matt Kettler
Re: Snort on an OpenBSD firewall Matt Kettler
Re: Snort on an OpenBSD firewall Sean Brown
pls Un-subscribe ME Neeraj Jha
Request for advice Nicholas Bernstein

Tuesday, 29 June

Snort is a "niche player" Yaakov Yehudi
Re: Snort is a "niche player" Keith W. McCammon
Snort CVS Moving to cvs.snort.org Martin Roesch
Réf. : [Snort-users] Snort is a "niche player" etienne . causse
Snort 2.2.0-RC1 available Jeremy Hewlett
Re: [Snort-devel] Snort CVS Moving to cvs.snort.org Frank Knobbe
Sguil-0.5.0 Released Bamm Visscher
Re: Snort is a "niche player" Frank Knobbe
Re: Snort is a "niche player" Guillaume Arcas
Thresholding... Tobias Rice
Re: Snort is a "niche player" twig les
Re: snort not logging alerts Martin Roesch
Re: Snort is a "niche player" Martin Roesch
Re: snort not logging alerts Martin Roesch
Re: Snort is a "niche player" Michael Sconzo
RE: When did this change? Frank Knobbe
Re: Installing Snort As Service Jospeh
Installing Snort As Service Jospeh
RE: When did this change? Jeff Dell
RE: Re: Installing Snort As Service Michael Steele
Re: Request for advice Sean Brown
Re: Request for advice Sean Brown
Re: Snort is a "niche player" James Riden
RE: Snort is a Yaakov Yehudi
RE: Snort is a "niche player" Yaakov Yehudi
RE: Snort is a "niche player" Yaakov Yehudi
RE: Réf. : [Snort-users] Snort is a "niche player" Yaakov Yehudi
RE: Snort is a "niche player" Darren Webb

Wednesday, 30 June

Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Uso
RE: Snort is a "niche player" Bob Walder
RE: Snort is a "niche player" Bob Walder
RE: Snort is a "niche player" Bob Walder
Re: RE: Network Behaviour Anomoly Detection security
Re: Snort CVS Moving to cvs.snort.org security
Re: Request for advice sekure
Missing events sekure
Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Chris Reid
Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Rich Adamson
Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Rich Adamson
RE: Snort is a "niche player" Paul Schmehl
RE: RE: Network Behaviour Anomoly Detection hugh_fraser
Problem Starting Snort Felkins, Michael R.
Threshold rule syntax? Rich Adamson
RE: Problem Starting Snort Lance Boon
Test: No reply needed Corey Rock
Re: Problem Starting Snort sekure
RE: Problem Starting Snort Michael . R . Felkins
Threshold Bug - 2.2.0-RC1 Rich Adamson
Snort wireless Daniel Walther

Previous period

Next period