Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

725 messages starting Mar 31 05 and ending Jun 30 05
Date index | Thread index | Author index

• RE: Help with Rules Basselgia, Barry A Mr (NAF Atsugi) (Mar 31)
• RE: Snort ports? Escudero, Peter Louis (Mar 31)
• spec file update Florin Andrei (Mar 31)
• Re: [SPAM] - system commands - Email found in subject gareth (Apr 01)
• Re: Snort IPS Functionality Michael Ray (Apr 01)
• Snort and Bridge utils jzorzi (Apr 01)
• Re: sfportscan - open ports Hin (Apr 01)
  • Re: sfportscan - open ports Jeremy Hewlett (Apr 04)
• How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 02)
  • <Possible follow-ups>
  • How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 02)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 04)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 05)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 06)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 07)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 07)
  • RE: How to enable XML Logging in Snort 2.3.2 Jitendra Gupta (Apr 07)
• bleedingsnort Alejandro Flores (Apr 02)
  • Re: bleedingsnort Matt Jonkman (Apr 04)
  • <Possible follow-ups>
  • RE: bleedingsnort Harper, Patrick (Apr 02)
• Community Rule Update Alex Kirk (Apr 02)
  • <Possible follow-ups>
  • Community Rule Update Alex Kirk (Apr 05)
• Snort false positives/false negatives web page??? Briggs, Bruce (Apr 02)
• Re: Snort false positives/false negatives web page Nigel Houghton (Apr 02)
• Snort in offline mode? Ramkumar Chinchani (Apr 02)
  • Re: Snort in offline mode? Alex Kirk (Apr 02)
  • Re: Snort in offline mode? Matt Kettler (Apr 02)
• New detection capabilities added... Martin Roesch (Apr 02)
  • Re: [Snort-devel] New detection capabilities added... Edin Dizdarevic (Apr 04)
  • <Possible follow-ups>
  • Re: New detection capabilities added... Theodore Stout (Apr 02)
• confused on rule sets with oinkmaster Rich Adamson (Apr 02)
• Re: permission denied for accessing Mysql database Tomasz Piotr Palarz (Apr 03)
• BASE 1.1 release Kevin Johnson (Apr 03)
  • <Possible follow-ups>
  • RE: BASE 1.1 release Basselgia, Barry A Mr (NAF Atsugi) (Apr 04)
    • RE: BASE 1.1 release Kevin Johnson (Apr 04)
    • Re: BASE 1.1 release Michael Stone (Apr 06)
• Re: No Base with localhost/base in browser Mark Sargent (Apr 03)
• event correlation/aggregation;extrusion detection Jochen Kaiser (Apr 04)
• Re: Problems with base and postgresql Michael Stone (Apr 04)
  • Re: Problems with base and postgresql Alejandro Flores (Apr 04)
    • Re: Problems with base and postgresql Michael Stone (Apr 05)
  • Re: Problems with base and postgresql Aaron Glenn (Apr 05)
    • Re: Problems with base and postgresql Michael Stone (Apr 05)
      • Re: Problems with base and postgresql Bamm Visscher (Apr 05)
      • Re: Problems with base and postgresql Frank Knobbe (Apr 05)
• realplayer.playlist ?? Juan Fernandez (Apr 04)
• RE: BASE 1.1 release (Kevin Johnson) Mike Kelley (Apr 04)
  • Re: RE: BASE 1.1 release (Kevin Johnson) Kevin Johnson (Apr 04)
  • <Possible follow-ups>
  • RE: BASE 1.1 release (Kevin Johnson) Mike Kelley (Apr 04)
• /tmp/mysql.sock missing mr leokenzie (Apr 04)
  • <Possible follow-ups>
  • RE: /tmp/mysql.sock missing Snort (Apr 05)
    • Re: /tmp/mysql.sock missing Seth Art (Apr 07)
• Can Snort monitor multiple VLANs? Escudero, Peter Louis (Apr 05)
  • <Possible follow-ups>
  • RE: Can Snort monitor multiple VLANs? Peter Barton (Apr 05)
    • Running multiple Barnyards (was Re: Can Snort monitor multiple VLANs?) Andrew R. Baker (Apr 06)
  • RE: Can Snort monitor multiple VLANs? Escudero, Peter Louis (Apr 05)
  • RE: Can Snort monitor multiple VLANs? Basselgia, Barry A Mr (NAF Atsugi) (Apr 05)
• RE: DOUBLE DECODING ATTACK Briggs, Bruce (Apr 05)
  • <Possible follow-ups>
  • RE: DOUBLE DECODING ATTACK Venieris Yiannos (Jun 14)
• RE: Can Snort monitor multiple VLANs from a single box? Escudero, Peter Louis (Apr 05)
  • <Possible follow-ups>
  • RE: Can Snort monitor multiple VLANs from a single box? Escudero, Peter Louis (Apr 06)
• unsubscribe me praveen kundurthi (Apr 06)
  • RE: unsubscribe me Jeff Dell (Apr 06)
  • RE: unsubscribe me M. Shirk (Apr 06)
  • <Possible follow-ups>
  • RE: unsubscribe me Harper, Patrick (Apr 06)
• Community Rules Jeff McCarthy (Apr 06)
• Honeynet Security Console 2.0 Released Jeff Dell (Apr 06)
• BASE SID Lookup Dominic (Apr 06)
  • <Possible follow-ups>
  • RE: BASE SID Lookup Briggs, Bruce (Apr 06)
• Razorback Narayan Sivaramakrishnan (Apr 06)
• Unknown keyword ' ftpbounce' in rule Pachulski, Keith (Apr 06)
  • Re: Unknown keyword ' ftpbounce' in rule Robert Bilbrey (Apr 06)
    • Re: Unknown keyword ' ftpbounce' in rule Matthew Watchinski (Apr 06)
  • <Possible follow-ups>
  • RE: Unknown keyword ' ftpbounce' in rule Pachulski, Keith (Apr 06)
    • Re: Unknown keyword ' ftpbounce' in rule Matthew Watchinski (Apr 06)
      • Re: Unknown keyword ' ftpbounce' in rule Jeremy Hewlett (Apr 06)
• DNS question mosquitooth (Apr 06)
  • Re: DNS question Matt Kettler (Apr 06)
  • <Possible follow-ups>
  • Re: DNS question mosquitooth (Apr 06)
• FlexResp settings Mr. venkat (Apr 06)
• How come? mr leokenzie (Apr 06)
  • <Possible follow-ups>
  • FW: How come? mr leokenzie (Apr 07)
    • RE: How come? Patrick Harper (Apr 07)
• Unable to connect to snort server by the sensor Jitendra Gupta (Apr 07)
  • <Possible follow-ups>
  • RE: Unable to connect to snort server by the sensor Jitendra Gupta (Apr 07)
  • RE: Unable to connect to snort server by the sensor Harper, Patrick (Apr 07)
    • RE: Unable to connect to snort server by the sensor Jitendra Gupta (Apr 07)
  • RE: Unable to connect to snort server by the sensor Harper, Patrick (Apr 07)
    • RE: Unable to connect to snort server by the sensor Jitendra Gupta (Apr 08)
    • RE: Unable to connect to snort server by the sensor Jitendra Gupta (Apr 08)
• Sourcefire VRT Advisory - 2005-04-07 Nigel Houghton (Apr 07)
• RE: Can Snort monitor multiple VLANs from a single box? Escudero, Peter Louis (Apr 07)
• New snortcenter/bleeding snort rule merge John Hally (Apr 07)
  • RE: New snortcenter/bleeding snort rule merge Brian Jameson (Apr 07)
• RE: [SPAM] - RE: Unable to connect to snort server by the sensor - Email found in subject Marc Hering (Apr 07)
  • RE: [SPAM] - RE: Unable to connect to snort server by the sensor - Email found in subject Jitendra Gupta (Apr 08)
  • <Possible follow-ups>
  • RE: [SPAM] - RE: Unable to connect to snort server by the sensor - Email found in subject Marc Hering (Apr 08)
• How to start mysql prompt? mr leokenzie (Apr 07)
  • <Possible follow-ups>
  • RE: How to start mysql prompt? Harper, Patrick (Apr 08)
• Troubleshoot Snort Sensor Agent on RedHat9 Imran Imtiaz (Apr 08)
  • <Possible follow-ups>
  • RE: Troubleshoot Snort Sensor Agent on RedHat9 Snort (Apr 11)
• Running multiple Barnyards -"Say What :-0" Jacob, Raymond A Jr (Apr 08)
• BASE 1.1.2 released Kevin Johnson (Apr 08)
• Re: Where does snort write it's errors to.? Mark Sargent (Apr 09)
• ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:12): EXTERNAL_NET Mark Sargent (Apr 09)
  • Re: ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:12): EXTERNAL_NET Paul Schmehl (Apr 11)
  • <Possible follow-ups>
  • RE: ERROR: Undefined variable name: (/etc/snort/rules/bad-traffic.rules:12): EXTERNAL_NET Briggs, Bruce (Apr 09)
• http normalization mosquitooth (Apr 09)
  • <Possible follow-ups>
  • RE: http normalization Briggs, Bruce (Apr 09)
• Need help converting Snort 2.0 config to Snort 2.3 Bill Warren (Apr 11)
  • Re: Need help converting Snort 2.0 config to Snort 2.3 Senthil Prabu.S (Apr 11)
• Newbie: What does this mean? John Plate (Apr 12)
  • <Possible follow-ups>
  • RE: Newbie: What does this mean? Briggs, Bruce (Apr 12)
  • RE: Newbie: What does this mean? Briggs, Bruce (Apr 12)
  • Re: RE: Newbie: What does this mean? Sean Brown (Apr 12)
    • RE: Newbie: What does this mean? John Plate (Apr 13)
  • RE: Newbie: What does this mean? Briggs, Bruce (Apr 12)
    • Re: Newbie: What does this mean? John Plate (Apr 13)
      • RE: Newbie: What does this mean? Information Technology (Apr 13)
• newbie: http and uris Peter Schmitz (Apr 12)
  • newbie: http and uris mosquitooth (Apr 13)
    • Re: newbie: http and uris Matt Kettler (Apr 13)
• Sensor Problem Jitendra Gupta (Apr 12)
  • <Possible follow-ups>
  • RE: Sensor Problem Snort (Apr 13)
• snort 2.3.0 dies silently - running on LRP (Bering Leaf) t-wynnychenko (Apr 12)
  • <Possible follow-ups>
  • RE: snort 2.3.0 dies silently - running on LRP (Bering Leaf) Snort (Apr 12)
  • snort 2.3.0 dies silently - running on LRP (Bering Leaf) Theodore Wynnychenko (Apr 13)
• Why content and not uricontent? Holger Mense (Apr 12)
  • Re: Why content and not uricontent? Brian (Apr 13)
    • Re: Why content and not uricontent? Holger Mense (Apr 21)
      • Re: Why content and not uricontent? Matt Kettler (Apr 21)
      • Re: Why content and not uricontent? Holger Mense (Apr 21)
• Adding Snort Senors Jack A. Kanimea (Apr 13)
• BASE 1.1.2 Anthony J Placilla (Apr 13)
• IDScenter with newest Snort version Peter Rodger (Apr 13)
  • <Possible follow-ups>
  • RE: IDScenter with newest Snort version Briggs, Bruce (Apr 13)
• Base 1.1.2 not displaying any information from the database Joseph Nicholson (Apr 13)
• Winsnort help needed! Peter Rodger (Apr 13)
  • Re: Winsnort help needed! Kevin Johnson (Apr 16)
  • <Possible follow-ups>
  • RE: Winsnort help needed! Briggs, Bruce (Apr 14)
  • RE: Winsnort help needed! Peter Rodger (Apr 14)
  • RE: Winsnort help needed! Briggs, Bruce (Apr 14)
    • RE: Winsnort help needed! Michael Steele (Apr 14)
  • RE: Winsnort help needed! Peter Rodger (Apr 14)
  • RE: Winsnort help needed! Michael Steele (Apr 14)
  • RE: Winsnort help needed! Peter Rodger (Apr 15)
  • RE: Winsnort help needed! Briggs, Bruce (Apr 15)
• Adding Email Details in base Mark Sargent (Apr 13)
  • Re: Adding Email Details in base James Riden (Apr 13)
    • Re: Adding Email Details in base Mark Sargent (Apr 13)
      • Re: Adding Email Details in base Kevin Johnson (Apr 14)
• My Machine as Source Mark Sargent (Apr 13)
  • <Possible follow-ups>
  • RE: My Machine as Source Briggs, Bruce (Apr 14)
• Snort Rules Version Confusion Mark Sargent (Apr 14)
  • Re: Snort Rules Version Confusion Rich Adamson (Apr 14)
  • Re: Snort Rules Version Confusion Paul Schmehl (Apr 14)
• FlexResp Mr. venkat (Apr 14)
  • Re: FlexResp Matt Kettler (Apr 14)
• Problem getting a snort rule to work Pennell, Ronald B. (Apr 14)
  • <Possible follow-ups>
  • RE: Problem getting a snort rule to work Briggs, Bruce (Apr 14)
• My BASE did not have any alerts mr leokenzie (Apr 15)
  • Re: My BASE did not have any alerts Kevin Johnson (Apr 16)
  • RE: My BASE did not have any alerts Adam Kliarsky (Apr 16)
  • <Possible follow-ups>
  • RE: My BASE did not have any alerts Adam Kliarsky (Apr 17)
  • RE: My BASE did not have any alerts Adam Kliarsky (Apr 17)
    • management console hans (Apr 18)
      • Message not available
      • Re: management console hans (Apr 20)
      • restarting snort and archive move failed on base hans (Apr 20)
      • Re: restarting snort and archive move failed on base hans (Apr 27)
  • RE: My BASE did not have any alerts Adam Kliarsky (Apr 18)
  • RE: My BASE did not have any alerts Adam Kliarsky (Apr 20)
• nessus error mr leokenzie (Apr 15)
• suppression problem Hin (Apr 15)
• snort-2.3.2 installation on RH9 Peggy Kam (Apr 15)
• IDS Policy Manager 1.6.1 Released Jeff Dell (Apr 15)
• promiscuous mode in windows Mihai Petre (Apr 15)
  • Re: promiscuous mode in windows Matt Kettler (Apr 15)
• Snort.org servers Martin Roesch (Apr 15)
• Re snort-2.3.2 installation on RH9 Jitendra Gupta (Apr 16)
• Odd Information Kevin Smith (Apr 16)
  • RE: Odd Information Lee Clemens (Apr 17)
• Oinkmaster v1.2 released. Andreas Östling (Apr 17)
• Redirect kill -10 output ahmim (Apr 18)
  • Re: Redirect kill -10 output Dirk Geschke (Apr 18)
• help in scripts Ks, Mithun (Corporate) (Apr 18)
  • Re: help in scripts Paul Schmehl (Apr 18)
• barnyard doesn't write on postgres database Mattia (Apr 18)
  • <Possible follow-ups>
  • barnyard doesn't write on postgres database Mattia (Apr 19)
• Retransmited packets Hin (Apr 18)
  • Re: Retransmited packets Jeremy Hewlett (Apr 18)
• Snort Inline and alert logging Iñaki Rodríguez (Apr 18)
• Snort Startup Script dogbert (Apr 18)
  • Re: Snort Startup Script Paul Schmehl (Apr 18)
  • <Possible follow-ups>
  • RE: Snort Startup Script Briggs, Bruce (Apr 19)
    • RE: Snort Startup Script Paul Schmehl (Apr 19)
• missing TCP information Larry Wichman (Apr 19)
  • <Possible follow-ups>
  • Re: missing TCP information Larry Wichman (Apr 19)
• Snort Bugs snort user (Apr 19)
  • Re: Snort Bugs Paul Halliday (Apr 19)
  • Re: Snort Bugs Jeremy Hewlett (Apr 20)
  • Snort preprocessor Peggy Kam (May 02)
    • Snort preprocessors test Peggy Kam (May 03)
  • <Possible follow-ups>
  • RE: Snort Bugs Arseneault, Thomas (HQP) (Apr 20)
• New SFS Version Released Orit Vidas (Apr 19)
• multiple snort instances and snortcenter John Hally (Apr 20)
  • Re: multiple snort instances and snortcenter Wes Young (Apr 20)
  • RE: multiple snort instances and snortcenter Brian Jameson (Apr 21)
• Please Help me! How configure a span port in switch Cisco 6500 federico . juarez (Apr 20)
• Please Help me! How configure span port to work with encapsulation trunks federico . juarez (Apr 20)
  • Re: Please Help me! How configure span port to work with encapsulation trunks Matt Kettler (Apr 20)
• RE: management console Briggs, Bruce (Apr 20)
  • Re: management console hans (Apr 21)
  • <Possible follow-ups>
  • RE: management console Briggs, Bruce (Apr 22)
• FATAL ERROR: FLOWBITS ERROR: The number of flowbit IDs in the current ruleset exceed the maximum number of IDs that are allowed. Russell Fulton (Apr 21)
  • Re: FATAL ERROR: FLOWBITS ERROR: The number of flowbit IDs in the current ruleset exceed the maximum number of IDs that are allowed. Frank Knobbe (Apr 21)
• "Best of breed" tools for Snort Tristan RHODES (Apr 22)
  • Re: "Best of breed" tools for Snort Paul Schmehl (Apr 22)
• Approximate bandwidth performance running Snort Tristan RHODES (Apr 22)
  • Re: Approximate bandwidth performance running Snort Matt Kettler (Apr 22)
  • <Possible follow-ups>
  • RE: Approximate bandwidth performance running Snort Arseneault, Thomas (HQP) (Apr 22)
• IDScenter David Naylor (Apr 22)
• mysql error Bilal Dar (Apr 23)
  • RE: mysql error Patrick Harper (Apr 23)
• Snort 2.3.3 available Jeremy Hewlett (Apr 23)
  • Re: Snort 2.3.3 available Eric Maheo (Apr 24)
    • Re: Snort 2.3.3 available James Riden (Apr 26)
  • snort 2.3.3 --enable-flexresp hans (Apr 25)
    • Re: snort 2.3.3 --enable-flexresp John C. Silvia (Apr 25)
      • Re: snort 2.3.3 --enable-flexresp hans (Apr 27)
      • Re: snort 2.3.3 --enable-flexresp hans (Apr 27)
    • Re: snort 2.3.3 --enable-flexresp Matt Kettler (Apr 25)
      • Re: snort 2.3.3 --enable-flexresp Matt Kettler (Apr 25)
      • Re: snort 2.3.3 --enable-flexresp Rich Adamson (Apr 26)
      • Re: snort 2.3.3 --enable-flexresp hans (Apr 27)
    • Re: snort 2.3.3 --enable-flexresp hans (May 01)
      • showing payload hans (May 08)
  • <Possible follow-ups>
  • RE: Snort 2.3.3 available Harper, Patrick (Apr 26)
• Connection failed from Windows sensor to Linux Snort server Jitendra Gupta (Apr 25)
  • <Possible follow-ups>
  • Connection failed from Windows sensor to Linux Snort server Jitendra Gupta (Apr 26)
  • Re: Connection failed from Windows sensor to Linux Snort server Jitendra Gupta (Apr 26)
• (no subject) Patterson, Mike (Apr 25)
  • Re: (no subject) Paul Schmehl (Apr 26)
  • Re: (no subject) Matt Kettler (Apr 26)
• RE: SnortALog error Patterson, Mike (Apr 25)
  • Re: RE: SnortALog error Matt Kettler (Apr 25)
    • Re: RE: SnortALog error jeremy . chartier (May 10)
• Strange PATH MTU Traffic Joshua Berry (Apr 26)
  • <Possible follow-ups>
  • RE: Strange PATH MTU Traffic larosa_vjay (Apr 26)
  • RE: Strange PATH MTU Traffic larosa_vjay (Apr 26)
• New OSSRC Mailing List Alex Kirk (Apr 26)
  • RE: [Snort-sigs] New OSSRC Mailing List Jeff Dell (Apr 26)
    • Re: [Snort-sigs] New OSSRC Mailing List Alex Kirk (Apr 26)
• Script to Parse Snort Rules Jeff Heckart (Apr 26)
• Snort Testing tools Narayan Sivaramakrishnan (Apr 26)
  • RE: Snort Testing tools Julius Turk (Apr 26)
  • RE: Snort Testing tools Jeff Dell (Apr 26)
• easy update question Jason Benway (Apr 26)
  • Re: easy update question Kevin Johnson (Apr 26)
  • <Possible follow-ups>
  • RE: easy update question Briggs, Bruce (Apr 26)
• Interesting snort + mysql issue (kind of ODD) James Lay (Apr 26)
• Rogue system detection John Hally (Apr 26)
  • RE: Rogue system detection Bob Konigsberg (Apr 26)
  • Re: Rogue system detection Harry Hoffman (Apr 26)
  • Re: Rogue system detection Skip Carter (Apr 26)
  • <Possible follow-ups>
  • Re: Rogue system detection Skip Carter (Apr 27)
• software for analyzing alerts Narayan Sivaramakrishnan (Apr 26)
  • <Possible follow-ups>
  • Re: software for analyzing alerts Tristan RHODES (Apr 26)
• adding another sensor Jason Benway (Apr 26)
  • Re: adding another sensor James Riden (Apr 26)
    • Message not available
      • Re: adding another sensor Jason Benway (Apr 27)
• Barnyard documentation Tristan RHODES (Apr 26)
  • Re: Barnyard documentation Paul Schmehl (Apr 26)
• Fedora Core Linux 3 -- Snort IDS Pradeep Aswani (Apr 26)
  • RE: Fedora Core Linux 3 -- Snort IDS Patrick Harper (Apr 26)
    • RE: Fedora Core Linux 3 -- Snort IDS Pradeep Aswani (Apr 27)
      • Re: Fedora Core Linux 3 -- Snort IDS Alejandro Flores (Apr 27)
  • Re: Fedora Core Linux 3 -- Snort IDS Gregory D Hough (Apr 28)
  • <Possible follow-ups>
  • RE: Fedora Core Linux 3 -- Snort IDS Esler, Joel - Contractor (Apr 27)
    • RE: Fedora Core Linux 3 -- Snort IDS Pradeep Aswani (Apr 27)
• Snort on two load-balanced links (using SPAN on a Cisco 6500) Tristan RHODES (Apr 27)
• permissions denied error for alert log on new snort install Jason Benway (Apr 27)
• Syslog Priority Classification Peter Barton (Apr 27)
  • <Possible follow-ups>
  • RE: Syslog Priority Classification Esler, Joel - Contractor (Apr 28)
• RE: [SPAM] - RE: Fedora Core Linux 3 -- Snort IDS - Email found in subject Marc Hering (Apr 27)
  • RE: [SPAM] - RE: Fedora Core Linux 3 -- Snort IDS - Email found in subject Pradeep Aswani (Apr 27)
    • RE: [SPAM] - RE: Fedora Core Linux 3 -- Snort IDS - Email found in subject Paul Schmehl (Apr 28)
      • RE: [SPAM] - RE: Fedora Core Linux 3 -- Snort IDS - Email found in subject Paul Schmehl (Apr 28)
• Testing Snort with Blade IDS Informer Holger Mense (Apr 27)
  • Re: Testing Snort with Blade IDS Informer Paul Schmehl (Apr 27)
    • Re: Testing Snort with Blade IDS Informer Holger Mense (Apr 27)
  • Re: Testing Snort with Blade IDS Informer Holger Mense (Apr 27)
• Snort 2.3.3 and mysql logging Adam Kennedy (Apr 27)
  • Re: Snort 2.3.3 and mysql logging Matt Jonkman (Apr 29)
    • Re: Snort 2.3.3 and mysql logging Adam Kennedy (Apr 28)
• W32/Allim worm Biswas, Proneet (Apr 28)
  • <Possible follow-ups>
  • RE: W32/Allim worm Esler, Joel - Contractor (Apr 28)
• snort rules Alexander Economou (Apr 28)
  • Re: snort rules Matt Kettler (Apr 28)
    • Re: snort rules Paul Schmehl (Apr 28)
      • Re: snort rules Matt Kettler (Apr 28)
  • <Possible follow-ups>
  • Re: snort rules Tristan RHODES (Apr 28)
• Re:Snort2.3 Installation Problems Amper Sand (Apr 29)
• Updating two snort directories with oinkmaster v1.2? Rich Adamson (Apr 29)
• Problems with socket slice (Apr 29)
  • Re: Problems with socket Anthony J Placilla (Apr 29)
    • Re[2]: Problems with socket slice (Apr 29)
    • Re[2]: Problems with socket slice (Apr 29)
  • Re: Problems with socket Paul Schmehl (Apr 29)
    • Re[2]: Problems with socket slice (Apr 29)
  • <Possible follow-ups>
  • RE: Re[2]: Problems with socket Esler, Joel - Contractor (Apr 29)
  • Re[4]: Problems with socket slice (Apr 29)
    • Re: Problems with socket jacques brierre (Apr 29)
      • Re[2]: Problems with socket slice (Apr 29)
  • Problems with socket slice (Apr 29)
  • Problems with socket slice (Apr 29)
• Barnyard and multiple snort instances John Hally (Apr 29)
  • Re: Barnyard and multiple snort instances Alejandro Flores (Apr 29)
• Base 1.1.2 & Color code by Priority Peter Barton (Apr 29)
  • Re: Base 1.1.2 & Color code by Priority Kevin Johnson (Apr 29)
• Problem with socket slice (Apr 29)
  • Re: Problem with socket Anthony J Placilla (Apr 29)
    • Re[2]: Problem with socket slice (Apr 29)
      • Re: Re[2]: Problem with socket Paul Schmehl (Apr 29)
      • Re: Re[2]: Problem with socket Anthony J Placilla (Apr 29)
      • SnortSAM + Snort 2.3.3 Xavier Cabrera (May 03)
      • Re: SnortSAM + Snort 2.3.3 Frank Knobbe (May 03)
      • Re: SnortSAM + Snort 2.3.3 Xavier Cabrera (May 04)
  • <Possible follow-ups>
  • Re: Problem with socket John Creegan (Apr 29)
  • Problem with socket slice (Apr 30)
• BASE development list is public! Kevin Johnson (May 02)
• RHEL 4 / CentOS 4 papers released Patrick Harper (May 02)
  • RE: RHEL 4 / CentOS 4 papers released Patrick Harper (May 02)
• base on debian NetExpress (May 02)
• BASE shows blank page USO (May 03)
  • Re: BASE shows blank page USO (May 03)
  • Re: BASE shows blank page USO (May 03)
    • Re: BASE shows blank page Kevin Johnson (May 03)
  • RE: BASE shows blank page Michael Steele (May 03)
• New User Group in Chicago - Meeting on 6/2 Jennifer Steffens (May 03)
  • <Possible follow-ups>
  • RE: New User Group in Chicago - Meeting on 6/2 McCash, John (May 11)
    • Re: New User Group in Chicago - Meeting on 6/2 Jennifer Steffens (May 11)
    • Re: New User Group in Chicago - Meeting Changed to 6/9 Jennifer Steffens (May 11)
• Problem installing Snort 2.3.3 Wayne Ho (May 03)
  • Re: Problem installing Snort 2.3.3 Senthil Prabu.S (May 03)
  • RE: Problem installing Snort 2.3.3 M. Shirk (May 04)
  • <Possible follow-ups>
  • Re: Problem installing Snort 2.3.3 Senthil Prabu.S (May 04)
• Re: [Snort-sigs] Possible improvements to pop3 rules. Jeff Kell (May 03)
  • <Possible follow-ups>
  • RE: Re: [Snort-sigs] Possible improvements to pop3 rules. Esler, Joel - Contractor (May 04)
• remote snort sensor Raynaud, Francois (May 04)
  • Re: remote snort sensor Xavier Cabrera (May 04)
  • <Possible follow-ups>
  • RE: remote snort sensor Raynaud, Francois (May 04)
    • ClamAV + Snort Xavier Cabrera (May 04)
      • ClamAV + Snort Xavier Cabrera (May 04)
      • Message not available
      • Re: ClamAV + Snort Xavier Cabrera (May 04)
      • Message not available
      • Re: ClamAV + Snort Xavier Cabrera (May 04)
• IP address format in database nadias (May 04)
  • Re: IP address format in database Wes Young (May 05)
    • Stream/Packet Capture with Snort Paul Melson (May 09)
      • Re: Stream/Packet Capture with Snort Marc Norton (May 11)
      • RE: Stream/Packet Capture with Snort Paul Melson (May 10)
  • Re: IP address format in database Adam Pointon (May 10)
• How to Test Snort Rules jsa hssh (May 05)
• Setting snort in a network Narayan Sivaramakrishnan (May 05)
  • <Possible follow-ups>
  • RE: Setting snort in a network Briggs, Bruce (May 05)
• Is possible to listen on DialUp interface? Bryce Stenberg (May 08)
• snort inline configuration problems !!! Pradeep Aswani (May 09)
  • Re: snort inline configuration problems !!! Will Metcalf (May 11)
• CPU usage! mahboobeh soleimani (May 09)
  • Re: CPU usage! Wes Young (May 09)
  • <Possible follow-ups>
  • RE: CPU usage! Esler, Joel - Contractor (May 09)
• Snort Inline on 64-bit architecture lmarcilly (May 10)
  • Re: Snort Inline on 64-bit architecture Dmitry Melekhov (May 10)
  • <Possible follow-ups>
  • Re: Snort Inline on 64-bit architecture George Laiacona (May 10)
• Snort ClamAV for 2.3.3 Matt Jonkman (May 10)
  • Re: [Snort-sigs] Snort ClamAV for 2.3.3 Jason Haar (May 09)
    • Re: Re: [Snort-sigs] Snort ClamAV for 2.3.3 Xavier Cabrera (May 09)
    • Re: [Snort-sigs] Snort ClamAV for 2.3.3 Erik Fichtner (May 10)
    • Re: [Snort-sigs] Snort ClamAV for 2.3.3 Will Metcalf (May 12)
      • Re: [Snort-sigs] Snort ClamAV for 2.3.3 Jason Haar (May 09)
• Missing Data - ACID Andrew Lacey (May 10)
• RE: Stream/Packet Capture with Snort Paul Melson (May 10)
  • <Possible follow-ups>
  • Re: Stream/Packet Capture with Snort Richard Bejtlich (May 11)
  • Re: Stream/Packet Capture with Snort Richard Bejtlich (May 11)
    • Re: Stream/Packet Capture with Snort Richard Bejtlich (May 11)
• Snorting OPTIONS method Gregory D Hough (May 10)
  • RE: Snorting OPTIONS method Paul Melson (May 10)
    • Re: Snorting OPTIONS method Gregory D Hough (May 10)
• perfmonitor preprocessor John Hally (May 10)
  • <Possible follow-ups>
  • RE: perfmonitor preprocessor Basselgia, Barry A Mr (NAF Atsugi) (May 10)
• Snort on XP SP2 W/ MSSQL James Bruce (May 10)
  • <Possible follow-ups>
  • RE: Snort on XP SP2 W/ MSSQL Briggs, Bruce (May 10)
    • RE: Snort on XP SP2 W/ MSSQL Michael Steele (May 10)
  • Snort on XP SP2 W/ MSSQL James Bruce (May 20)
• Snort install "manual" in french fathi.engineer (May 11)
• Snort Preprocessors Sheppard Martin Contr AFRL/IFGA (May 11)
• Snort v2.3.3 Win32 is now up Jeremy Hewlett (May 11)
• Snort users meeting in Chicago Stef (May 11)
  • Re: Snort users meeting in Chicago Jennifer Steffens (May 11)
  • <Possible follow-ups>
  • Re: Snort users meeting in Chicago Nigel Houghton (May 11)
    • Re: Re: Snort users meeting in Chicago Stef (May 11)
• Simple Snort Rule Help Pennell, Ronald B. (May 11)
  • Re: Simple Snort Rule Help Matt Kettler (May 11)
• Issue with ClamAV preprocessor in snort-2.3.3 Jason Haar (May 11)
  • Re: Issue with ClamAV preprocessor in snort-2.3.3 Victor Julien (May 11)
  • Re: Issue with ClamAV preprocessor in snort-2.3.3 Will Metcalf (May 11)
    • Re: Issue with ClamAV preprocessor in snort-2.3.3 Jason Haar (May 12)
• logrotate in mysql Ks, Mithun (Corporate) (May 12)
• bpf filter Dominic (May 12)
  • Re: bpf filter Matt Kettler (May 12)
  • <Possible follow-ups>
  • RE: bpf filter Briggs, Bruce (May 12)
• Snort rss newsfeed Paul Schmehl (May 12)
• sensor drops packets ? Juan Fernandez (May 15)
  • Re: sensor drops packets ? Matt Kettler (May 16)
• Snort IDMEF Plugin 2.0.0alpha released Sandro Poppi (May 15)
• Query on ClamAV preprocessor in snort-2.3.3 Jason Haar (May 15)
  • Re: Query on ClamAV preprocessor in snort-2.3.3 Will Metcalf (May 15)
    • Re: Query on ClamAV preprocessor in snort-2.3.3 Jason Haar (May 15)
• Log snort alerts to a specific file Bahya NASSR EDDINE (May 16)
  • Re: Log snort alerts to a specific file Daniel Purcell (May 16)
  • <Possible follow-ups>
  • Re: Log snort alerts to a specific file Bahya NASSR EDDINE (May 16)
• OT: monitoring specific traffic Rich Adamson (May 16)
  • RE: OT: monitoring specific traffic Patrick Harper (May 16)
  • <Possible follow-ups>
  • RE: OT: monitoring specific traffic Basselgia, Barry A Mr (NAF Atsugi) (May 16)
• Smoe questions about Snort & ACID ! mahboobeh soleimani (May 16)
  • Re: Smoe questions about Snort & ACID ! James Riden (May 16)
    • Re: Smoe questions about Snort & ACID ! Joel Esler (May 19)
  • <Possible follow-ups>
  • RE: Smoe questions about Snort & ACID ! Briggs, Bruce (May 17)
• Log everything in NIDS mode (yet not all packets are getting logged) Bryan Leavitt (May 17)
• Re: [Snort-sigs] Suggestions for new attack response rules Jennifer Steffens (May 17)
• Snort User Group at LinuxWorld NY Jennifer Steffens (May 17)
• Question on the NetBIOS rules and port 445 in general Kevin Smith (May 18)
  • <Possible follow-ups>
  • Re: Question on the NetBIOS rules and port 445 in general Kevin Smith (May 18)
    • Re: Question on the NetBIOS rules and port 445 in general Matt Kettler (May 18)
• uricontent.... Jeff Heckart (May 18)
  • Re: uricontent.... Brian (May 18)
• snortcenter2 and rule update email John Hally (May 18)
  • Re: snortcenter2 and rule update email Wes Young (May 18)
• "UDP flood rules" Dan Mahoney, System Admin (May 18)
• Calling all Bay Area Snort Users rich (May 19)
  • <Possible follow-ups>
  • Re: Calling all Bay Area Snort Users tfulton9909 (May 19)
• Unsock Geries Handal (May 19)
• Winsnort Mattia (May 19)
  • RE: Winsnort Michael Steele (May 19)
  • <Possible follow-ups>
  • Winsnort Mattia (May 20)
    • RE: Winsnort Michael Steele (May 20)
      • Re: Winsnort Jeremy Hewlett (May 20)
      • RE: Winsnort Michael Steele (May 20)
• problem with restartsnort and ipcop 1.4.4 Mattia (May 19)
• Periodic DB Pruning Dan Mahoney, System Admin (May 20)
  • RE: Periodic DB Pruning Patrick Harper (May 20)
• Again about Winsnort Mattia (May 20)
• Why does Snort restart? mahboobeh soleimani (May 21)
  • Re: Why does Snort restart? Paul Schmehl (May 21)
  • <Possible follow-ups>
  • Re: Why does Snort restart? Theodore Stout (May 21)
    • Re: Why does Snort restart? Mohamed Eldesoky (May 22)
• Query Mukesh (May 22)
  • RE: Query Patrick Harper (May 23)
  • <Possible follow-ups>
  • Query Mukesh (May 31)
  • Query Mukesh (May 31)
    • Re: Query Joel Esler (Jun 01)
• BASE log in Narayan Sivaramakrishnan (May 23)
  • Re: BASE log in Kevin Johnson (May 23)
• Does BASE read output from sfportscan Bill Warren (May 23)
• snorcenter2, Base, bleeding rules and sid-msg.map John Hally (May 23)
  • Re: snorcenter2, Base, bleeding rules and sid-msg.map Wes Young (May 23)
    • Re: snorcenter2, Base, bleeding rules and sid-msg.map Joel Esler (May 23)
      • Re: snorcenter2, Base, bleeding rules and sid-msg.map Wes Young (May 24)
• snortcenter include commands East, Bill (May 23)
  • Re: snortcenter include commands Jason Alexander (May 24)
  • <Possible follow-ups>
  • RE: snortcenter include commands East, Bill (May 24)
    • Re: snortcenter include commands Joel Esler (May 24)
• Acceptable packet loss? Byron Pezan (May 23)
  • Re: Acceptable packet loss? Matt Kettler (May 23)
    • Re: Acceptable packet loss? Joel Esler (May 23)
  • Re: Acceptable packet loss? byte_jump (May 23)
  • <Possible follow-ups>
  • RE: Acceptable packet loss? Biswas, Proneet (May 24)
• Minimal hardware specification for a 10Mbps network Julien MEDINA (May 24)
• Passive Ethernet Tap Rudi Starcevic (May 24)
• SnortSMS Anthony J Placilla (May 24)
  • Re: SnortSMS M Raju (May 24)
    • RE: SnortSMS Eric Hines (May 24)
• Wacky perfmonitor numbers Gary Richardson (May 24)
  • Re: Wacky perfmonitor numbers Jeremy Hewlett (May 24)
    • Re: Wacky perfmonitor numbers Gary Richardson (May 25)
  • <Possible follow-ups>
  • RE: Wacky perfmonitor numbers Briggs, Bruce (May 24)
    • Re: Wacky perfmonitor numbers Gary Richardson (May 24)
      • Message not available
      • Re: Wacky perfmonitor numbers Gary Richardson (May 24)
      • Re: Wacky perfmonitor numbers Joel Esler (May 24)
      • Re: Wacky perfmonitor numbers Gary Richardson (May 24)
• Snort pass rules... PlanAlpha (May 24)
  • Re: Snort pass rules... Matt Kettler (May 24)
• Alerts of the ICMP relationship with smtp connection? Paulo (May 24)
  • Re: Alerts of the ICMP relationship with smtp connection? Matt Jonkman (May 24)
  • <Possible follow-ups>
  • Re: Alerts of the ICMP relationship with smtp connection? Paulo (May 24)
  • Re: Alerts of the ICMP relationship with smtp connection? Paulo (May 30)
    • Re: Alerts of the ICMP relationship with smtp connection? Frank Knobbe (May 31)
      • Re: Alerts of the ICMP relationship with smtp connection? Paulo (Jun 06)
  • RE: Alerts of the ICMP relationship with smtp connection? Paulo (Jun 07)
  • RE: Alerts of the ICMP relationship with smtp connection? Briggs, Bruce (Jun 07)
    • RE: Alerts of the ICMP relationship with smtp connection? Paulo (Jun 07)
  • RE: Alerts of the ICMP relationship with smtp connection? Briggs, Bruce (Jun 07)
    • Snort Inline again.... Xavier Cabrera (Jun 07)
    • RE: Alerts of the ICMP relationship with smtp connection? Paulo (Jun 08)
      • RE: Alerts of the ICMP relationship with smtp connection? Paulo (Jun 10)
• writing virus signatures Siddhartha Jain (May 25)
  • Re: writing virus signatures Will Metcalf (May 25)
    • Re: writing virus signatures Siddhartha Jain (May 25)
      • Re: writing virus signatures Will Metcalf (May 25)
      • Re: writing virus signatures Siddhartha Jain (May 25)
• Paper Snort 2 on Windows 2003 Sunil Vakharia (May 25)
• Any way to change permissions of the unified output files? Rob Baxter (May 25)
  • Re: Any way to change permissions of the unified output files? Bamm Visscher (May 25)
• BASE Updates and the way forward Joel Esler (May 25)
  • Re: BASE Updates and the way forward Joel Esler (May 27)
• Query abt Mysql Mukesh (May 25)
  • Re: Query abt Mysql Senthil Prabu.S (May 26)
  • Re: Query abt Mysql slice (May 26)
• IDS Policy Manager 1.6.2 Released Jeff Dell (May 26)
• sid-msg.map question Rich Adamson (May 26)
  • Re: sid-msg.map question Jeremy Hewlett (May 27)
  • Re: sid-msg.map question Joel Esler (May 28)
• very odd ! David Naylor (May 26)
  • Re: very odd ! Matt Kettler (May 26)
  • Re: very odd ! Kevin Reiter (May 26)
  • Re: very odd ! Kevin Reiter (May 27)
  • <Possible follow-ups>
  • RE: very odd ! David Naylor (May 26)
• sfportscan JJ Truax (May 26)
  • <Possible follow-ups>
  • sfportscan JJ Truax (May 26)
    • Re: sfportscan Bryan Leavitt (May 26)
      • Re: sfportscan JJ Truax (May 26)
• Query about mysql Mukesh (May 27)
  • Re: Query about mysql Guillaume Arcas (May 27)
    • Re: Query about mysql Joel Esler (May 27)
  • Re: Query about mysql Senthil Prabu.S (May 27)
• RE: snort and ODBC McCash, John (May 27)
  • RE: snort and ODBC Jonathan_Hays (May 27)
• complicated snort rule interpretation. Rong-Tai Liu (May 27)
  • Re: complicated snort rule interpretation. Matt Kettler (May 27)
• Web Traffic Analysis with Snort Mark Maxey (May 28)
• RE: Snort-users digest, Vol 1 #5138 - 1 msg Dennis Henderson (May 31)
• HTTP-Inspect / Stream4 Reassembly question Daniel Purcell (May 31)
  • Re: HTTP-Inspect / Stream4 Reassembly question Will Metcalf (May 31)
    • Re: HTTP-Inspect / Stream4 Reassembly question Daniel Purcell (May 31)
• Snort startup richard (May 31)
  • Re: Snort startup Jeff Kell (May 31)
  • Re: Snort startup Dominik Gehl (May 31)
    • Re: Snort startup richard (May 31)
  • <Possible follow-ups>
  • RE: Snort startup Briggs, Bruce (May 31)
    • Re: Snort startup Mohamed Eldesoky (Jun 05)
      • Re: Snort startup Paul Schmehl (Jun 05)
• RE: Why snort doesn't log any packet? Smith, Ryan (Jun 01)
  • RE: Why snort doesn't log any packet? Michael Steele (Jun 01)
  • <Possible follow-ups>
  • Why snort doesn't log any packet? R. Thamrin (Jun 01)
• error accessing snort database Sergio Carrilho (Jun 02)
  • Re: error accessing snort database Joel Esler (Jun 02)
• pid file creation Senthil Prabu.S (Jun 02)
• packet modifications not working eboehnlein (Jun 02)
  • Re: packet modifications not working Joel Esler (Jun 02)
  • Re: packet modifications not working Will Metcalf (Jun 02)
• problem with snort... tommy garsia (Jun 03)
  • RE: problem with snort... Patrick Harper (Jun 04)
  • <Possible follow-ups>
  • RE: problem with snort... Patrick Harper (Jun 04)
    • RE: problem with snort... Eric Maheo (Jun 04)
• Barnyard 0.2.0 Patch Colin Grady (Jun 04)
• Is Sourcefire/IDC's presentation, in Chicago, still "on" for June 9th? Stef (Jun 06)
  • Re: Is Sourcefire/IDC's presentation, in Chicago, still "on" for June 9th? Jason (Jun 06)
  • <Possible follow-ups>
  • Re: Is Sourcefire/IDC's presentation, in Chicago, still "on" for June 9th? Nigel Houghton (Jun 06)
• UDP/ICMP Pseudo Session Tracking (like Argus) Joshua Berry (Jun 06)
• acid/base recovery John Hally (Jun 06)
  • Re: acid/base recovery Dominik Gehl (Jun 06)
    • Re: acid/base recovery Joel Esler (Jun 06)
  • <Possible follow-ups>
  • RE: acid/base recovery John Hally (Jun 06)
• ERROR: Suppress-Parse: incorrect tracking type Aaron Giuoco (Jun 06)
• Base Graphs... Narayan Sivaramakrishnan (Jun 06)
  • Snort Inline Xavier Cabrera (Jun 06)
    • Re: Snort Inline Victor Julien (Jun 06)
      • Re: Snort Inline Xavier Cabrera (Jun 06)
      • Re: Snort Inline Will Metcalf (Jun 06)
      • Re: Snort Inline Xavier Cabrera (Jun 06)
      • Re: Snort Inline Will Metcalf (Jun 06)
      • Re: Snort Inline Xavier Cabrera (Jun 06)
    • Re: Snort Inline Matt Kettler (Jun 06)
  • Re: Base Graphs... Dominik Gehl (Jun 06)
    • Re: Base Graphs... Joel Esler (Jun 07)
  • <Possible follow-ups>
  • RE: Base Graphs... Briggs, Bruce (Jun 07)
• TCP PORTSCAN - log all packets? Daniel Rocha (Jun 06)
  • TCP PORTSCAN - log all packets? Daniel Rocha (Jun 06)
  • Re: TCP PORTSCAN - log all packets? Daniel Rocha (Jun 06)
    • Re: TCP PORTSCAN - log all packets? Daniel Rocha (Jun 06)
      • Re: Re: TCP PORTSCAN - log all packets? Joel Esler (Jun 08)
  • <Possible follow-ups>
  • TCP PORTSCAN - log all packets? Daniel Rocha (Jun 06)
    • Re: TCP PORTSCAN - log all packets? Matt Kettler (Jun 06)
• create alert "full" log file from MySQL Nicky 69 (Jun 06)
• Paul Clements is out of the office. Paul . Clements (Jun 06)
• Windows based IDS other then EagleX jsa hssh (Jun 06)
• Re: Notification d'état de remise (échec) Daniel Rocha (Jun 06)
  • Re: Re: Notification d'état de remise (échec) Joel Esler (Jun 07)
• running snort as packet logger and nids simultaneously Metal Gear (Jun 07)
  • Re: running snort as packet logger and nids simultaneously Joel Esler (Jun 07)
    • Re: running snort as packet logger and nids simultaneously Metal Gear (Jun 07)
      • Re: running snort as packet logger and nids simultaneously Joel Esler (Jun 07)
      • Re: running snort as packet logger and nids simultaneously Metal Gear (Jun 07)
      • Message not available
      • Message not available
      • Re: running snort as packet logger and nids simultaneously Metal Gear (Jun 07)
      • Re: running snort as packet logger and nids simultaneously Bamm Visscher (Jun 07)
      • Message not available
      • Re: running snort as packet logger and nids simultaneously Metal Gear (Jun 08)
• Reminder: Chicago Snort User Group Meeting - 6/9/05 Jennifer Steffens (Jun 07)
  • Anyone has rules to detect: W32/Mytob.br@MM Snortty (Jun 07)
    • Re: Anyone has rules to detect: W32/Mytob.br@MM Dave C (Jun 07)
• PortScan resets. Eduardo E. Silva (Jun 07)
• Free Inodes Dan Mahoney, System Admin (Jun 07)
  • Re: Free Inodes Jason (Jun 07)
    • Re: Free Inodes Dan Mahoney, System Admin (Jun 08)
      • Re: Free Inodes Matt Kettler (Jun 08)
  • Re: Free Inodes J-H Johansen (Jun 08)
  • <Possible follow-ups>
  • Re: Free Inodes Nigel Houghton (Jun 08)
    • Re: Re: Free Inodes Matt Kettler (Jun 09)
• Re: Snort-users: PortScan resets Richard Bejtlich (Jun 08)
• Iptables and snort inline lmarcilly (Jun 09)
  • Re: Iptables and snort inline Victor Julien (Jun 09)
• Help w/ Bleeding Snort Rules on XP James Bruce (Jun 09)
  • RE: Help w/ Bleeding Snort Rules on XP Michael Steele (Jun 09)
  • <Possible follow-ups>
  • RE: Help w/ Bleeding Snort Rules on XP James Bruce (Jun 10)
• PXESnort Chas Tomlin (Jun 10)
• Unrecognized attack patterns against IIS Michael Scheidell (Jun 11)
  • Re: Unrecognized attack patterns against IIS TPanaitescu (Jun 11)
  • <Possible follow-ups>
  • FW: Unrecognized attack patterns against IIS Michael Scheidell (Jun 11)
  • Re: Unrecognized attack patterns against IIS TPanaitescu (Jun 11)
• Port scans detected behind Firewall? James Bruce (Jun 13)
  • Re: Port scans detected behind Firewall? Matt Kettler (Jun 13)
• BASE 1.1.3 release Kevin Johnson (Jun 13)
  • Re: BASE 1.1.3 release jensen galan (Jun 14)
    • Re: BASE 1.1.3 release Joel Esler (Jun 14)
    • Re: BASE 1.1.3 release Kevin Johnson (Jun 14)
      • Re: BASE 1.1.3 release jensen galan (Jun 15)
  • <Possible follow-ups>
  • RE: BASE 1.1.3 release Michael Scheidell (Jun 18)
• Hi Srinivas Katta (Jun 14)
  • Re: Hi Joel Esler (Jun 14)
  • <Possible follow-ups>
  • RE: Hi Srinivas Katta (Jun 14)
    • Re: Hi Matt Kettler (Jun 14)
    • Re: Hi Senthil Prabu.S (Jun 14)
  • RE: Hi Srinivas Katta (Jun 14)
  • RE: Hi Pachulski, Keith (Jun 15)
    • Re: Hi Joel Esler (Jun 14)
      • Re: Hi Matt Kettler (Jun 14)
      • Re: Hi Joel Esler (Jun 14)
  • RE: Hi Harper, Patrick (Jun 15)
  • RE: Hi Srinivas Katta (Jun 15)
• RE: Spam:Re: Hi Ron Jenkins (Jun 14)
• X11 Rules: problem with snort-inline Flora.francesco (Jun 15)
• False positive rate in sfportscan Bjarte Malmedal (Jun 15)
• difficulty starting sensor Terry Morreale (Jun 15)
• Port scans behind Firewall? James Bruce (Jun 15)
  • RE: Port scans behind Firewall? Paul Melson (Jun 15)
• pcre usage for inline Joel Esler (Jun 15)
  • RE: pcre usage for inline Jeff Dell (Jun 15)
    • Re: pcre usage for inline Joel Esler (Jun 15)
• RE: RE: [Snort-users] pcre usage for inline Joshua Berry (Jun 15)
  • RE: RE: [Snort-users] pcre usage for inline Jeff Dell (Jun 15)
• Loophole and logmein Ron Jenkins (Jun 16)
• Constructing passive network tap Christian Volk (Jun 16)
• [http-inspect/SPNEGO] Gregory D Hough (Jun 16)
  • Re: [http-inspect/SPNEGO] Gregory D Hough (Jun 20)
• Snort on Win98 Bogdan (Jun 16)
• Strange snort behaviour, failure to log all traffic. hulver (Jun 17)
• Strange snort behaviour, failure to log all traffic - Solved. hulver (Jun 17)
• Preproc tuning Joel Esler (Jun 17)
  • Re: Preproc tuning snort user (Jun 17)
    • Re: Preproc tuning Joel Esler (Jun 17)
      • Re: Preproc tuning snort user (Jun 17)
      • Re: Preproc tuning Joel Esler (Jun 17)
      • Re: Preproc tuning Mohamed Eldesoky (Jun 19)
  • Re: Preproc tuning Martin Roesch (Jun 28)
• trouble with creating "schema" table in mysql5 Aleem Mawji (Jun 17)
  • Re: trouble with creating "schema" table in mysql5 Wes Young (Jun 20)
• Re: Snort-users digest, Vol 1 #5166 - 1 msg Nick Plante (Jun 18)
• snort-mysql sensors Mohamed Eldesoky (Jun 21)
  • Re: snort-mysql sensors Joel Esler (Jun 21)
  • <Possible follow-ups>
  • RE: snort-mysql sensors Miner, Jonathan W (CSC) (US SSA) (Jun 21)
    • Re: snort-mysql sensors Will Metcalf (Jun 21)
      • Re: snort-mysql sensors Mohamed Eldesoky (Jun 22)
• Snort Rule to capture outbound email traffic Pennell, Ronald B. (Jun 21)
  • Re: Snort Rule to capture outbound email traffic Frank Knobbe (Jun 21)
• IDS deployment scenarios David Naylor (Jun 21)
• OT: Recording IM sessions Chris Lyon (Jun 21)
  • Re: OT: Recording IM sessions Joel Esler (Jun 21)
    • Re: OT: Recording IM sessions Chris Lyon (Jun 21)
    • Re: OT: Recording IM sessions Harry Hoffman (Jun 21)
    • Re: OT: Recording IM sessions M. Shirk (Jun 21)
  • Re: OT: Recording IM sessions Alex Butcher, ISC/ISYS (Jun 22)
  • <Possible follow-ups>
  • RE: OT: Recording IM sessions Bristol, Gary L. (Jun 21)
    • Re: OT: Recording IM sessions Chris Lyon (Jun 22)
  • RE: OT: Recording IM sessions Paul Melson (Jun 22)
  • RE: OT: Recording IM sessions Schott, Erik J Mr ANOSC/FCBS (Jun 22)
    • Message not available
      • Re: OT: Recording IM sessions Chris Lyon (Jun 22)
    • Re: OT: Recording IM sessions Jason (Jun 22)
• TRACE disable problem with AIX ian acces (Jun 21)
• (snort_decoder) Unknown Datagram decoding problem! Mohamed Eldesoky (Jun 22)
• Errors with simultaneous outputs in database Muad Dib (Jun 22)
  • <Possible follow-ups>
  • Re: Errors with simultaneous outputs in database Muad Dib (Jun 23)
  • Re: Errors with simultaneous outputs in database Muad Dib (Jun 24)
• Snort book Willy, Andrew (Jun 22)
  • Re: Snort book Joel Esler (Jun 22)
  • Re: Snort book snort user (Jun 23)
  • <Possible follow-ups>
  • RE: Snort book Willy, Andrew (Jun 23)
    • RE: Snort book Darren Webb (Jun 24)
• PF_RING question Dennis Henderson (Jun 22)
  • <Possible follow-ups>
  • RE: PF_RING question Milani Paolo (Jun 23)
    • RE: PF_RING question Dennis Henderson (Jun 23)
• Cannot compile snort with mysql and flexresp[2] Kolanovic, Tomislav/Human Resources (Jun 25)
• Sourcefire Support for Snort Related Projects Jennifer Steffens (Jun 26)
• testing IDS Geries Handal (Jun 27)
  • Re: testing IDS Martin Roesch (Jun 27)
• IDS Policy Manager 1.7.0 Released Jeff Dell (Jun 27)
• Snort inline : Flowbits error lmarcilly (Jun 27)
  • Re: Snort inline : Flowbits error Martin Roesch (Jun 27)
• Use of the var HOME_NET in a DMZ Byron Pezan (Jun 27)
• Moving on... Jeremy Hewlett (Jun 27)
  • Re: [Snort-devel] Moving on... Joel Esler (Jun 28)
• Unified Log Format Mario D. Santana (Jun 28)
  • Re: Unified Log Format Martin Roesch (Jun 28)
    • Re: Unified Log Format Mario D. Santana (Jun 28)
• Re: Snort-users digest, Vol 1 #5178 - 4 msgs Nick Plante (Jun 28)
• BASE SMTP Willy, Andrew (Jun 30)
  • Re: BASE SMTP Joel Esler (Jun 30)
• First Meeting of the Open Source Snort Rules Consortium (OSSRC) Jennifer Steffens (Jun 30)
  • Re: First Meeting of the Open Source Snort Rules Consortium (OSSRC) Jennifer Steffens (Jun 30)

Previous period

Next period