Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

1238 messages starting Jan 02 13 and ending Mar 30 13
Date index | Thread index | Author index

• Re: [Snort-devel] Snort Configuration Problems Michael Steele (Jan 02)
  • Re: [Snort-devel] Snort Configuration Problems Michael Steele (Jan 02)
• Re: snort SIGSEGV Russ Combs (Jan 02)
• Re: The detect function Russ Combs (Jan 02)
• Rule port question honeybadger (Jan 02)
  • Re: Rule port question JJC (Jan 02)
• Re: Barnyard2 database failures Dave Corsello (Jan 02)
  • Re: Barnyard2 database failures beenph (Jan 02)
    • Re: Barnyard2 database failures waldo kitty (Jan 03)
      • Re: Barnyard2 database failures beenph (Jan 04)
      • Re: Barnyard2 database failures waldo kitty (Jan 06)
      • Re: Barnyard2 database failures beenph (Jan 06)
• compilation fail daq 2.0.0 Nikola Vulovic (Jan 02)
  • Re: compilation fail daq 2.0.0 Weir, Jason (Jan 03)
    • Re: compilation fail daq 2.0.0 Russ Combs (Jan 03)
• Persistent problems with rule updates for Registerd Users Michael Steele (Jan 02)
  • Re: Persistent problems with rule updates for Registerd Users Russ Combs (Jan 03)
    • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Jason (Jan 03)
  • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 03)
    • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Jeff Kell (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Jeff Kell (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Jeff Kell (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
      • Re: Persistent problems with rule updates for Registerd Users Michael Steele (Jan 03)
      • Re: Persistent problems with rule updates for Registerd Users Joel Esler (Jan 04)
• Unified2 extra data Peter Bates (Jan 03)
  • Re: Unified2 extra data beenph (Jan 03)
• Sourcefire VRT Certified Snort Rules Update 2013-01-03 Research (Jan 03)
• Upgraded snort.conf and no bpf? Joe Seanor (Jan 05)
• Pcap filename from --pcap-dir? Andre DiMino (Jan 05)
  • Re: Pcap filename from --pcap-dir? beenph (Jan 05)
    • Re: Pcap filename from --pcap-dir? Edward Fjellskål (Jan 05)
      • Re: Pcap filename from --pcap-dir? beenph (Jan 05)
      • Re: Pcap filename from --pcap-dir? Alex Kirk (Jan 07)
• sid 15554 yew chuan Ong (Jan 06)
• sfportscan Preprocessor Zahra Hakimi (Jan 06)
• Re: Rebuilding the wheel Mike Miller (Jan 07)
• Updating Rules using Oinkmaster Yayan Tri Taryana (Jan 07)
  • Re: Updating Rules using Oinkmaster Peter Bates (Jan 08)
• Sourcefire VRT Certified Snort Rules Update 2013-01-08 Research (Jan 08)
• Rule checking logic ("checking" as defined by rule profile stats) question Mike Cox (Jan 08)
  • Message not available
    • Re: Fwd: Rule checking logic ("checking" as defined by rule profile stats) question Steven Sturges (Jan 09)
      • Re: Fwd: Rule checking logic ("checking" as defined by rule profile stats) question Mike Cox (Jan 09)
      • Re: Fwd: Rule checking logic ("checking" as defined by rule profile stats) question Mike Cox (Jan 10)
      • Re: Fwd: Rule checking logic ("checking" as defined by rule profile stats) question Steven Sturges (Jan 13)
• Identify outbound SSH connections Craig Merchant (Jan 08)
  • <Possible follow-ups>
  • Re: Identify outbound SSH connections Y M (Jan 08)
• Snort 2.9.3.1 so rules seems not working Paul Tsang (Jan 08)
• Barnyard Waldo File Corrupted/Truncated Yayan Tri Taryana (Jan 08)
• Database Decoding Reshma Purushothaman (Jan 09)
• Snort 2.9.4 installation in inline mode immanuel (Jan 09)
• Rule set for non-intrusive events? Steve Marotta (Jan 09)
  • Re: Rule set for non-intrusive events? Castle, Shane (Jan 09)
    • Re: Rule set for non-intrusive events? Steve Marotta (Jan 09)
      • Re: Rule set for non-intrusive events? John Ives (Jan 09)
  • Re: Rule set for non-intrusive events? Eoin Miller (Jan 09)
• decoderActionQ Maverick (Jan 09)
  • Re: decoderActionQ Mitesh Jadia (Jan 10)
• Problem accessing telnet data Henrique Santos (Jan 09)
• Sourcefire VRT Certified Snort Rules Update 2013-01-10 Research (Jan 10)
• unified2_extra_data Brad Tilley (Jan 10)
  • Re: unified2_extra_data Russ Combs (Jan 10)
    • Re: unified2_extra_data Brad Tilley (Jan 11)
  • Re: unified2_extra_data Victor Roemer (Jan 11)
• Way to generate alerts? Matthew Van Gent (Jan 10)
  • Re: Way to generate alerts? Heine Lysemose (Jan 10)
    • Re: Way to generate alerts? Matthew Van Gent (Jan 10)
      • Re: Way to generate alerts? Giles Coochey (Jan 17)
      • Re: Way to generate alerts? Joel Esler (Jan 17)
• Best practices for setting HOME_NET Craig Merchant (Jan 10)
  • Re: Best practices for setting HOME_NET Joel Esler (Jan 11)
  • Re: Best practices for setting HOME_NET Kevin Ross (Jan 11)
    • Re: Best practices for setting HOME_NET Mike Miller (Jan 11)
      • Re: Best practices for setting HOME_NET Joel Esler (Jan 11)
      • Re: Best practices for setting HOME_NET Mike Miller (Jan 11)
      • Re: Best practices for setting HOME_NET Joel Esler (Jan 11)
      • Re: Best practices for setting HOME_NET waldo kitty (Jan 11)
      • Re: Best practices for setting HOME_NET waldo kitty (Jan 11)
  • Re: Best practices for setting HOME_NET Jeremy Hoel (Jan 11)
• Database sizing and tuning Mike Miller (Jan 11)
  • Re: Database sizing and tuning Joel Esler (Jan 11)
• Trying to understand file.exe flowbit Bobby Hinzman (Jan 11)
  • Re: Trying to understand file.exe flowbit Joel Esler (Jan 11)
• SNORT openflow patricio (Jan 11)
  • Re: SNORT openflow balaji patnala (Jan 12)
    • Re: SNORT openflow patricio (Jan 13)
      • Re: SNORT openflow Jason Ish (Jan 13)
      • Re: SNORT openflow Russ Combs (Jan 14)
• (no subject) Nikola Vulovic (Jan 12)
  • Re: (no subject) Joel Esler (Jan 12)
  • <Possible follow-ups>
  • Re: (no subject) Y M (Jan 12)
  • (no subject) Agent Smith (Jan 30)
    • Re: (no subject) Joel Esler (Jan 30)
      • Re: (no subject) waldo kitty (Jan 30)
  • (no subject) alex dina (Mar 25)
    • Re: (no subject) lists () packetmail net (Mar 25)
• HTTP Filtering using Snort Sharon Sahar (Jan 13)
  • Re: HTTP Filtering using Snort Heine Lysemose (Jan 14)
    • Re: HTTP Filtering using Snort Sharon Sahar (Jan 13)
      • Re: HTTP Filtering using Snort Rodrigo Montoro(Sp0oKeR) (Jan 13)
• Fwd: jacki buddy (Jan 13)
• Sourcefire VRT Certified Snort Rules Update 2013-01-14 Research (Jan 14)
• Unknown ClassType: trojan-activity Smith, Edward (Jan 14)
  • Re: Unknown ClassType: trojan-activity Joel Esler (Jan 14)
    • Re: Unknown ClassType: trojan-activity Smith, Edward (Jan 14)
      • Re: Unknown ClassType: trojan-activity Joel Esler (Jan 14)
• Custom variables in rules and snort.conf Craig Merchant (Jan 14)
  • Re: Custom variables in rules and snort.conf waldo kitty (Jan 14)
  • Re: Custom variables in rules and snort.conf Joel Esler (Jan 14)
• 'make' Snort to compile my own preprocessor Alex Adamos (Jan 15)
  • Re: 'make' Snort to compile my own preprocessor Victor Roemer (Jan 15)
    • Re: 'make' Snort to compile my own preprocessor Alex Adamos (Jan 15)
      • Re: 'make' Snort to compile my own preprocessor waldo kitty (Jan 15)
• Sourcefire VRT Certified Snort Rules Update 2013-01-15 Research (Jan 15)
  • Re: Sourcefire VRT Certified Snort Rules Update 2013-01-15 Starner, Mark (Jan 16)
    • Re: Sourcefire VRT Certified Snort Rules Update 2013-01-15 Joel Esler (Jan 16)
      • Re: Sourcefire VRT Certified Snort Rules Update 2013-01-15 Joel Esler (Jan 17)
• incorrect FDDI test in decode.c leads to reading uninitialized fields Tavis Ormandy (Jan 15)
  • Re: incorrect FDDI test in decode.c leads to reading uninitialized fields Victor Roemer (Jan 15)
  • <Possible follow-ups>
  • Re: incorrect FDDI test in decode.c leads to reading uninitialized fields Joel Esler (Jan 15)
• Compiling your own SO Rules Dheeraj Gupta (Jan 15)
• Snort, Barnyard2 and Snorby alert classification mismatch hanx hi (Jan 16)
  • Re: Snort, Barnyard2 and Snorby alert classification mismatch beenph (Jan 16)
    • Re: Snort, Barnyard2 and Snorby alert classification mismatch beenph (Jan 16)
      • Re: Snort, Barnyard2 and Snorby alert classification mismatch hanx hi (Jan 16)
• Potential vulnerabilities of some Snort regexes Asiri Rathnayake (Jan 16)
• Sourcefire VRT Certified Snort Rules Update 2013-01-17 Research (Jan 17)
• Snort on proxy (outbound alerts) Thibaud Raso (Jan 18)
  • Re: Snort on proxy (outbound alerts) Balasubramaniam Natarajan (Jan 18)
    • Re: Snort on proxy (outbound alerts) J. H (Jan 18)
      • Re: Snort on proxy (outbound alerts) Balasubramaniam Natarajan (Jan 18)
      • Re: Snort on proxy (outbound alerts) waldo kitty (Jan 18)
      • Re: Snort on proxy (outbound alerts) T. R (Jan 18)
      • Re: Snort on proxy (outbound alerts) Jason Wallace (Jan 18)
      • Re: Snort on proxy (outbound alerts) Jason Wallace (Jan 18)
      • Re: Snort on proxy (outbound alerts) Joel Esler (Jan 18)
      • Re: Snort on proxy (outbound alerts) Jason Wallace (Jan 18)
• Is it possible their is a signature that will show connected users to certain servers via terminal services? Aisling Brennan (Jan 18)
• Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. Aisling Brennan (Jan 18)
  • Re: [Snort-sigs] Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. Balasubramaniam Natarajan (Jan 19)
    • Re: Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. Aisling Brennan (Jan 26)
      • Re: Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. lists () packetmail net (Jan 26)
      • Re: Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. Ned Moran (Jan 26)
      • Re: Could you send me on a signature to capture all emails that are sent to a domain, for example “@tnt.com”. waldo kitty (Jan 26)
• Enquiry Sourcefire VRT Rules Update Dennis Lau (Jan 19)
  • Re: Enquiry Sourcefire VRT Rules Update Joel Esler (Jan 21)
• Snort Pattern alghoritm Mārtiņš Sapats (Jan 19)
  • <Possible follow-ups>
  • Snort Pattern alghoritm Martins Sapats (Jan 26)
  • Re: Snort Pattern alghoritm Todd Wease (Jan 28)
    • Re: Snort Pattern alghoritm Asiri Rathnayake (Mar 08)
      • Re: Snort Pattern alghoritm Todd Wease (Mar 08)
• Snort and buffering of packets Knut Borg (Jan 19)
  • Re: Snort and buffering of packets Joel Esler (Jan 19)
    • Re: Snort and buffering of packets Knut Borg (Jan 24)
      • Re: Snort and buffering of packets Joel Esler (Jan 24)
• Snort Barnyard2 and Snorby alert classification Federico Carbonell (Jan 19)
  • Re: Snort Barnyard2 and Snorby alert classification beenph (Jan 19)
• Help with a rule Michael Bower (Jan 19)
  • Re: Help with a rule Joel Esler (Jan 19)
• Snort 2.9.4 and libsf_engine.so Alex Adamos (Jan 19)
  • Message not available
    • Re: Snort 2.9.4 and libsf_engine.so Alex Adamos (Jan 19)
      • Re: Snort 2.9.4 and libsf_engine.so Alex Adamos (Jan 19)
      • Re: Snort 2.9.4 and libsf_engine.so Joel Esler (Jan 19)
      • Re: Snort 2.9.4 and libsf_engine.so Justin Knox (Jan 19)
• Re: [Emerging-Sigs] Creating Potential DOS HTTP sig Kevin Ross (Jan 20)
  • Re: [Emerging-Sigs] Creating Potential DOS HTTP sig Russ Combs (Jan 22)
• About IDS package Mayur Patil (Jan 20)
• DPX starter kit installation Alex Adamos (Jan 21)
  • Re: DPX starter kit installation Alex Adamos (Jan 22)
    • Re: DPX starter kit installation Alex Adamos (Jan 22)
      • Re: DPX starter kit installation Hui Cao (Jan 22)
      • Re: DPX starter kit installation Alex Adamos (Jan 22)
      • Re: DPX starter kit installation Hui Cao (Jan 22)
      • Re: DPX starter kit installation Alex Adamos (Jan 22)
    • Snort Unixsock patricio (Jan 22)
      • Re: Snort Unixsock patricio (Jan 23)
• DPX starter kit installation‏ Alex Adamos (Jan 21)
  • Snort Unixsock patricio (Jan 22)
    • Re: Snort Unixsock patricio (Jan 23)
• Creating a PostgreSQL database for snort on Debian system giulia603 () virgilio it (Jan 21)
  • Re: Creating a PostgreSQL database for snort on Debian system waldo kitty (Jan 21)
• [HITB-Announce] REMINDER: #HITB2013AMS Call for Papers Closes 8th Feb Hafez Kamal (Jan 21)
• Java vulnerability detection Antonin (Jan 22)
  • Re: Java vulnerability detection Joel Esler (Jan 22)
    • Re: Java vulnerability detection Antonin (Jan 22)
• Sourcefire VRT Certified Snort Rules Update 2013-01-22 Research (Jan 22)
• Value of max_gzip_mem listed in documentation Stark, Vernon L. (Jan 23)
  • Re: Value of max_gzip_mem listed in documentation Hui Cao (Jan 23)
• Snort Block rules download for IPS mode immanuel (Jan 23)
  • Re: Snort Block rules download for IPS mode Joel Esler (Jan 24)
    • Re: Snort Block rules download for IPS mode immanuel (Jan 27)
      • Re: Snort Block rules download for IPS mode waldo kitty (Jan 28)
• Barnyard2 - Phantom cid/sid? Eoin Miller (Jan 24)
  • Re: Barnyard2 - Phantom cid/sid? beenph (Jan 24)
    • Re: Barnyard2 - Phantom cid/sid? Eoin Miller (Jan 24)
      • Re: Barnyard2 - Phantom cid/sid? beenph (Jan 24)
• Sourcefire VRT Certified Snort Rules Update 2013-01-24 Research (Jan 24)
• Need help: a custom snort signature that will detect attachments (inbound + outbound) Aisling Brennan (Jan 25)
  • Re: Need help: a custom snort signature that will detect attachments (inbound + outbound) waldo kitty (Jan 25)
  • Re: Need help: a custom snort signature that will detect attachments (inbound + outbound) Joel Esler (Jan 25)
• Optimized implementation of AC and AC_Q pattern matching algorithms abed mohammad kamaluddin (Jan 25)
  • Re: Optimized implementation of AC and AC_Q pattern matching algorithms Hui Cao (Jan 26)
    • Re: Optimized implementation of AC and AC_Q pattern matching algorithms abed mohammad kamaluddin (Jan 26)
• Snort Configuration Problem sumitkamboj88 () gmail com (Jan 25)
  • Re: Snort Configuration Problem waldo kitty (Jan 25)
• DAQ complaint. Unable to build snort snort-2.9.4 עמית קליינמן (Jan 25)
  • Re: DAQ complaint. Unable to build snort snort-2.9.4 עמית קליינמן (Jan 25)
    • Re: [Snort-devel] DAQ complaint. Unable to build snort snort-2.9.4 Hui Cao (Jan 25)
      • Re: DAQ complaint. Unable to build snort snort-2.9.4 עמית קליינמן (Jan 25)
• Real Time Alert and Variables Nicholas Horton (Jan 25)
  • <Possible follow-ups>
  • Re: Real Time Alert and Variables Y M (Jan 25)
    • Re: Real Time Alert and Variables Nicholas Horton (Jan 25)
      • Re: Real Time Alert and Variables Nicholas Horton (Jan 27)
      • Re: Real Time Alert and Variables Greg Williams (Jan 27)
      • Re: Real Time Alert and Variables Nicholas Horton (Jan 27)
      • Re: Real Time Alert and Variables Greg Williams (Jan 27)
      • Re: Real Time Alert and Variables Nicholas Horton (Jan 27)
      • Re: Real Time Alert and Variables Michael Steele (Jan 27)
      • Re: Real Time Alert and Variables Greg Williams (Jan 27)
      • Re: Real Time Alert and Variables Michael Steele (Jan 31)
      • Message not available
      • Re: Real Time Alert and Variables Michael Steele (Jan 31)
      • Re: Real Time Alert and Variables Justin (Jan 31)
      • Re: Real Time Alert and Variables Nicholas Horton (Feb 06)
      • Re: Real Time Alert and Variables Joel Esler (Feb 06)
      • Re: Real Time Alert and Variables Nicholas Horton (Feb 07)
      • Re: Real Time Alert and Variables Jeremy Hoel (Feb 07)
      • Re: Real Time Alert and Variables Lay, James (Feb 07)
      • Re: Real Time Alert and Variables Nicholas Horton (Feb 07)
      • Re: Real Time Alert and Variables Martin Holste (Feb 11)
      • Re: Real Time Alert and Variables Nicholas Horton (Feb 12)
      • Re: Real Time Alert and Variables Nicholas Horton (Feb 12)
• Snort on Amazon EC2 Greg Taylor-Broun (Jan 25)
  • NIDS in the Cloud (was: Snort on Amazon EC2) Jason Haar (Jan 25)
    • Re: NIDS in the Cloud Livio Ricciulli (Jan 25)
    • Re: NIDS in the Cloud (was: Snort on Amazon EC2) Eric G (Jan 26)
• CPU Affinity Craig Merchant (Jan 25)
  • Re: CPU Affinity Livio Ricciulli (Jan 25)
    • Re: CPU Affinity Craig Merchant (Jan 26)
      • Re: CPU Affinity Livio Ricciulli (Jan 27)
• [PATCH]: Add Nonce Sum bit to 'flags' Joshua Kinard (Jan 26)
  • Re: [PATCH]: Add Nonce Sum bit to 'flags' Todd Wease (Jan 28)
• IPS packet reject handling doesn't work as expected Lukas Matt (Jan 26)
  • Re: IPS packet reject handling doesn't work as expected Joel Esler (Jan 26)
  • Re: IPS packet reject handling doesn't work as expected Jamie Riden (Jan 26)
  • UNSUBSCRIBE Alistair Thomson (Jan 28)
    • Re: UNSUBSCRIBE Jamie Riden (Jan 28)
• Pass rules - no effect/not working Ward Sladek (Jan 26)
  • Re: Pass rules - no effect/not working Jeremy Hoel (Jan 27)
    • Re: Pass rules - no effect/not working Ward Sladek (Jan 30)
• Re: Optimized implementation of AC and AC_Q pattern matching algorithms Pablo Cantos (Jan 26)
  • Re: Optimized implementation of AC and AC_Q pattern matching algorithms Joel Esler (Jan 26)
  • <Possible follow-ups>
  • Re: Optimized implementation of AC and AC_Q pattern matching algorithms abed mohammad kamaluddin (Jan 26)
    • Re: Optimized implementation of AC and AC_Q pattern matching algorithms abed mohammad kamaluddin (Jan 28)
      • Re: Optimized implementation of AC and AC_Q pattern matching algorithms Pablo Cantos (Jan 28)
      • SNORT compilation in ECLIPSE patricio (Jan 28)
• Snort on AWS Topher ZiCornell (Jan 28)
• Snort and Proxmox Josh Bitto (Jan 28)
  • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
    • Message not available
      • Message not available
      • Message not available
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Jeremy Hoel (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 28)
      • Re: Snort and Proxmox waldo kitty (Jan 28)
      • Re: Snort and Proxmox Josh Bitto (Jan 29)
      • Re: Snort and Proxmox waldo kitty (Jan 28)
• var or ipvar? waldo kitty (Jan 28)
  • Re: var or ipvar? Nicholas Bogart (Jan 28)
    • Re: var or ipvar? Joel Esler (Jan 28)
      • Re: var or ipvar? waldo kitty (Jan 28)
      • Re: var or ipvar? Joel Esler (Jan 28)
      • Re: var or ipvar? waldo kitty (Jan 28)
    • Re: var or ipvar? waldo kitty (Jan 28)
  • <Possible follow-ups>
  • Re: var or ipvar? Y M (Jan 28)
    • Re: var or ipvar? Nicholas Bogart (Jan 28)
      • Re: var or ipvar? waldo kitty (Jan 28)
      • Re: var or ipvar? Joel Esler (Jan 28)
    • SNORT compilation in ECLIPSE patricio (Jan 28)
    • Re: var or ipvar? waldo kitty (Jan 28)
      • Re: var or ipvar? Todd Wease (Jan 28)
      • Re: var or ipvar? waldo kitty (Jan 28)
      • Re: var or ipvar? Todd Wease (Jan 29)
• Explanation of Rule 1:19189:4 Nicholas Horton (Jan 29)
  • Re: Explanation of Rule 1:19189:4 rmkml (Jan 29)
    • Re: Explanation of Rule 1:19189:4 Nicholas Horton (Jan 29)
      • Re: Explanation of Rule 1:19189:4 rmkml (Jan 29)
      • Re: Explanation of Rule 1:19189:4 Nicholas Horton (Jan 29)
      • Re: Explanation of Rule 1:19189:4 Nicholas Horton (Jan 29)
      • Re: Explanation of Rule 1:19189:4 Joel Esler (Jan 29)
• Virtual Machines and Hypervisors Juan Camilo Valencia (Jan 29)
  • Re: Virtual Machines and Hypervisors Joel Esler (Jan 29)
    • Re: Virtual Machines and Hypervisors Juan Camilo Valencia (Jan 30)
      • Re: Virtual Machines and Hypervisors Joel Esler (Jan 29)
      • Re: Virtual Machines and Hypervisors Juan Camilo Valencia (Jan 29)
      • Re: Virtual Machines and Hypervisors Ulric Eriksson (Jan 30)
  • Message not available
    • Fwd: Re: Virtual Machines and Hypervisors Mikael Keri (Jan 29)
      • Re: Virtual Machines and Hypervisors Joel Esler (Jan 29)
      • Re: Virtual Machines and Hypervisors mikael keri (Jan 29)
      • Re: Virtual Machines and Hypervisors Joel Esler (Jan 29)
      • Re: Virtual Machines and Hypervisors Juan Camilo Valencia (Jan 30)
  • Re: Virtual Machines and Hypervisors Jefferson, Shawn (Jan 29)
• What is the correct syntax for bpf_file? Miguel Alvarez (Jan 29)
  • Re: What is the correct syntax for bpf_file? rmkml (Jan 29)
    • Re: What is the correct syntax for bpf_file? Miguel Alvarez (Jan 29)
• Re : Re: What is the correct syntax for bpf_file? Rm Kml (Jan 29)
  • Re: Re : Re: What is the correct syntax for bpf_file? Miguel Alvarez (Jan 29)
    • Re: Re : Re: What is the correct syntax for bpf_file? Todd Wease (Jan 30)
      • Re: Re : Re: What is the correct syntax for bpf_file? Miguel Alvarez (Jan 30)
• Sourcefire VRT Certified Snort Rules Update 2013-01-29 Research (Jan 29)
• Fwd: Brad Turnbough (Jan 29)
  • Re: Fwd: Jeff Jarmoc (Jan 29)
    • Re: Fwd: waldo kitty (Jan 29)
      • Re: Fwd: Eric G (Jan 29)
      • Re: Fwd: Joel Esler (Jan 29)
      • Re: Fwd: waldo kitty (Jan 30)
    • Re: Fwd: Bjoern Meier (Jan 30)
• Dynamic Preprocessor- packets from established flows Alex Adamos (Jan 29)
  • Re: Dynamic Preprocessor- packets from established flows Todd Wease (Jan 30)
    • Re: Dynamic Preprocessor- packets from established flows Alex Adamos (Jan 31)
      • Re: Dynamic Preprocessor- packets from established flows Todd Wease (Jan 31)
      • Re: Dynamic Preprocessor- packets from established flows Alex Adamos (Jan 31)
• Snort not logging to unified2 Sacher , Désirée (Jan 30)
  • Re: Snort not logging to unified2 Todd Wease (Jan 30)
    • Re: Snort not logging to unified2 Sacher , Désirée (Jan 30)
• Quick and dirty James Lay (Jan 30)
  • Re: Quick and dirty rmkml (Jan 30)
    • Re: Quick and dirty James Lay (Jan 30)
  • Re: Quick and dirty Joel Esler (Jan 30)
    • Re: Quick and dirty James Lay (Jan 30)
      • Re: Quick and dirty lists () packetmail net (Jan 30)
      • Re: Quick and dirty James Lay (Jan 30)
• Testing Snort Josh Bitto (Jan 30)
  • Re: Testing Snort Jeremy Hoel (Jan 30)
    • Re: Testing Snort Josh Bitto (Jan 30)
      • Re: Testing Snort Jeremy Hoel (Jan 30)
      • Re: Testing Snort Justin Knox (Jan 30)
      • Re: Testing Snort Russ Combs (Jan 30)
      • Re: Testing Snort Josh Bitto (Jan 30)
      • Re: Testing Snort Joel Esler (Jan 30)
      • Re: Testing Snort Jeremy Hoel (Jan 30)
      • Re: Testing Snort Josh Bitto (Jan 30)
      • Re: Testing Snort Joel Esler (Jan 30)
      • Re: Testing Snort Josh Bitto (Jan 30)
      • Re: Testing Snort Josh Bitto (Jan 30)
      • Re: Testing Snort Jeremy Hoel (Jan 31)
      • Re: Testing Snort JJC (Jan 31)
• Need help in snort rule sandeep mlist (Jan 30)
  • Re: Need help in snort rule waldo kitty (Jan 30)
  • Re: Need help in snort rule Joel Esler (Jan 30)
    • Re: Need help in snort rule sandeep mlist (Jan 30)
• Re: [barnyard2-users] Logging to the Windows event log Michael Steele (Jan 30)
  • Message not available
    • Message not available
      • Re: [barnyard2-users] Logging to the Windows event log Michael Steele (Jan 30)
• Problems with installing snort 2.9.4 on centos 6.3 עמית קליינמן (Jan 31)
• Logging problems on Windows using the -E switch Michael Steele (Jan 31)
  • Re: Logging problems on Windows using the -E switch Todd Wease (Jan 31)
    • Re: Logging problems on Windows using the -E switch Michael Steele (Jan 31)
• Snort and SQL on PFsense Josh Bitto (Jan 31)
  • Re: Snort and SQL on PFsense Jeremy Hoel (Jan 31)
    • Re: Snort and SQL on PFsense Josh Bitto (Feb 01)
      • Re: Snort and SQL on PFsense Jeremy Hoel (Feb 01)
      • Re: Snort and SQL on PFsense Josh Bitto (Feb 01)
      • Re: Snort and SQL on PFsense Josh Bitto (Feb 01)
• [HITB-Announce] #HITB2013AMS FINAL CALL for Paper Submissions Hafez Kamal (Jan 31)
• Sourcefire VRT Certified Snort Rules Update 2013-02-01 Research (Feb 01)
• Snort and SQL database Josh Bitto (Feb 01)
  • Re: Snort and SQL database Jeremy Hoel (Feb 01)
    • Re: Snort and SQL database Josh Bitto (Feb 01)
      • Re: Snort and SQL database Jeremy Hoel (Feb 01)
  • Re: Snort and SQL database waldo kitty (Feb 01)
• Hash function for ip 4-tuple Alex Adamos (Feb 02)
  • Re: Hash function for ip 4-tuple Kiryukhin Andrey (Feb 04)
    • Re: Hash function for ip 4-tuple Alex Adamos (Feb 04)
      • Re: Hash function for ip 4-tuple Bhagya Bantwal (Feb 04)
• About Snort installation Mayur Patil (Feb 03)
  • About Snort installation Mayur Patil (Feb 04)
    • Re: About Snort installation Josh Bitto (Feb 04)
      • Message not available
      • About Snort installation Mayur Patil (Feb 04)
• Snort Prathibha P G (Feb 03)
  • <Possible follow-ups>
  • Re: Snort Chinmay Mahata (Feb 05)
  • Snort Greg Martin (Mar 29)
  • Re: Snort Michael D. Wood (Mar 29)
• Pulledpork Returning 403 on snortrules-snapshot Dan Rossiter (Feb 03)
  • Re: Pulledpork Returning 403 on snortrules-snapshot Joel Esler (Feb 03)
    • Re: Pulledpork Returning 403 on snortrules-snapshot JJ Cummings (Feb 03)
• Barnyard2 schema Josh Bitto (Feb 04)
  • Re: Barnyard2 schema Joel Esler (Feb 04)
• formatting of variables Michael Brown (Feb 04)
• Snort Rules 2940 Problem Yeison Camargo (Feb 04)
• DPX linker error Alex Adamos (Feb 05)
  • Re: DPX linker error Alex Adamos (Feb 05)
  • DPX linker error Alex Adamos (Feb 07)
    • Re: DPX linker error Alex Adamos (Feb 07)
• ERROR: Failed to initialize dynamic preprocessor: SF_GTP (IPV6) version 1.1.1 (-2) Lutfi ODUNCUOGLU (Feb 05)
  • Re: ERROR: Failed to initialize dynamic preprocessor: SF_GTP (IPV6) version 1.1.1 (-2) waldo kitty (Feb 06)
• Juniper vulnerability signature coverage? Kungu Panda (Feb 05)
• Restart snort inline without traffic loss? Andy (Feb 05)
  • Re: Restart snort inline without traffic loss? Heine Lysemose (Feb 05)
    • Re: Restart snort inline without traffic loss? Andy (Feb 06)
  • Re: Restart snort inline without traffic loss? Mitesh Jadia (Feb 06)
    • Re: Restart snort inline without traffic loss? waldo kitty (Feb 06)
  • Re: Restart snort inline without traffic loss? waldo kitty (Feb 06)
  • <Possible follow-ups>
  • Re: Restart snort inline without traffic loss? Y M (Feb 06)
    • Re: Restart snort inline without traffic loss? Andy (Feb 07)
      • Re: Restart snort inline without traffic loss? Joel Esler (Feb 07)
      • Re: Restart snort inline without traffic loss? Andy (Feb 08)
      • Re: Restart snort inline without traffic loss? waldo kitty (Feb 07)
  • Re: Restart snort inline without traffic loss? Y M (Feb 08)
    • Re: Restart snort inline without traffic loss? Andy (Feb 08)
      • Re: Restart snort inline without traffic loss? Joel Esler (Feb 08)
      • Re: Restart snort inline without traffic loss? Jeremy Hoel (Feb 08)
      • Re: Restart snort inline without traffic loss? waldo kitty (Feb 08)
      • Re: Restart snort inline without traffic loss? Andy (Feb 08)
      • Re: Restart snort inline without traffic loss? Y M (Feb 08)
• Sourcefire VRT Certified Snort Rules Update 2013-02-05 Research (Feb 05)
• ICMP rule triggered by UDP packet Kern, Daniel P. x1449 (Feb 05)
  • Re: ICMP rule triggered by UDP packet Castle, Shane (Feb 05)
    • Re: ICMP rule triggered by UDP packet Kern, Daniel P. x1449 (Feb 06)
• Re: [Snort-users] Restart snort inline without traffic loss? Chinmay Mahata (Feb 06)
• Snort in Inline Mode on CentOS 6.3 Okeowo, Ayo (Feb 06)
  • <Possible follow-ups>
  • Re: Snort in Inline Mode on CentOS 6.3 Y M (Feb 06)
  • Re: Snort in Inline Mode on CentOS 6.3 Y M (Feb 06)
  • Re: Snort in Inline Mode on CentOS 6.3 Y M (Feb 10)
    • Message not available
      • Fwd: Snort in Inline Mode on CentOS 6.3 Okeowo, Ayo (Feb 10)
  • Re: Snort in Inline Mode on CentOS 6.3 Y M (Feb 10)
    • Re: Snort in Inline Mode on CentOS 6.3 Okeowo, Ayo (Feb 10)
  • Re: Snort in Inline Mode on CentOS 6.3 Y M (Feb 10)
    • Re: Snort in Inline Mode on CentOS 6.3 Okeowo, Ayo (Feb 10)
    • Re: Snort in Inline Mode on CentOS 6.3 Okeowo, Ayo (Feb 10)
• New install of Snort on Windows 2008 Erik D. Sciortino (Feb 06)
  • Re: New install of Snort on Windows 2008 Joel Esler (Feb 06)
    • Re: New install of Snort on Windows 2008 Erik D. Sciortino (Feb 06)
• Snort and Barnyard2 Josh Bitto (Feb 06)
  • <Possible follow-ups>
  • Re: Snort and Barnyard2 Y M (Feb 06)
    • Re: Snort and Barnyard2 Josh Bitto (Feb 06)
  • Re: Snort and Barnyard2 Y M (Feb 06)
    • Re: Snort and Barnyard2 beenph (Feb 06)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 06)
      • Re: Snort and Barnyard2 Y M (Feb 06)
      • Re: Snort and Barnyard2 Y M (Feb 06)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 07)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 07)
      • Re: Snort and Barnyard2 beenph (Feb 07)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 07)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 07)
      • Re: Snort and Barnyard2 Josh Bitto (Feb 07)
    • Re: Snort and Barnyard2 Josh Bitto (Feb 06)
  • Re: Snort and Barnyard2 Y M (Feb 06)
• Huge performance drop for Snort-2.9.4 abed mohammad kamaluddin (Feb 07)
  • Re: Huge performance drop for Snort-2.9.4 Bhagya Bantwal (Feb 07)
    • Re: Huge performance drop for Snort-2.9.4 abed mohammad kamaluddin (Feb 08)
• Whitelisting Erik D. Sciortino (Feb 07)
  • Re: Whitelisting Jeremy Hoel (Feb 07)
• Updates Josh Bitto (Feb 07)
  • Re: Updates Joel Esler (Feb 10)
• Sourcefire VRT Certified Snort Rules Update 2013-02-07 Research (Feb 07)
• Snort rules: TOR Servers David Cottam (Feb 07)
  • Re: Snort rules: TOR Servers Joel Esler (Feb 07)
• Snort rules: Anonymous Proxy David Cottam (Feb 07)
  • Re: Snort rules: Anonymous Proxy Joel Esler (Feb 09)
• Sourcefire VRT Certified Snort Rules Update 2013-02-08 Research (Feb 08)
• PulledPork not processing Michael Steele (Feb 09)
  • Re: PulledPork not processing Michael Steele (Feb 10)
    • Re: PulledPork not processing Joel Esler (Feb 10)
      • Re: PulledPork not processing Joel Esler (Feb 10)
      • Re: PulledPork not processing JJ Cummings (Feb 10)
      • Re: PulledPork not processing Tony Robinson (Feb 10)
      • Re: PulledPork not processing Michael Steele (Feb 10)
      • Re: PulledPork not processing JJ Cummings (Feb 10)
• About Snort GUI report:Just missed the result Mayur Patil (Feb 09)
• Re: [Emerging-Sigs] http preprocessor issue (help!) Joel Esler (Feb 10)
  • Re: [Emerging-Sigs] http preprocessor issue (help!) Joel Esler (Feb 10)
    • Re: [Emerging-Sigs] http preprocessor issue (help!) Joel Esler (Feb 10)
• DAQ installation error Dhruv Desai (Feb 10)
  • Re: DAQ installation error praveen_recker . (Feb 11)
    • Re: DAQ installation error Dhruv Desai (Feb 12)
• malware-cnc.rules Gaißer , Carmen (Feb 11)
  • Re: malware-cnc.rules Alex McDonnell (Feb 11)
• Install Snort 2.9 on Mac OSX (Lion) Jessica B (Feb 11)
  • Re: Install Snort 2.9 on Mac OSX (Lion) Jason (Feb 11)
  • Re: Install Snort 2.9 on Mac OSX (Lion) Ray Caparros (Feb 12)
• Need help with byte_test sandeep mlist (Feb 11)
  • Re: Need help with byte_test Joel Esler (Feb 12)
  • Re: Need help with byte_test waldo kitty (Feb 12)
    • Re: Need help with byte_test Jeremy Hoel (Feb 12)
      • Re: Need help with byte_test waldo kitty (Feb 12)
      • Re: Need help with byte_test Joel Esler (Feb 12)
• Snort 2.9.4.0 on CentOS 5.8 Kaushal Shriyan (Feb 12)
  • Re: Snort 2.9.4.0 on CentOS 5.8 Kaushal Shriyan (Feb 12)
    • Re: Snort 2.9.4.0 on CentOS 5.8 Kaushal Shriyan (Feb 12)
    • Re: Snort 2.9.4.0 on CentOS 5.8 vincent (Feb 12)
      • Re: Snort 2.9.4.0 on CentOS 5.8 vincent (Feb 12)
      • Re: Snort 2.9.4.0 on CentOS 5.8 Kaushal Shriyan (Feb 21)
      • Re: Snort 2.9.4.0 on CentOS 5.8 beenph (Feb 21)
  • Re: Snort 2.9.4.0 on CentOS 5.8 Tony Reusser (Feb 12)
• Snort not collecting data after installing pulledpork and running rules update Erik D. Sciortino (Feb 12)
  • Re: Snort not collecting data after installing pulledpork and running rules update JJC (Feb 12)
    • Re: Snort not collecting data after installing pulledpork and running rules update Erik D. Sciortino (Feb 13)
      • Re: Snort not collecting data after installing pulledpork and running rules update Michael Steele (Feb 13)
  • Re: Snort not collecting data after installing pulledpork and running rules update Joel Esler (Feb 12)
  • Re: Snort not collecting data after installing pulledpork and running rules update Michael Steele (Feb 12)
    • Re: Snort not collecting data after installing pulledpork and running rules update Erik D. Sciortino (Feb 13)
      • Re: Snort not collecting data after installing pulledpork and running rules update Joel Esler (Feb 13)
      • Re: Snort not collecting data after installing pulledpork and running rules update Michael Steele (Feb 13)
      • Re: Snort not collecting data after installing pulledpork and running rules update Joel Esler (Feb 13)
    • Re: Snort not collecting data after installing pulledpork and running rules update Erik D. Sciortino (Feb 13)
    • Re: Snort not collecting data after installing pulledpork and running rules update Erik D. Sciortino (Feb 13)
• WAN and LAN interfaces Josh Bitto (Feb 12)
  • Re: WAN and LAN interfaces Josh Bitto (Feb 12)
    • Re: WAN and LAN interfaces Josh Bitto (Feb 12)
• Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
  • Re: Integrating ClamAv into Snort waldo kitty (Feb 12)
    • Re: Integrating ClamAv into Snort Jefferson, Shawn (Feb 12)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
      • Re: Integrating ClamAv into Snort Jefferson, Shawn (Feb 12)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
      • Re: Integrating ClamAv into Snort Jeremy Hoel (Feb 12)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
      • Re: Integrating ClamAv into Snort Joel Esler (Feb 12)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
      • Re: Integrating ClamAv into Snort Joel Esler (Feb 13)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 13)
      • Re: Integrating ClamAv into Snort Joel Esler (Feb 13)
      • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 13)
      • Re: Integrating ClamAv into Snort Joel Esler (Feb 12)
    • Re: Integrating ClamAv into Snort Ayodele Okeowo (Feb 12)
• Quick question about byte_test Jeffrey Stebelton (Feb 12)
  • Re: Quick question about byte_test Nathan Benson (Feb 14)
• Sourcefire VRT Certified Snort Rules Update 2013-02-12 Research (Feb 12)
• Install Howie (Feb 13)
• snort logging issue J MCN (Feb 13)
  • <Possible follow-ups>
  • FW: snort logging issue Y M (Feb 13)
• Snort Question david molina (Feb 13)
  • Re: Snort Question waldo kitty (Feb 13)
  • <Possible follow-ups>
  • Snort Question Jeremy Golden (Feb 28)
• Snort 2.9.3 Error when starting Barnyard2 david molina (Feb 14)
  • <Possible follow-ups>
  • Snort 2.9.3 Error when starting Barnyard2 david molina (Feb 14)
• Downloading Snort Rules - Registered User : Weird Behavior Dheeraj Gupta (Feb 14)
  • Re: Downloading Snort Rules - Registered User : Weird Behavior Joel Esler (Feb 14)
• Snort Noob Question Jeremy Golden (Feb 14)
• Patch to have unified2 outputs for multiple snort instances Guido Hungerbuehler (Feb 14)
  • Re: Patch to have unified2 outputs for multiple snort instances Russ Combs (Feb 14)
  • Re: Patch to have unified2 outputs for multiple snort instances Brad Tilley (Feb 15)
• Snort Segmentation Fault z@@f@r @}{m3D (Feb 14)
  • Re: Snort Segmentation Fault Russ Combs (Feb 14)
    • Re: Snort Segmentation Fault z@@f@r @}{m3D (Feb 14)
      • Re: Snort Segmentation Fault Russ Combs (Feb 14)
• Sourcefire VRT Certified Snort Rules Update 2013-02-14 Research (Feb 14)
• Snort and my VLANs Josh Bitto (Feb 14)
  • Re: Snort and my VLANs Ayodele Okeowo (Feb 15)
    • Re: Snort and my VLANs Josh Bitto (Feb 15)
      • Re: Snort and my VLANs Ayodele Okeowo (Feb 15)
  • <Possible follow-ups>
  • Re: Snort and my VLANs Y M (Feb 14)
    • Re: Snort and my VLANs Josh Bitto (Feb 14)
    • Re: Snort and my VLANs Josh Bitto (Feb 14)
      • Re: Snort and my VLANs Joel Esler (Feb 15)
• Fw: Snort Rules alex dina (Feb 14)
  • Re: Fw: Snort Rules waldo kitty (Feb 14)
    • Re: Fw: Snort Rules alex dina (Feb 15)
      • Re: Fw: Snort Rules Alex McDonnell (Feb 15)
      • Re: Fw: Snort Rules Ned Moran (Feb 15)
      • Re: Fw: Snort Rules waldo kitty (Feb 15)
  • <Possible follow-ups>
  • Snort Rules Josh Bitto (Mar 24)
    • Re: Snort Rules Joel Esler (Mar 24)
      • Re: Snort Rules Mayur Patil (Mar 24)
      • Re: Snort Rules Kurt Jensen CISSP (Mar 26)
• Use dyndns to ignore my ip Andy (Feb 15)
  • Re: Use dyndns to ignore my ip Kevin Ross (Feb 15)
  • Re: Use dyndns to ignore my ip Jefferson, Shawn (Feb 15)
    • Re: Use dyndns to ignore my ip Jeremy Hoel (Feb 15)
      • Re: Use dyndns to ignore my ip waldo kitty (Feb 15)
      • Re: Use dyndns to ignore my ip Jeremy Hoel (Feb 15)
      • Re: Use dyndns to ignore my ip waldo kitty (Feb 15)
      • Re: Use dyndns to ignore my ip Jeremy Hoel (Feb 15)
    • Re: Use dyndns to ignore my ip waldo kitty (Feb 15)
  • Re: Use dyndns to ignore my ip waldo kitty (Feb 15)
• configure options for 2.9.4 John York (Feb 15)
  • Re: configure options for 2.9.4 Russ Combs (Feb 15)
  • Re: configure options for 2.9.4 waldo kitty (Feb 15)
• preprocessor sfportscan does not generate alerts Marc Belanger (Feb 15)
  • Re: preprocessor sfportscan does not generate alerts waldo kitty (Feb 15)
    • Re: preprocessor sfportscan does not generate alerts Marc Belanger (Feb 18)
      • Re: preprocessor sfportscan does not generate alerts waldo kitty (Feb 18)
      • Re: preprocessor sfportscan does not generate alerts johnny.venter (Feb 25)
      • Re: preprocessor sfportscan does not generate alerts waldo kitty (Feb 25)
• Snort CPU usage Josh Bitto (Feb 18)
  • Re: Snort CPU usage Josh Bitto (Feb 18)
    • Re: Snort CPU usage waldo kitty (Feb 18)
      • Re: Snort CPU usage Josh Bitto (Feb 19)
    • Re: Snort CPU usage Mike Miller (Feb 18)
      • Re: Snort CPU usage Josh Bitto (Feb 19)
• Snort and IM Josh Bitto (Feb 18)
  • Re: Snort and IM Dustin Webber (Feb 18)
    • Re: Snort and IM Josh Bitto (Feb 18)
      • Re: Snort and IM Dustin Webber (Feb 18)
      • Re: Snort and IM Josh Bitto (Feb 18)
      • Re: Snort and IM Josh Bitto (Feb 18)
      • Re: Snort and IM Dustin Webber (Feb 18)
      • Re: Snort and IM Josh Bitto (Feb 18)
      • Re: Snort and IM Dustin Webber (Feb 18)
      • Re: Snort and IM Josh Bitto (Feb 18)
      • Re: Snort and IM Joel Esler (Feb 18)
      • Re: Snort and IM JJ Cummings (Feb 18)
      • Re: Snort and IM waldo kitty (Feb 18)
      • Re: Snort and IM James Lay (Feb 18)
      • Re: Snort and IM waldo kitty (Feb 18)
      • Re: Snort and IM Josh Bitto (Feb 18)
• Problem with Barnyard sending stuff to Mysql Bouchra Badri (Feb 18)
• snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 19)
  • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ray Caparros (Feb 19)
    • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ayodele Okeowo (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ayodele Okeowo (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ayodele Okeowo (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ayodele Okeowo (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 19)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Kaushal Shriyan (Feb 21)
      • Re: snort daemon to listen to eth2 and eth3 in promiscuous mode Ayodele Okeowo (Feb 21)
• Recommended daq pcap bpf buffer size? elof (Feb 19)
• Bad performance x 2 when using net.bpf.zerocopy_enable=1 on FreeBSD 9.1 elof (Feb 19)
  • Re: Bad performance x 2 when using net.bpf.zerocopy_enable=1 on FreeBSD 9.1 Victor Roemer (Feb 19)
    • Re: [Snort-devel] Bad performance x 2 when using net.bpf.zerocopy_enable=1 on FreeBSD 9.1 elof (Feb 20)
      • Re: [Snort-devel] Bad performance x 2 when using net.bpf.zerocopy_enable=1 on FreeBSD 9.1 Victor Roemer (Feb 20)
      • Re: Bad performance x 2 when using net.bpf.zerocopy_enable=1 on FreeBSD 9.1 elof (Feb 21)
• Remove outside from mailing list Vo Van Pho (Feb 19)
  • Re: Remove outside from mailing list Vo Van Pho (Feb 19)
• network interface Muteb Alqahtani (Feb 19)
  • Re: network interface Josh Bitto (Feb 19)
• Mandiant APT1 Report James Lay (Feb 19)
  • Re: Mandiant APT1 Report Joel Esler (Feb 19)
    • Re: [Emerging-Sigs] Mandiant APT1 Report Christopher Granger (Feb 20)
• Test traffic Yonas Abebe (Feb 19)
  • Re: Test traffic Josh Bitto (Feb 19)
    • Re: Test traffic Heine Lysemose (Feb 19)
      • Message not available
      • Re: Test traffic Tony Robinson (Feb 19)
      • Re: Test traffic Jason Wallace (Feb 19)
• Cannot get alert from dynamic_example preprocessor in output Андрей Меньков (Feb 19)
  • Re: Cannot get alert from dynamic_example preprocessor in output Victor Roemer (Feb 19)
    • Re: Cannot get alert from dynamic_example preprocessor in output Андрей Меньков (Feb 19)
      • Re: Cannot get alert from dynamic_example preprocessor in output Андрей Меньков (Feb 19)
• Sourcefire VRT Certified Snort Rules Update 2013-02-19 Research (Feb 19)
• Good Snort Writing Post James Lay (Feb 19)
• stream5 prune_log_max fix Gregory S Thomas (Feb 19)
• 403 Error when attempting to pull rules using Pulled-Pork Tamara Fisher (Feb 20)
  • Re: 403 Error when attempting to pull rules using Pulled-Pork Joel Esler (Feb 20)
    • Re: 403 Error when attempting to pull rules using Pulled-Pork Tamara Fisher (Feb 20)
      • Re: 403 Error when attempting to pull rules using Pulled-Pork Joel Esler (Feb 20)
• snort rules to detect user and software trespass Hamid Ghanbari (Feb 20)
• Recent changes to SNORT 2.9.4.0 rulesets regarding PCRE syntax. Robert Cotter (Feb 20)
  • FW: Recent changes to SNORT 2.9.4.0 rulesets regarding PCRE syntax. Stark, Vernon L. (Feb 20)
    • Re: Recent changes to SNORT 2.9.4.0 rulesets regarding PCRE syntax. Robert Cotter (Feb 20)
      • Re: Recent changes to SNORT 2.9.4.0 rulesets regarding PCRE syntax. Joel Esler (Feb 20)
      • Re: Recent changes to SNORT 2.9.4.0 rulesets regarding PCRE syntax. Joel Esler (Feb 21)
• Help With Assignment Jeremy Golden (Feb 20)
  • Re: Help With Assignment waldo kitty (Feb 20)
• Problem showing traffic on BASE Bouchra Badri (Feb 20)
• Sig for 0 day browser java plugin? Miguel Alvarez (Feb 20)
• SNORT Installed properly But not Logging alerts ARUN PUSHKAR (Feb 20)
  • Re: SNORT Installed properly But not Logging alerts Dustin Webber (Feb 20)
    • Message not available
      • Re: SNORT Installed properly But not Logging alerts ARUN PUSHKAR (Feb 21)
• SNORT-2.9.4 Installed properly but NOT Logging ALERTS ARUN PUSHKAR (Feb 20)
• global threshold does not work on certain file-identity rules Clement Chen (Feb 20)
• Daemonlogger is not available C. L. Martinez (Feb 21)
  • Re: Daemonlogger is not available Joel Esler (Feb 21)
  • Re: Daemonlogger is not available Joel Esler (Feb 21)
• Problem with output file Quentin Vallin (Feb 21)
  • Re: Problem with output file Quentin Vallin (Feb 21)
    • Re: Problem with output file Johnny Venter (Feb 22)
      • Re: Problem with output file Quentin Vallin (Feb 25)
• Sourcefire VRT Certified Snort Rules Update 2013-02-21 Research (Feb 21)
  • <Possible follow-ups>
  • Sourcefire VRT Certified Snort Rules Update 2013-02-21 Research (Feb 21)
• Windows - Logging events to Application Log gets error Michael Steele (Feb 21)
• newbie question about pass and alert directive . (Feb 22)
  • Re: newbie question about pass and alert directive waldo kitty (Feb 22)
    • Re: newbie question about pass and alert directive Jason Wallace (Feb 22)
      • Re: newbie question about pass and alert directive waldo kitty (Feb 23)
• Assistance registering on snort.org - confirmation mail was refused by my server Marcio Merlone (Feb 22)
  • Re: Assistance registering on snort.org - confirmation mail was refused by my server Joel Esler (Feb 22)
• Anomaly-detection dynamic preprocessor Андрей Меньков (Feb 22)
  • Re: Anomaly-detection dynamic preprocessor Андрей Меньков (Feb 25)
    • Re: Anomaly-detection dynamic preprocessor Stephen Reese (Feb 25)
• Problem with acquiring traffic Alex Adamos (Feb 23)
  • Re: Problem with acquiring traffic waldo kitty (Feb 23)
    • Re: Problem with acquiring traffic Alex Adamos (Feb 23)
      • Re: Problem with acquiring traffic Alex Adamos (Feb 23)
    • Re: Problem with acquiring traffic Alex Adamos (Feb 25)
• Errors updating snort rules this morning C. L. Martinez (Feb 25)
• Rule download fails Guido Hungerbuehler (Feb 25)
  • Re: Rule download fails C. L. Martinez (Feb 25)
  • Re: Rule download fails Peter Bates (Feb 25)
    • Re: Rule download fails Joel Esler (Feb 25)
• Packet Drop in Preprocessor Yoshimasa Obana (Feb 25)
• Using a var in the conf and local rules honeybadger (Feb 25)
  • Re: Using a var in the conf and local rules waldo kitty (Feb 25)
  • Re: Using a var in the conf and local rules Lay, James (Feb 25)
    • Message not available
      • Re: Using a var in the conf and local rules Lay, James (Feb 25)
      • Re: Using a var in the conf and local rules Stephen Mintz (Feb 25)
      • Re: Using a var in the conf and local rules JJ Cummings (Feb 25)
      • Re: Using a var in the conf and local rules Joel Esler (Feb 25)
    • Re: Using a var in the conf and local rules Joel Esler (Feb 25)
• Default Snort Rules Document Retention (Feb 25)
  • Re: Default Snort Rules Joel Esler (Feb 25)
• Public Blacklist usage? Michael Steele (Feb 25)
  • Re: Public Blacklist usage? Joel Esler (Feb 25)
    • Re: Public Blacklist usage? Jeff Kell (Feb 25)
      • Re: Public Blacklist usage? Joel Esler (Feb 25)
• [PATCH] DAQ IPFW module packet injection fix Lawrence Teo (Feb 25)
  • Re: [PATCH] DAQ IPFW module packet injection fix Hui Cao (Feb 26)
• Error Prathibha P G (Feb 25)
  • Re: Error Joel Esler (Feb 26)
• SNORT PARALLELIZATION SECURITY ISSUES Amtul Saboor (Feb 26)
• Re: [Emerging-Sigs] Touched by a proxy: thoughts on urilen? L0rd Ch0de1m0rt (Feb 26)
  • Re: [Emerging-Sigs] Touched by a proxy: thoughts on urilen? Joel Esler (Feb 25)
• DAQ documentation and DPDK Eddie Harari (Feb 26)
• How does Snort implement PCRE (?C callout functionality in snort rule? Shields, Joseph (NIH/NIEHS) [C] (Feb 26)
• snort and http_inspect Ruyk (Feb 26)
  • Re: snort and http_inspect Joel Esler (Feb 26)
    • Re: snort and http_inspect Smit Smit (Feb 26)
      • Re: snort and http_inspect Joel Esler (Feb 27)
• snort as windows as service and logging to the windows event log snort (Feb 27)
• Sourcefire VRT Certified Snort Rules Update 2013-02-27 Research (Feb 27)
• Snort Version 2.9.4-WIN32 GRE (Build 40) on Windows 7 fails with the Error: Failed to parse the IP address: HORNER, LARRY J (Feb 27)
  • Re: Snort Version 2.9.4-WIN32 GRE (Build 40) on Windows 7 fails with the Error: Failed to parse the IP address: waldo kitty (Feb 27)
• About make command error Mayur Patil (Feb 28)
  • Re: About make command error waldo kitty (Feb 28)
    • Re: About make command error Mayur Patil (Mar 01)
      • Re: About make command error Hui Cao (Mar 01)
      • Re: About make command error Mayur Patil (Mar 01)
      • Re: About make command error Mayur Patil (Mar 02)
      • Re: About make command error waldo kitty (Mar 02)
• Front-end Ben Weber (Feb 28)
  • Re: Front-end Dustin Willis Webber (Feb 28)
  • Re: Front-end Doug Burks (Feb 28)
  • Re: Front-end Joel Esler (Mar 01)
• snort ip change breaks detection ntbuck12 (Feb 28)
  • Re: snort ip change breaks detection Joel Esler (Feb 28)
• Sourcefire VRT Certified Snort Rules Update 2013-02-28 Research (Feb 28)
• BPF filter syntax Eric G (Feb 28)
  • Re: BPF filter syntax Joel Esler (Mar 01)
• Snort doesn't write unified2 files as expected Mario Lupino (Mar 01)
  • Re: Snort doesn't write unified2 files as expected Joel Esler (Mar 01)
  • Re: Snort doesn't write unified2 files as expected Avery Rozar (Mar 01)
• Snort Processes randonly dies Avery Rozar (Mar 01)
  • Re: Snort Processes randonly dies Hui Cao (Mar 01)
    • Re: Snort Processes randonly dies Avery Rozar (Mar 01)
    • Re: Snort Processes randonly dies Avery Rozar (Mar 04)
      • Re: Snort Processes randonly dies Hui Cao (Mar 04)
      • Re: Snort Processes randonly dies Avery Rozar (Mar 04)
      • Re: Snort Processes randonly dies Hui Cao (Mar 04)
• help add rule while snort is running Prabhudev Avarasang (Mar 01)
  • Re: help add rule while snort is running James Lay (Mar 01)
  • Re: help add rule while snort is running waldo kitty (Mar 01)
• MiniDuke sigs? James Lay (Mar 01)
  • Re: MiniDuke sigs? Joel Esler (Mar 01)
    • Re: MiniDuke sigs? James Lay (Mar 01)
• Running Snort from User Account Tamara Fisher (Mar 04)
  • Re: Running Snort from User Account Joel Esler (Mar 04)
  • Re: Running Snort from User Account Michael J Wise (Mar 04)
• More APT1 info that needs to be made into snort rules Barry Weymes (Mar 04)
  • Re: More APT1 info that needs to be made into snort rules Joel Esler (Mar 04)
• How To Use Snort As An IDS GABRIEL OLADIPUPO (Mar 04)
  • Re: How To Use Snort As An IDS waldo kitty (Mar 04)
• Rules across tcp headers & http headers/payload Andy Richards (Mar 04)
  • Re: Rules across tcp headers & http headers/payload waldo kitty (Mar 04)
  • Re: Rules across tcp headers & http headers/payload lists () packetmail net (Mar 04)
    • Re: Rules across tcp headers & http headers/payload Andy Richards (Mar 05)
      • Re: Rules across tcp headers & http headers/payload lists () packetmail net (Mar 05)
• Snort as a predefined PID Avery Rozar (Mar 04)
  • Re: Snort as a predefined PID waldo kitty (Mar 04)
    • Re: Snort as a predefined PID Avery Rozar (Mar 04)
• SSH preprocessor Philip Edwards (Mar 04)
• DNS Query for .su TLD (Soviet Union) James (Mar 04)
  • Re: DNS Query for .su TLD (Soviet Union) waldo kitty (Mar 05)
• Snort 2.9.4.1 Now Available Snort Releases (Mar 05)
  • <Possible follow-ups>
  • Snort 2.9.4.1 Now Available Snort Releases (Mar 05)
• Monitor the transfer of files on Skype or other messaging software. Aisling Brennan (Mar 05)
  • Re: Monitor the transfer of files on Skype or other messaging software. Joel Esler (Mar 05)
• Funky packets James Lay (Mar 05)
  • Snort, SCADA and DigitalBond Andrea Modesto Rossi (Mar 05)
    • Re: Snort, SCADA and DigitalBond Joel Esler (Mar 05)
• Sourcefire VRT Certified Snort Rules Update 2013-03-05 Research (Mar 05)
• Snort sending mail with alerts in real-time Jeronimo L. Cabral (Mar 05)
• Snort distributions Alejandro Cabrera Obed (Mar 05)
  • Re: Snort distributions Heine Lysemose (Mar 05)
  • Re: Snort distributions Jaime Nebrera (Mar 06)
    • Re: Snort distributions Alejandro Cabrera Obed (Mar 06)
      • Re: Snort distributions Jaime Nebrera (Mar 06)
      • Re: Snort distributions Doug Burks (Mar 06)
      • Re: Snort distributions Jon M (Mar 06)
      • Re: Snort distributions Joel Esler (Mar 06)
      • Re: Snort distributions Alejandro Cabrera Obed (Mar 06)
    • Re: Snort distributions Livio Ricciulli (Mar 06)
      • Re: Snort distributions Jaime Nebrera (Mar 07)
• Safe browsing and proxies Aisling Brennan (Mar 05)
  • Re: Safe browsing and proxies Miller - CDLE, Michael (Mar 05)
• Add Data Into New Tables waseem sarwar (Mar 05)
  • Re: Add Data Into New Tables Joel Esler (Mar 05)
    • Re: Add Data Into New Tables waseem sarwar (Mar 05)
      • Re: Add Data Into New Tables waseem sarwar (Mar 05)
• Setting Snort policy_mode Ricky Huang (Mar 05)
  • Re: Setting Snort policy_mode Ricky Huang (Mar 05)
• [PATCH] Allow Snort to run as non-root with IPFW DAQ Lawrence Teo (Mar 05)
  • Re: [PATCH] Allow Snort to run as non-root with IPFW DAQ Todd Wease (Mar 06)
• Exists some problem to download rules?? C. L. Martinez (Mar 06)
  • Re: Exists some problem to download rules?? Joel Esler (Mar 06)
    • Re: Exists some problem to download rules?? C. L. Martinez (Mar 06)
      • Re: Exists some problem to download rules?? Joel Esler (Mar 06)
      • Re: Exists some problem to download rules?? C. L. Martinez (Mar 06)
      • Re: Exists some problem to download rules?? Joel Esler (Mar 06)
• Snort in Grid Computing Prathibha P G (Mar 06)
• Does Snort support country blocking Ricky Huang (Mar 06)
  • Re: Does Snort support country blocking JJC (Mar 06)
    • Re: Does Snort support country blocking Ricky Huang (Mar 06)
      • Re: Does Snort support country blocking JJC (Mar 06)
      • Re: Does Snort support country blocking Ricky Huang (Mar 06)
      • Re: Does Snort support country blocking JJC (Mar 06)
  • Re: Does Snort support country blocking Jaime Nebrera (Mar 06)
• Testing Snort functionality, or, how do I know if Snort really works? Ricky Huang (Mar 06)
  • Re: Testing Snort functionality, or, how do I know if Snort really works? JJC (Mar 06)
    • Re: Testing Snort functionality, or, how do I know if Snort really works? Ricky Huang (Mar 06)
      • Re: Testing Snort functionality, or, how do I know if Snort really works? JJC (Mar 06)
• New install questions. Sallee, Stephen (Jake) (Mar 06)
  • Re: New install questions. Heine Lysemose (Mar 06)
  • Re: New install questions. Joel Esler (Mar 06)
    • Re: New install questions. Doug Burks (Mar 06)
    • Re: New install questions. Sallee, Stephen (Jake) (Mar 06)
      • Re: New install questions. Greg Williams (Mar 06)
      • Re: New install questions. Sallee, Stephen (Jake) (Mar 06)
      • Re: New install questions. Gregory W. MacPherson (Mar 11)
      • Re: New install questions. Greg Williams (Mar 07)
  • <Possible follow-ups>
  • Re: New install questions. Sallee, Stephen (Jake) (Mar 07)
• Vendor Disclosure and plugging Joel Esler (Mar 06)
• "Adapter is in Passive Mode" Warning Ricky Huang (Mar 06)
  • Re: "Adapter is in Passive Mode" Warning Ricky Huang (Mar 08)
  • <Possible follow-ups>
  • Re: "Adapter is in Passive Mode" Warning Y M (Mar 08)
    • Re: "Adapter is in Passive Mode" Warning Russ Combs (Mar 08)
• Snort doc error (?) - rule option not optional? Ricky Huang (Mar 06)
  • <Possible follow-ups>
  • Re: Snort doc error (?) - rule option not optional? Y M (Mar 08)
    • Re: Snort doc error (?) - rule option not optional? Russ Combs (Mar 08)
      • Re: Snort doc error (?) - rule option not optional? Ricky Huang (Mar 08)
      • Re: Snort doc error (?) - rule option not optional? Russ Combs (Mar 08)
      • Re: Snort doc error (?) - rule option not optional? Ricky Huang (Mar 08)
• no IDS logs from snort Kevin Thomas (Mar 06)
  • Re: no IDS logs from snort James Lay (Mar 07)
  • Re: no IDS logs from snort Kevin Thomas (Mar 11)
    • Re: no IDS logs from snort Kevin Thomas (Mar 08)
      • Re: no IDS logs from snort Ray Caparros (Mar 09)
      • Re: no IDS logs from snort waldo kitty (Mar 09)
    • Re: no IDS logs from snort waldo kitty (Mar 11)
      • Re: no IDS logs from snort waldo kitty (Mar 11)
      • Re: no IDS logs from snort Kevin Thomas (Mar 11)
      • Re: no IDS logs from snort Ray Caparros (Mar 11)
      • Re: no IDS logs from snort Joel Esler (Mar 11)
      • Re: no IDS logs from snort waldo kitty (Mar 11)
• Tagged Packet in the new snort? Yossi (Mar 07)
• PulledPork New Snort Categories Tamara Fisher (Mar 07)
  • Re: PulledPork New Snort Categories Justin Knox (Mar 07)
    • Re: PulledPork New Snort Categories Tamara Fisher (Mar 07)
    • Re: PulledPork New Snort Categories Joel Esler (Mar 07)
      • Re: PulledPork New Snort Categories JJC (Mar 07)
• UDP on port 6667 Aisling Brennan (Mar 07)
  • Re: UDP on port 6667 JJC (Mar 07)
  • Re: UDP on port 6667 lists () packetmail net (Mar 07)
• Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 07)
  • <Possible follow-ups>
  • FW: Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 07)
    • Re: Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 26)
      • Re: Snort rule for a pattern match? Joel Esler (Mar 26)
      • Re: Snort rule for a pattern match? Jamie Riden (Mar 26)
  • Re: Snort rule for a pattern match? Lay, James (Mar 26)
    • Re: Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 26)
      • Re: Snort rule for a pattern match? Lay, James (Mar 27)
      • Re: Snort rule for a pattern match? lists () packetmail net (Mar 27)
      • Re: Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 27)
      • Re: Snort rule for a pattern match? Shields, Joseph (NIH/NIEHS) [C] (Mar 27)
      • Re: Snort rule for a pattern match? lists () packetmail net (Mar 27)
      • Re: Snort rule for a pattern match? Joel Esler (Mar 27)
• Sourcefire VRT Certified Snort Rules Update 2013-03-07 Research (Mar 07)
• Signature for bridging protocols Juan Camilo Valencia (Mar 07)
  • Signature for bridging protocols Juan Camilo Valencia (Mar 10)
• Snort rules problem Tural Nazirov (Mar 07)
  • <Possible follow-ups>
  • Re: Snort rules problem Y M (Mar 08)
    • Re: Snort rules problem Joel Esler (Mar 08)
  • Re: Snort rules problem Y M (Mar 08)
• Mis-Matching traffic with PCRE Rules waseem sarwar (Mar 08)
  • Re: Mis-Matching traffic with PCRE Rules Joel Esler (Mar 08)
    • Re: Mis-Matching traffic with PCRE Rules waseem sarwar (Mar 08)
      • Re: Mis-Matching traffic with PCRE Rules Todd Wease (Mar 08)
    • Re: Mis-Matching traffic with PCRE Rules Joshua Kinard (Mar 08)
• Can't start DAQ (-1) - ipfw_daq_start: can't create divert socket Ricky Huang (Mar 08)
  • Re: Can't start DAQ (-1) - ipfw_daq_start: can't create divert socket Lawrence Teo (Mar 08)
    • Re: Can't start DAQ (-1) - ipfw_daq_start: can't create divert socket Ricky Huang (Mar 11)
      • Re: Can't start DAQ (-1) - ipfw_daq_start: can't create divert socket Russ Combs (Mar 12)
      • Re: Can't start DAQ (-1) - ipfw_daq_start: can't create divert socket Ricky Huang (Mar 12)
• Error initializing rule chains Jim Turner (Mar 09)
  • Re: Error initializing rule chains waldo kitty (Mar 09)
• CPU and RAM planning tool Sallee, Stephen (Jake) (Mar 09)
  • Re: CPU and RAM planning tool Joel Esler (Mar 10)
    • Re: CPU and RAM planning tool Sallee, Stephen (Jake) (Mar 10)
  • Message not available
    • Re: CPU and RAM planning tool Sallee, Stephen (Jake) (Mar 10)
• snort.conf has been deleted ali hamza (Mar 10)
  • Re: snort.conf has been deleted Joel Esler (Mar 11)
• startup error on with blacklist rules Jim Turner (Mar 11)
  • Re: startup error on with blacklist rules Joel Esler (Mar 11)
    • Re: startup error on with blacklist rules Jim Turner (Mar 11)
• Rule Snort Ping Flood yayantritaryana (Mar 11)
  • Re: Rule Snort Ping Flood Joel Esler (Mar 11)
• Snort with Kiwi Sys Log Jeremy Golden (Mar 11)
  • Re: Snort with Kiwi Sys Log Greg Williams (Mar 11)
• Snort log: Source MAC address record Ayodele Okeowo (Mar 11)
  • <Possible follow-ups>
  • Re: Snort log: Source MAC address record Y M (Mar 11)
    • Re: Snort log: Source MAC address record Ayodele Okeowo (Mar 11)
• Questions with this Snort IPS setup Ricky Huang (Mar 11)
  • Re: Questions with this Snort IPS setup waldo kitty (Mar 12)
    • Re: Questions with this Snort IPS setup Ricky Huang (Mar 12)
• Error app-detect.rules (18) Unknown ClassType: Jim Turner (Mar 11)
  • Re: Error app-detect.rules (18) Unknown ClassType: Jim Turner (Mar 11)
    • Re: Error app-detect.rules (18) Unknown ClassType: waldo kitty (Mar 12)
      • Re: Error app-detect.rules (18) Unknown ClassType: Joel Esler (Mar 12)
• help me manel affi (Mar 12)
• botnets Pratik Narang (Mar 12)
  • Re: botnets Pratik Narang (Mar 21)
    • Re: botnets Livio Ricciulli (Mar 21)
      • Re: botnets Pratik Narang (Mar 24)
      • Re: botnets Gregory Pendergast (Mar 24)
      • Re: botnets salawank (Mar 24)
  • <Possible follow-ups>
  • Re: botnets John York (Mar 22)
    • Re: botnets Joel Esler (Mar 22)
      • Re: botnets Livio Ricciulli (Mar 22)
• BASE 100% TCP ? Joao Daniel Neves (Mar 12)
  • Re: BASE 100% TCP ? Jeremy Hoel (Mar 12)
  • Re: BASE 100% TCP ? Mike Miller (Mar 12)
    • Re: BASE 100% TCP ? Joao Daniel Neves (Mar 13)
• Still trying to build this box Jim Turner (Mar 12)
  • Re: Still trying to build this box James Lay (Mar 12)
    • Re: Still trying to build this box Jim Turner (Mar 12)
  • Re: Still trying to build this box waldo kitty (Mar 12)
    • Re: Still trying to build this box Jim Turner (Mar 12)
      • Re: Still trying to build this box waldo kitty (Mar 12)
      • Re: Still trying to build this box Jim Turner (Mar 12)
• syslog problems persist ntbuck12 (Mar 12)
  • Re: syslog problems persist [SOLVED] ntbuck12 (Mar 13)
• Rule assist James Lay (Mar 12)
  • Re: Rule assist rmkml (Mar 12)
    • Re: Rule assist rmkml (Mar 12)
  • Re: Rule assist Nathan Benson (Mar 12)
  • Re: Rule assist James Lay (Mar 12)
    • Re: Rule assist Joel Esler (Mar 12)
• Creating Your Own Snort Rule? Jeremy Golden (Mar 12)
  • Re: Creating Your Own Snort Rule? waldo kitty (Mar 12)
    • Re: Creating Your Own Snort Rule? Jeremy Hoel (Mar 12)
    • Message not available
      • Re: Creating Your Own Snort Rule? waldo kitty (Mar 12)
• Re: message Chamila Garusinghe (Mar 12)
• Sourcefire VRT Certified Snort Rules Update 2013-03-12 Research (Mar 12)
• PCAP and Snort for Windows Jim Turner (Mar 12)
  • Re: PCAP and Snort for Windows Joel Esler (Mar 12)
• config files for 2.9.4.1 Gregory S Thomas (Mar 12)
  • Re: config files for 2.9.4.1 Joel Esler (Mar 12)
• Is Ipv6 Support in Snort Complete ? Prabhakaran Kasinathan (Mar 13)
  • Re: Is Ipv6 Support in Snort Complete ? Joel Esler (Mar 13)
• Bug in stream5 global - prune_log_max <bytes> elof (Mar 13)
  • <Possible follow-ups>
  • Re: Bug in stream5 global - prune_log_max <bytes> Gregory S Thomas (Mar 13)
    • Re: Bug in stream5 global - prune_log_max <bytes> Bhagya Bantwal (Mar 13)
• stream5 and track_icmp elof (Mar 13)
  • Re: stream5 and track_icmp Joel Esler (Mar 16)
• Unified2 logging bug in snort 2.9.4 (Build 40) elof (Mar 13)
  • Re: Unified2 logging bug in snort 2.9.4 (Build 40) Bhagya Bantwal (Mar 13)
    • Re: Unified2 logging bug in snort 2.9.4 (Build 40) elof (Mar 15)
      • Re: Unified2 logging bug in snort elof (Mar 19)
      • Re: Unified2 logging bug in snort elof (Mar 23)
• Errors after upgrade to 2.9.4.1 Alexander Grüner (Mar 13)
  • Re: Errors after upgrade to 2.9.4.1 waldo kitty (Mar 13)
    • Re: Errors after upgrade to 2.9.4.1 Alexander Grüner (Mar 14)
      • Re: Errors after upgrade to 2.9.4.1 waldo kitty (Mar 14)
• Using Snort in Virtual Machines with PF_RING Ayodele Okeowo (Mar 13)
  • Re: Using Snort in Virtual Machines with PF_RING Ayodele Okeowo (Mar 13)
• rule creation Leonardo Pezente (Mar 13)
  • Re: rule creation JJC (Mar 13)
    • Re: rule creation Jeremy Hoel (Mar 13)
      • Re: rule creation JJ Cummings (Mar 13)
• Rule question.. SID 1:1000103 Jeremy Hoel (Mar 13)
  • Re: Rule question.. SID 1:1000103 waldo kitty (Mar 13)
    • Re: Rule question.. SID 1:1000103 Jeremy Hoel (Mar 13)
• sid-msg.map Johnny Venter (Mar 14)
  • Re: sid-msg.map Jeremy Hoel (Mar 14)
    • Re: sid-msg.map johnny.venter (Mar 19)
      • Re: sid-msg.map Y M (Mar 19)
  • Re: sid-msg.map beenph (Mar 14)
  • Re: sid-msg.map Joel Esler (Mar 19)
• Sourcefire VRT Certified Snort Rules Update 2013-03-14 Research (Mar 14)
  • <Possible follow-ups>
  • Sourcefire VRT Certified Snort Rules Update 2013-03-14 Research (Mar 14)
• Snort only working on one side of traffic and no flow Harley H (Mar 14)
  • Re: Snort only working on one side of traffic and no flow Bhagya Bantwal (Mar 15)
• Segmentation Fault After Rule Update Stark, Vernon L. (Mar 14)
  • Re: Segmentation Fault After Rule Update Joel Esler (Mar 14)
    • Re: Segmentation Fault After Rule Update Stark, Vernon L. (Mar 14)
      • Re: Segmentation Fault After Rule Update Joel Esler (Mar 14)
• bug in sfutil/sfrt.c Mitesh Jadia (Mar 15)
  • Re: bug in sfutil/sfrt.c Joel Esler (Mar 15)
• hey! 黃 huang (Mar 15)
• help snort Quoc tuan Pham (Mar 16)
• question for snort flow established zhaojunling_20 (Mar 16)
  • Re: question for snort flow established waldo kitty (Mar 16)
    • Re: question for snort flow established zhaojunling_20 (Mar 16)
      • Re: question for snort flow established zhaojunling_20 (Mar 16)
      • Re: question for snort flow established zhaojunling_20 (Mar 17)
      • Re: question for snort flow established zhaojunling_20 (Mar 17)
      • Re: question for snort flow established waldo kitty (Mar 18)
      • Re: question for snort flow established JJ Cummings (Mar 18)
      • Re: question for snort flow established waldo kitty (Mar 18)
      • Re: question for snort flow established Joel Esler (Mar 18)
      • Re: question for snort flow established waldo kitty (Mar 18)
      • Re: question for snort flow established Jason (Mar 18)
      • Re: question for snort flow established Joel Esler (Mar 18)
      • Re: question for snort flow established waldo kitty (Mar 18)
• problems in snort installing. Mohammad MontazerI (Mar 16)
  • Re: problems in snort installing. waldo kitty (Mar 16)
    • Message not available
      • Re: problems in snort installing. waldo kitty (Mar 17)
      • Re: problems in snort installing. Mohammad MontazerI (Mar 18)
      • Re: problems in snort installing. JJC (Mar 18)
      • Message not available
      • Fw: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: Fw: problems in snort installing. Joel Esler (Mar 19)
      • Re: Fw: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: Fw: problems in snort installing. Joel Esler (Mar 19)
      • Re: problems in snort installing. Mike Miller (Mar 19)
      • Message not available
      • Re: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: problems in snort installing. Joel Esler (Mar 19)
      • Message not available
      • Re: problems in snort installing. Joel Esler (Mar 19)
      • Re: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: problems in snort installing. JJC (Mar 19)
      • Re: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: problems in snort installing. Joel Esler (Mar 19)
      • Re: problems in snort installing. Mohammad MontazerI (Mar 19)
      • Re: problems in snort installing. Joel Esler (Mar 19)
      • Re: problems in snort installing. waldo kitty (Mar 20)
• help snort 2.9.4 Bảo Gió (Mar 17)
  • Re: help snort 2.9.4 Heine Lysemose (Mar 18)
• 403 error :( ali hamza (Mar 18)
  • Re: 403 error :( Heine Lysemose (Mar 18)
  • Re: 403 error :( waldo kitty (Mar 18)
    • Re: 403 error :( ali hamza (Mar 19)
      • Re: 403 error :( Joel Esler (Mar 19)
• Syslog Help Kevin Ross (Mar 18)
  • Re: Syslog Help Peter Bates (Mar 18)
    • Re: Syslog Help Joel Esler (Mar 18)
      • Re: Syslog Help Kevin Ross (Mar 18)
  • Re: Syslog Help beenph (Mar 19)
    • Re: Syslog Help Kevin Ross (Mar 20)
      • Re: Syslog Help beenph (Mar 20)
• Non-root user for DAQ nfq Chinmay Mahata (Mar 18)
• HA feature available for Snort NIDS/NIPS Engine Kaushal Shriyan (Mar 18)
  • Re: HA feature available for Snort NIDS/NIPS Engine Joel Esler (Mar 18)
    • Re: HA feature available for Snort NIDS/NIPS Engine Mike Becker (Mar 18)
  • Re: HA feature available for Snort NIDS/NIPS Engine Kevin Ross (Mar 18)
    • Re: HA feature available for Snort NIDS/NIPS Engine Mike Miller (Mar 18)
• Hardware Requirement for Snort NIDS/NIPS Engine Kaushal Shriyan (Mar 18)
  • Re: Hardware Requirement for Snort NIDS/NIPS Engine Joel Esler (Mar 18)
• Easy way to output alert and Hex+ASCII pcap data? Mike Cox (Mar 18)
  • Re: Easy way to output alert and Hex+ASCII pcap data? Joel Esler (Mar 18)
    • Re: Easy way to output alert and Hex+ASCII pcap data? Mike Cox (Mar 18)
  • Re: Easy way to output alert and Hex+ASCII pcap data? waldo kitty (Mar 18)
• Writing a "not" snort rule ntbuck12 (Mar 19)
  • Re: Writing a "not" snort rule JJC (Mar 19)
    • Re: Writing a "not" snort rule ntbuck12 (Mar 19)
• null ports in snort database palestine group (Mar 19)
• Re: Automatically decoding of Teredo traffic L0rd Ch0de1m0rt (Mar 19)
  • Re: Automatically decoding of Teredo traffic Russ Combs (Mar 20)
    • Re: Automatically decoding of Teredo traffic L0rd Ch0de1m0rt (Mar 20)
      • Re: Automatically decoding of Teredo traffic Joel Esler (Mar 20)
      • Re: Automatically decoding of Teredo traffic L0rd Ch0de1m0rt (Mar 20)
      • Re: Automatically decoding of Teredo traffic L0rd Ch0de1m0rt (Mar 26)
      • Re: Automatically decoding of Teredo traffic Joel Esler (Mar 26)
      • Re: Automatically decoding of Teredo traffic L0rd Ch0de1m0rt (Mar 29)
• About Snort Inline Tural Nazirov (Mar 19)
  • Re: About Snort Inline JJC (Mar 19)
• Sourcefire VRT Certified Snort Rules Update 2013-03-19 Research (Mar 19)
• Alert file Mohammad MontazerI (Mar 19)
  • Re: Alert file Ricky Huang (Mar 20)
    • Re: Alert file Mohammad MontazerI (Mar 20)
      • Re: Alert file waldo kitty (Mar 20)
      • Re: Alert file Mohammad MontazerI (Mar 20)
      • Re: Alert file waldo kitty (Mar 21)
  • Re: Alert file salawank (Mar 20)
    • Message not available
      • Re: Alert file Mohammad MontazerI (Mar 20)
  • Re: Alert file waldo kitty (Mar 20)
• Options installed in the snort binary annie.st-germain (Mar 20)
• Question About Threshholds Miso Patel (Mar 20)
  • Re: Question About Threshholds Alex Kirk (Mar 20)
• Re: Unknown ClassType 严骞 (Mar 20)
  • Re: Unknown ClassType waldo kitty (Mar 21)
• Sourcefire VRT Certified Snort Rules Update 2013-03-21 Research (Mar 21)
• Snort.org Blog: VRT Rule License Change v2.0 Joel Esler (Mar 22)
  • Re: Snort.org Blog: VRT Rule License Change v2.0 lists () packetmail net (Mar 22)
• Alarm rule specific to a network session Knut Borg (Mar 22)
  • Re: Alarm rule specific to a network session Joel Esler (Mar 22)
• Errors installing SNORT 2.9 to SuSE Linux 12.2 - rpm or tar.gz Kurt Jensen CISSP (Mar 22)
  • Re: Errors installing SNORT 2.9 to SuSE Linux 12.2 - rpm or tar.gz Joel Esler (Mar 22)
    • Re: Errors installing SNORT 2.9 to SuSE Linux 12.2 - rpm or tar.gz Kurt Jensen CISSP (Mar 23)
• Recommended hardware for running snort in packet logging mode on home network proxy? John Michael Kane (Mar 22)
  • Re: Recommended hardware for running snort in packet logging mode on home network proxy? Mike Miller (Mar 22)
    • Re: Recommended hardware for running snort in packet logging mode on home network proxy? Greg Williams (Mar 23)
• Reverse shell connections Aisling Brennan (Mar 23)
  • Re: Reverse shell connections waldo kitty (Mar 23)
    • Re: Reverse shell connections Peter Bates (Mar 29)
      • Re: Reverse shell connections waldo kitty (Mar 29)
• Using pulled pork to change rule state from alert to drop for a policy type Tony Robinson (Mar 24)
  • Re: Using pulled pork to change rule state from alert to drop for a policy type Joel Esler (Mar 24)
  • Re: Using pulled pork to change rule state from alert to drop for a policy type Yossi Nachum (Mar 25)
    • Re: Using pulled pork to change rule state from alert to drop for a policy type JJC (Mar 25)
  • Re: Using pulled pork to change rule state from alert to drop for a policy type waldo kitty (Mar 25)
    • Re: Using pulled pork to change rule state from alert to drop for a policy type Tony Robinson (Mar 27)
• Unable to access Ruleset of 21 March Y M (Mar 24)
  • Re: Unable to access Ruleset of 21 March Joel Esler (Mar 24)
• Reverse shell Aisling Brennan (Mar 25)
  • Re: Reverse shell Jamie Riden (Mar 25)
    • Re: Reverse shell Castle, Shane (Mar 25)
• Sensor Location Phil Daws (Mar 25)
• About DAQ error Mayur Patil (Mar 25)
• Re: deny default outbound (was Reverse shell) Bennett Todd (Mar 25)
  • Re: deny default outbound (was Reverse shell) Castle, Shane (Mar 25)
    • Re: deny default outbound (was Reverse shell) Bennett Todd (Mar 25)
• Logging - A easy way ? Joao Daniel Neves (Mar 25)
  • Re: Logging - A easy way ? Jeremy Hoel (Mar 25)
    • Re: Logging - A easy way ? Joao Daniel Neves (Mar 25)
      • Re: Logging - A easy way ? Jeremy Hoel (Mar 25)
      • Re: Logging - A easy way ? Joao Daniel Neves (Mar 26)
      • Re: Logging - A easy way ? Michael Steele (Mar 26)
      • Re: Logging - A easy way ? Jeremy Hoel (Mar 26)
      • Re: Logging - A easy way ? Joao Daniel Neves (Mar 27)
      • Re: Logging - A easy way ? Jeremy Hoel (Mar 27)
• best suited linux distro for snort? ali hamza (Mar 26)
  • Re: best suited linux distro for snort? Gregory W. MacPherson (Mar 26)
    • Re: best suited linux distro for snort? Jeremy Hoel (Mar 26)
      • Re: best suited linux distro for snort? Joel Esler (Mar 26)
      • Re: best suited linux distro for snort? Doug Burks (Mar 26)
      • Re: best suited linux distro for snort? Jeremy Hoel (Mar 26)
      • Re: best suited linux distro for snort? Ray Caparros (Mar 26)
      • Re: best suited distro for snort? Mohammad MontazerI (Mar 26)
      • Re: best suited distro for snort? Jeremy Hoel (Mar 27)
      • Re: best suited linux distro for snort? Joel Esler (Mar 26)
• Snort Alert[1:16482:8] Kee, Scott (Mar 26)
  • Re: Snort Alert[1:16482:8] Castle, Shane (Mar 26)
    • Re: Snort Alert[1:16482:8] Michael Steele (Mar 26)
      • Re: Snort Alert[1:16482:8] James Lay (Mar 26)
      • Re: Snort Alert[1:16482:8] Kee, Scott (Mar 26)
      • Re: Snort Alert[1:16482:8] waldo kitty (Mar 26)
      • Re: Snort Alert[1:16482:8] Alex Kirk (Mar 26)
    • Re: Snort Alert[1:16482:8] Kee, Scott (Mar 27)
• Sourcefire VRT Certified Snort Rules Update 2013-03-26 Research (Mar 26)
• Blocking ip's with snort blacklist Dmitry Korzhevin (Mar 26)
  • Re: Blocking ip's with snort blacklist Jeremy Hoel (Mar 26)
  • Re: Blocking ip's with snort blacklist Joel Esler (Mar 26)
    • Re: Blocking ip's with snort blacklist Dmitry Korzhevin (Mar 26)
      • Re: Blocking ip's with snort blacklist Joel Esler (Mar 26)
      • Re: Blocking ip's with snort blacklist waldo kitty (Mar 26)
• ERROR: parser.c(5302) ali hamza (Mar 27)
  • Re: ERROR: parser.c(5302) waldo kitty (Mar 28)
• SDF Triggering Phil Daws (Mar 27)
• Snort alert Quentin Vallin (Mar 27)
  • Re: Snort alert Ricky Huang (Mar 27)
    • Re: Snort alert Quentin Vallin (Mar 28)
  • Re: Snort alert waldo kitty (Mar 28)
• Output: CSV and interface Phil Daws (Mar 27)
  • Re: Output: CSV and interface beenph (Mar 27)
• Snort.org Blog: The Sourcefire VRT Community ruleset is live! Joel Esler (Mar 27)
• DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
  • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
    • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
    • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
      • Message not available
      • Re: DAQ 2.0.0 Error with 2.9.4.1 Nicholas Horton (Mar 27)
• Any signtures snort or emerging for these threats? Aisling Brennan (Mar 28)
  • Re: Any signtures snort or emerging for these threats? lists () packetmail net (Mar 28)
• general questions Mohammad MontazerI (Mar 28)
  • Re: general questions Ricky Huang (Mar 28)
    • Re: general questions Mohammad MontazerI (Mar 29)
      • Re: general questions Heine Lysemose (Mar 29)
      • Message not available
      • Re: general questions Mohammad MontazerI (Mar 29)
      • Re: general questions Jeremy Hoel (Mar 29)
      • Re: general questions Mohammad MontazerI (Mar 29)
      • Re: general questions Jeremy Hoel (Mar 29)
      • Re: general questions Mohammad MontazerI (Mar 29)
      • Re: general questions Jeremy Hoel (Mar 29)
      • Re: general questions waldo kitty (Mar 29)
      • Re: general questions Mohammad MontazerI (Mar 29)
      • Re: general questions Jeremy Hoel (Mar 30)
      • Re: general questions waldo kitty (Mar 29)
      • Re: general questions waldo kitty (Mar 29)
      • Re: general questions waldo kitty (Mar 29)
      • Re: general questions waldo kitty (Mar 29)
• PP and community rules Lay, James (Mar 28)
  • Re: PP and community rules Phil Daws (Mar 28)
    • Re: PP and community rules Joel Esler (Mar 28)
      • Re: PP and community rules Lay, James (Mar 28)
• Snort alert file missing? Nicholas Bogart (Mar 28)
  • Re: Snort alert file missing? Joel Esler (Mar 28)
    • Re: Snort alert file missing? elof (Mar 28)
• Sourcefire VRT Certified Snort Rules Update 2013-03-28 Research (Mar 28)
• User add in centOs Mohammad MontazerI (Mar 29)
  • Re: User add in centOs Mark W. Jeanmougin (Mar 29)
• snort-2.9.4.1 startup message: Can't start DAQ (-1) .. Fatal Error, Quitting.. Maple Thorpe (Mar 29)
• Problem with sensitive-data:email addresses rule Gregory Pendergast (Mar 30)
  • Re: Problem with sensitive-data:email addresses rule waldo kitty (Mar 30)
    • Re: Problem with sensitive-data:email addresses rule waldo kitty (Mar 30)
• Community Ruleset Clarification Michael Steele (Mar 30)
  • Re: Community Ruleset Clarification Joel Esler (Mar 30)
    • Re: Community Ruleset Clarification Michael Steele (Mar 30)

Previous period

Next period