Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

825 messages starting Oct 01 13 and ending Dec 31 13
Date index | Thread index | Author index

• @processing packets left by snort anagha b (Oct 01)
• SIP scanner sig Y M (Oct 01)
  • Re: SIP scanner sig Alex McDonnell (Oct 01)
    • Re: SIP scanner sig Y M (Oct 01)
      • Re: SIP scanner sig Alex McDonnell (Oct 01)
  • <Possible follow-ups>
  • Re: SIP scanner sig Y M (Oct 01)
• Sourcefire VRT Certified Snort Rules Update 2013-10-01 Research (Oct 01)
• IE 0-day James Lay (Oct 01)
  • Re: IE 0-day Joel Esler (Oct 01)
    • Re: IE 0-day James Lay (Oct 01)
• Snort.org down? Jeremy Hoel (Oct 01)
  • Re: Snort.org down? Jeremy Hoel (Oct 01)
• Re: SnortID.com website Randal T. Rioux (Oct 02)
  • Re: SnortID.com website Joel Esler (Oct 02)
    • Re: SnortID.com website Randal T. Rioux (Oct 02)
      • Re: SnortID.com website Joel Esler (Oct 02)
• Classification Number Mapping LaTonya Hall (Oct 02)
  • Fwd: Classification Number Mapping LaTonya Hall (Oct 02)
  • Re: Classification Number Mapping James Lay (Oct 02)
• problem with snort configure script and libpcap Youngquist, Jason R. (Oct 02)
  • Re: problem with snort configure script and libpcap James Lay (Oct 02)
• Need help: Snort not logging properly Ashu Singh (Oct 03)
  • Re: Need help: Snort not logging properly James Lay (Oct 03)
• Sourcefire VRT Certified Snort Rules Update 2013-10-03 Research (Oct 03)
• Re: Barnyard2 showing no records Randal T. Rioux (Oct 03)
• Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 04)
  • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 04)
  • Re: Unrecognised syslog facility/priority in snort praveen_recker . (Oct 04)
  • Fwd: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 07)
    • Message not available
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 08)
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 09)
  • <Possible follow-ups>
  • Re: Unrecognised syslog facility/priority in snort wkitty42 (Oct 09)
    • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 09)
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 11)
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 11)
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 11)
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 11)
      • Message not available
      • Re: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 13)
      • Re: Unrecognised syslog facility/priority in snort praveen_recker . (Oct 13)
      • Message not available
      • Fwd: Unrecognised syslog facility/priority in snort Mayur Patil (Oct 17)
      • Re: Fwd: Unrecognised syslog facility/priority in snort Peter Bates (Oct 18)
• Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) Mathewson, Nathan (Oct 04)
  • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) James Lay (Oct 04)
  • <Possible follow-ups>
  • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) nicenate (Oct 07)
    • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) Joel Esler (Oct 07)
• Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) nicenate (Oct 04)
  • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) James Lay (Oct 04)
  • <Possible follow-ups>
  • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) nicenate (Oct 04)
    • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) Joel Esler (Oct 06)
      • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) Jeff Kell (Oct 06)
      • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) Joel Esler (Oct 07)
  • Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) wkitty42 (Oct 05)
• [HOW-TO] Logging Snort alerts to Syslog and Splunk praveen_recker . (Oct 05)
  • Re: [HOW-TO] Logging Snort alerts to Syslog and Splunk Mayur Patil (Oct 05)
  • Re: [HOW-TO] Logging Snort alerts to Syslog and Splunk Chris Green (Oct 06)
• Snort - w3af integration to find malware in websites Andres Riancho (Oct 05)
• Re: Request assistance regarding VRT sig 1:27962 (MALWARE-CNC Win.Trojan.Storm botnet connection reset) nicenate (Oct 05)
• Snort Not logging alert Ashu Singh (Oct 05)
• Dynamic rules not initialized properly Hanson.Webster (Oct 07)
  • Re: Dynamic rules not initialized properly Y M (Oct 07)
  • <Possible follow-ups>
  • Re: Dynamic rules not initialized properly Y M (Oct 07)
• Question about snort rules Fernando Villegas (Oct 07)
  • Re: Question about snort rules Joel Esler (Oct 07)
    • Re: Question about snort rules Joel Esler (Oct 07)
  • <Possible follow-ups>
  • Question about snort rules Fernando Villegas Acevedo (Oct 11)
    • Fwd: Question about snort rules Fernando Villegas Acevedo (Oct 11)
• Beginner Rule Problem Kodiak80 (Oct 07)
  • Re: Beginner Rule Problem Joel Esler (Oct 08)
  • Re: Beginner Rule Problem Joel Esler (Oct 08)
  • <Possible follow-ups>
  • Re: Beginner Rule Problem Kodiak80 (Oct 10)
  • Re: Beginner Rule Problem wkitty42 (Oct 10)
    • Re: Beginner Rule Problem Joel Esler (Oct 11)
• how to specify collecting packets on more then one interface snorty (Oct 08)
  • Re: how to specify collecting packets on more then one interface Russ Combs (Oct 09)
  • <Possible follow-ups>
  • how to specify collecting packets on more then one interface snorty (Oct 11)
    • Re: how to specify collecting packets on more then one interface James Lay (Oct 11)
• Sourcefire VRT Certified Snort Rules Update 2013-10-08 Research (Oct 08)
• nmap -sT prevention Meysam Farazmand (Oct 09)
• 2955 sigs for registered users Turnbough, Bradley E. (Oct 09)
  • Re: 2955 sigs for registered users Joel Esler (Oct 09)
  • <Possible follow-ups>
  • Re: 2955 sigs for registered users wkitty42 (Oct 09)
    • Re: 2955 sigs for registered users Joel Esler (Oct 09)
  • Re: 2955 sigs for registered users wkitty42 (Oct 10)
    • Re: 2955 sigs for registered users Joel Esler (Oct 11)
• vBulletin 4.x and 5.x exploit in the wild James Lay (Oct 09)
  • Re: vBulletin 4.x and 5.x exploit in the wild Joel Esler (Oct 09)
• Re: Zbot variant sigs Y M (Oct 10)
  • Re: Zbot variant sigs Y M (Oct 10)
  • Re: Zbot variant sigs Joel Esler (Oct 11)
    • Re: Zbot variant sigs Y M (Oct 11)
• pulledpork not retrieving reg rules Roland RoLaNd (Oct 10)
  • Re: pulledpork not retrieving reg rules Heine Lysemose (Oct 10)
    • Re: pulledpork not retrieving reg rules Roland RoLaNd (Oct 10)
  • <Possible follow-ups>
  • Re: pulledpork not retrieving reg rules wkitty42 (Oct 10)
• ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. k vijay sai Prashanth (Oct 10)
  • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. Peter Bates (Oct 10)
  • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. k vijay sai Prashanth (Oct 10)
    • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. k vijay sai Prashanth (Oct 10)
      • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. k vijay sai Prashanth (Oct 10)
      • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. Peter Bates (Oct 10)
      • Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting.. Peter Bates (Oct 10)
• Zabbix for Snort performance monitoring Anshuman Anil Deshmukh (Oct 10)
  • Re: Zabbix for Snort performance monitoring Eric G (Oct 10)
    • Re: Zabbix for Snort performance monitoring Anshuman Anil Deshmukh (Oct 10)
• Zbot/Simda sig Y M (Oct 10)
  • Re: Zbot/Simda sig Y M (Oct 10)
• Sourcefire VRT Certified Snort Rules Update 2013-10-10 Research (Oct 10)
• ANY query rule Luis Daniel Lucio Quiroz (Oct 10)
  • <Possible follow-ups>
  • Re: ANY query rule wkitty42 (Oct 10)
    • Re: ANY query rule Luis Daniel Lucio Quiroz (Oct 10)
      • Re: ANY query rule Jeff Kell (Oct 10)
      • Re: ANY query rule Luis Daniel Lucio Quiroz (Oct 10)
  • Re: ANY query rule wkitty42 (Oct 11)
  • Re: ANY query rule wkitty42 (Oct 11)
• Interesting observation with with so rules James Lay (Oct 11)
  • <Possible follow-ups>
  • Re: Interesting observation with with so rules Y M (Oct 11)
    • Re: Interesting observation with with so rules James Lay (Oct 11)
      • Re: Interesting observation with with so rules Y M (Oct 11)
      • Re: Interesting observation with with so rules James Lay (Oct 11)
      • Re: Interesting observation with with so rules James Lay (Oct 11)
      • Re: Interesting observation with with so rules James Lay (Oct 11)
  • Re: Interesting observation with with so rules wkitty42 (Oct 11)
  • Re: Interesting observation with with so rules wkitty42 (Oct 11)
    • Re: Interesting observation with with so rules James Lay (Oct 12)
• Snort.org Blog: Snort VRT Default Ruleset Rebalancing Joel Esler (Oct 11)
• snort and BGP Jeff d'Ambly (Oct 11)
  • Re: snort and BGP James Lay (Oct 11)
    • Re: snort and BGP Jeff d'Ambly (Oct 15)
• RAR File Detection Ginski, Richard (Oct 11)
  • Re: RAR File Detection James Lay (Oct 11)
    • Re: RAR File Detection Ginski, Richard (Oct 14)
      • Re: RAR File Detection James Lay (Oct 14)
      • Re: RAR File Detection Ginski, Richard (Oct 14)
      • Re: RAR File Detection James Lay (Oct 14)
• Doing the KanKan James Lay (Oct 11)
  • Re: Doing the KanKan Joel Esler (Oct 11)
• Re: Zabbix for Snort performance monitoring [Solved] Anshuman Anil Deshmukh (Oct 12)
  • Re: Zabbix for Snort performance monitoring [Solved] Anshuman Anil Deshmukh (Oct 18)
  • Re: Zabbix for Snort performance monitoring [Solved] Anshuman Anil Deshmukh (Oct 20)
    • Re: Zabbix for Snort performance monitoring [Solved] Eric G (Oct 20)
• question about snort anomaly detection mohammad mahdizadeh (Oct 13)
  • Re: question about snort anomaly detection Russ Combs (Oct 14)
• Reputation Preprocessor setests setests (Oct 13)
  • Re: Reputation Preprocessor James Lay (Oct 13)
• DAQ. Configure "error checking for libpcap version >= "1.0.0"... n" Salvo (Oct 13)
  • <Possible follow-ups>
  • Re: DAQ. Configure "error checking for libpcap version >= "1.0.0"... n" wkitty42 (Oct 13)
• Pulledpork duplicate rules C. L. Martinez (Oct 14)
  • Re: Pulledpork duplicate rules JJC (Oct 14)
    • Re: Pulledpork duplicate rules C. L. Martinez (Oct 14)
      • Re: Pulledpork duplicate rules JJC (Oct 14)
      • Re: Pulledpork duplicate rules C. L. Martinez (Oct 14)
      • Re: Pulledpork duplicate rules James Lay (Oct 14)
      • Re: Pulledpork duplicate rules JJC (Oct 14)
      • Re: Pulledpork duplicate rules James Lay (Oct 14)
      • Re: Pulledpork duplicate rules carlopmart (Oct 14)
      • Re: Pulledpork duplicate rules carlopmart (Oct 14)
      • Re: Pulledpork duplicate rules James Lay (Oct 14)
      • Re: Pulledpork duplicate rules JJ Cummings (Oct 14)
  • <Possible follow-ups>
  • Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 14)
    • Re: Pulledpork duplicate rules JJ Cummings (Oct 14)
      • Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)
      • Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)
      • Re: Pulledpork duplicate rules James Lay (Oct 15)
      • Re: Pulledpork duplicate rules waldo kitty (Oct 15)
  • Re: Pulledpork duplicate rules wkitty42 (Oct 14)
    • Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)
• Sourcefire VRT Certified Snort Rules Update 2013-10-14 Research (Oct 14)
• Issue related to Blacklists Anshuman Anil Deshmukh (Oct 14)
  • Re: Issue related to Blacklists Joel Esler (Oct 15)
    • Re: Issue related to Blacklists Anshuman Anil Deshmukh (Oct 16)
      • Re: Issue related to Blacklists Joel Esler (Oct 16)
      • Re: Issue related to Blacklists Anshuman Anil Deshmukh (Oct 17)
      • Re: Issue related to Blacklists Russ Combs (Oct 17)
• Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 10/14/2013 Joel Esler (Oct 15)
• Egobot James Lay (Oct 15)
  • Re: Egobot Nick Randolph (Oct 15)
    • Re: Egobot James Lay (Oct 15)
• pulled pork updates Johnny Venter (Oct 15)
  • Re: pulled pork updates Joel Esler (Oct 15)
  • Re: pulled pork updates JJC (Oct 15)
  • Fwd: pulled pork updates Johnny Venter (Oct 23)
    • Re: Fwd: pulled pork updates Johnny Venter (Oct 23)
      • Re: Fwd: pulled pork updates Peter Bates (Oct 23)
• Sourcefire VRT Certified Snort Rules Update 2013-10-15 Research (Oct 15)
• Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 10/15/2013, Rule Rebalancing Joel Esler (Oct 15)
• Logstash James Lay (Oct 15)
  • Re: Logstash Jeremy Hoel (Oct 15)
    • Re: Logstash James Lay (Oct 15)
• Re: DAQ. Configure "error checking for libpcap version >= "1.0.0"... n" Salvo (Oct 15)
• Pulled Pork Verifying Rule Updates Matt Brichetto (Oct 15)
• Re: DAQ. Configure "error checking for libpcap version >= "1.0.0"... n". Problem Solved. Salvo (Oct 16)
• snort 2.9.5.5 from source - error on make Roland RoLaNd (Oct 16)
• snort.conf network variables Roland RoLaNd (Oct 16)
• Additional KanKan sig James Lay (Oct 16)
• Sourcefire VRT Certified Snort Rules Update 2013-10-17 Research (Oct 17)
• Re: Issue related to Blacklists [SOLVED] Anshuman Anil Deshmukh (Oct 17)
• Network cards for IPS & query related to PFRING Anshuman Anil Deshmukh (Oct 17)
  • Re: Network cards for IPS & query related to PFRING Mark W. Jeanmougin (Oct 26)
  • <Possible follow-ups>
  • Re: Network cards for IPS & query related to PFRING Anshuman Anil Deshmukh (Oct 20)
    • Message not available
      • Re: Network cards for IPS & query related to PFRING Anshuman Anil Deshmukh (Oct 21)
      • Re: Network cards for IPS & query related to PFRING Anshuman Anil Deshmukh (Oct 24)
      • Re: Network cards for IPS & query related to PFRING Peter Bates (Oct 24)
      • Re: Network cards for IPS & query related to PFRING Anshuman Anil Deshmukh (Oct 24)
• snort and barnyard2 using a lot of resources Roland RoLaNd (Oct 18)
  • Re: snort and barnyard2 using a lot of resources Peter Bates (Oct 18)
• [snort-users] About attribute replacement Mayur Patil (Oct 18)
  • Re: [snort-users] About attribute replacement Joel Esler (Oct 18)
    • Re: [snort-users] About attribute replacement Mayur Patil (Oct 18)
      • Re: [snort-users] About attribute replacement Mayur Patil (Oct 19)
      • Re: [snort-users] About attribute replacement waldo kitty (Oct 19)
• Feature request: isdataat ability in specific (preprocessor) buffers Bad Horse (Oct 18)
  • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joel Esler (Oct 18)
    • Re: Feature request: isdataat ability in specific (preprocessor) buffers Bad Horse (Oct 18)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joel Esler (Oct 18)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Bad Horse (Oct 23)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joel Esler (Oct 23)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Bad Horse (Oct 23)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joshua Kinard (Oct 24)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joshua Kinard (Oct 24)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joel Esler (Oct 24)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers L0rd Ch0de1m0rt (Nov 06)
      • Re: Feature request: isdataat ability in specific (preprocessor) buffers Joel Esler (Nov 07)
• Hi Snort Users! JS (Oct 19)
• Adware/Toolbar? Y M (Oct 20)
• NFQ DAQ "module version issue" on Debian Bobby Venal (Oct 20)
  • Re: NFQ DAQ "module version issue" on Debian Bobby Venal (Oct 27)
    • Re: NFQ DAQ "module version issue" on Debian waldo kitty (Oct 28)
  • <Possible follow-ups>
  • NFQ DAQ "module version issue" on Debian Bobby Venal (Oct 21)
• Snort 2.9.5 and ERPSAN; malformed packages Bart Jan Kelter (Oct 21)
• Community Rules and Pulled Pork Ron Haines (Oct 21)
  • Re: Community Rules and Pulled Pork Jeremy Hoel (Oct 21)
    • Re: Community Rules and Pulled Pork Joel Esler (Oct 21)
• Tenda router backdoor James Lay (Oct 21)
  • Re: Tenda router backdoor Joel Esler (Oct 21)
• Flowbits config Anshuman Anil Deshmukh (Oct 22)
  • Re: Flowbits config Joel Esler (Oct 22)
    • Re: Flowbits config Anshuman Anil Deshmukh (Oct 22)
  • Re: Flowbits config Peter Bates (Oct 22)
    • Re: Flowbits config Joel Esler (Oct 22)
  • [SPAM] Re: Flowbits config Dave Venman (Oct 22)
• Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 22)
  • Re: Duplicate rules & rule parser JJ Cummings (Oct 22)
    • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 22)
      • Re: Duplicate rules & rule parser Joel Esler (Oct 22)
  • Re: Duplicate rules & rule parser Peter Bates (Oct 22)
    • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 22)
      • Re: Duplicate rules & rule parser Peter Bates (Oct 22)
    • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 23)
      • Re: Duplicate rules & rule parser JJ Cummings (Oct 23)
      • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 23)
      • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 24)
      • Re: Duplicate rules & rule parser Joel Esler (Oct 25)
      • Re: Duplicate rules & rule parser JJC (Oct 25)
      • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 26)
      • Re: Duplicate rules & rule parser Eric G (Oct 26)
      • Re: Duplicate rules & rule parser Joel Esler (Oct 26)
      • Re: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 27)
      • Re: Duplicate rules & rule parser Peter Bates (Oct 24)
• Snort not detecting MS08-067 LaTonya Hall (Oct 22)
  • Re: Snort not detecting MS08-067 rmkml (Oct 22)
  • Re: Snort not detecting MS08-067 Joel Esler (Oct 22)
    • Re: Snort not detecting MS08-067 LaTonya Hall (Oct 22)
      • Re: Snort not detecting MS08-067 LaTonya Hall (Oct 23)
      • Re: Snort not detecting MS08-067 Jeremy Hoel (Oct 23)
      • Re: Snort not detecting MS08-067 James Lay (Oct 23)
      • Re: Snort not detecting MS08-067 LaTonya Hall (Oct 23)
    • Re: Snort not detecting MS08-067 LaTonya Hall (Oct 30)
      • Re: Snort not detecting MS08-067 Joel Esler (Oct 23)
• http_preprocessor question KA L (Oct 22)
• Sourcefire VRT Certified Snort Rules Update 2013-10-22 Research (Oct 22)
• My email ID Amtul Saboor (Oct 22)
• ShodanHQ Rule Geoff Serrao (Oct 22)
  • Re: ShodanHQ Rule Joel Esler (Oct 22)
    • Re: ShodanHQ Rule Geoffrey Serrao (Oct 22)
• Oracle SQL Obfuscation Rule Nicholas Mavis (Oct 22)
  • Re: Oracle SQL Obfuscation Rule Joel Esler (Oct 22)
• http_preprocessor chunk_length parameter KA L (Oct 23)
• Snort not generating alerts Matt . (Oct 23)
  • Re: Snort not generating alerts James Dickenson (Oct 24)
  • <Possible follow-ups>
  • Snort not generating alerts Matt . (Oct 30)
    • Re: Snort not generating alerts James Lay (Oct 30)
      • Re: Snort not generating alerts rmkml (Oct 30)
• Sample snort.conf not updated? Stark, Vernon L. (Oct 23)
  • Re: Sample snort.conf not updated? Joel Esler (Oct 23)
• disabling specific snort rules Roland RoLaNd (Oct 24)
  • Re: disabling specific snort rules James Lay (Oct 24)
    • Re: disabling specific snort rules Roland RoLaNd (Oct 24)
      • Snort and Banyard2 no data in logs. Salvo (Oct 24)
      • Re: Snort and Banyard2 no data in logs. waldo kitty (Oct 24)
      • Re: disabling specific snort rules James Lay (Oct 24)
      • Re: disabling specific snort rules JJC (Oct 24)
      • Re: disabling specific snort rules Roland RoLaNd (Oct 27)
      • Re: disabling specific snort rules James Lay (Oct 27)
      • Re: disabling specific snort rules Joel Esler (Oct 27)
      • Re: disabling specific snort rules waldo kitty (Oct 24)
• Sourcefire VRT Certified Snort Rules Update 2013-10-24 Research (Oct 24)
• Multiple SID's for same type of event Anshuman Anil Deshmukh (Oct 24)
  • Re: Multiple SID's for same type of event waldo kitty (Oct 24)
    • Re: Multiple SID's for same type of event Anshuman Anil Deshmukh (Oct 25)
• Snort logs are empty Salvo (Oct 25)
  • Re: Snort logs are empty Salvo (Oct 25)
• Interesting article James Lay (Oct 25)
  • Re: Interesting article Rodrigo Montoro(Sp0oKeR) (Oct 28)
• Logging Packets with Snort Johnny Venter (Oct 25)
  • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
    • Re: Logging Packets with Snort Johnny Venter (Oct 25)
      • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
      • Re: Logging Packets with Snort Johnny Venter (Oct 25)
      • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
      • Message not available
      • Message not available
      • Message not available
      • Re: Logging Packets with Snort Johnny Venter (Oct 25)
      • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
      • Re: Logging Packets with Snort Johnny Venter (Oct 25)
      • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
      • Re: Logging Packets with Snort Johnny Venter (Oct 25)
      • Re: Logging Packets with Snort Jeremy Hoel (Oct 25)
• Recall: Duplicate rules & rule parser Anshuman Anil Deshmukh (Oct 26)
• [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 27)
  • Re: [help,urgent] Using PCRE to match packets in hex Jeremy Hoel (Oct 27)
    • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex waldo kitty (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex rmkml (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex rmkml (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 27)
      • Message not available
      • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 28)
      • Re: [help,urgent] Using PCRE to match packets in hex Yoyo Lam (Oct 28)
      • Re: [help,urgent] Using PCRE to match packets in hex JJ Cummings (Oct 27)
      • Re: [help,urgent] Using PCRE to match packets in hex rmkml (Oct 27)
• Zero day attack protection Anshuman Anil Deshmukh (Oct 27)
  • Re: Zero day attack protection Saint Crusty (Oct 28)
    • Re: Zero day attack protection Joel Esler (Oct 28)
  • Re: Zero day attack protection Saint Crusty (Oct 29)
    • Re: Zero day attack protection Joel Esler (Oct 29)
  • Re: Zero day attack protection Kevin Ross (Oct 29)
  • <Possible follow-ups>
  • Re: Zero day attack protection sockstat (Oct 28)
• Re: Compile so rules in C language Mayur Patil (Oct 28)
• Queries regarding FRAG3 & STREAM5 Anshuman Anil Deshmukh (Oct 28)
  • Re: Queries regarding FRAG3 & STREAM5 Hui Cao (Oct 28)
    • Re: Queries regarding FRAG3 & STREAM5 Anshuman Anil Deshmukh (Nov 07)
      • Re: Queries regarding FRAG3 & STREAM5 Hui Cao (Nov 12)
    • Re: Queries regarding FRAG3 & STREAM5 Anshuman Anil Deshmukh (Nov 08)
      • Re: Queries regarding FRAG3 & STREAM5 waldo kitty (Nov 09)
• PulledPork 0.7.0 on windows does not update rules folder ResQue (Oct 28)
  • <Possible follow-ups>
  • PulledPork 0.7.0 on windows does not update rules folder ResQue (Oct 29)
    • Re: PulledPork 0.7.0 on windows does not update rules folder JJC (Oct 29)
• Sourcefire VRT Certified Snort Rules Update 2013-10-29 Research (Oct 29)
• Snort Instance Nicholas Horton (Oct 30)
  • Re: Snort Instance James Lay (Oct 30)
    • Re: Snort Instance Nicholas Horton (Oct 30)
      • Re: Snort Instance James Lay (Oct 30)
      • Re: Snort Instance Nicholas Horton (Oct 30)
• Fwd: unsock option Mary (Oct 30)
  • Re: Fwd: unsock option Hui Cao (Oct 30)
• Compiling Snort Source Code version 2.9 in Windows with Visual Studio 2008 Ong Wen Jian (Oct 30)
  • Re: Compiling Snort Source Code version 2.9 in Windows with Visual Studio 2008 Geoffrey Serrao (Oct 30)
    • Re: Compiling Snort Source Code version 2.9 in Windows with Visual Studio 2008 Ong Wen Jian (Nov 14)
      • Re: Compiling Snort Source Code version 2.9 in Windows with Visual Studio 2008 Ong Wen Jian (Nov 14)
• Snort on iPhone Miso Patel (Oct 30)
  • Re: Snort on iPhone Hui Cao (Oct 30)
  • Re: Snort on iPhone Steven Sturges (Oct 30)
    • Re: Snort on iPhone Victor Roemer (Oct 30)
      • Re: Snort on iPhone Joel Esler (Oct 30)
• request Irani Player (Oct 30)
  • Re: request Joel Esler (Oct 30)
• Configuration Issues Ernest Okoromi (Oct 30)
• new sig for detecting Apache / PHP RCE rmkml (Oct 30)
  • Re: new sig for detecting Apache / PHP RCE Joel Esler (Oct 30)
    • Re: new sig for detecting Apache / PHP RCE rmkml (Oct 30)
• Pony checkin James Lay (Oct 30)
  • Re: Pony checkin James Lay (Oct 30)
    • Re: Pony checkin Joel Esler (Oct 31)
• @snort.log empty files anagha b (Oct 31)
• Per License Oinkcode LaTonya Hall (Oct 31)
  • Re: Per License Oinkcode waldo kitty (Oct 31)
• Sourcefire VRT Certified Snort Rules Update 2013-10-31 Research (Oct 31)
• Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 10/31/2013 Joel Esler (Oct 31)
  • Re: Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 10/31/2013 Anshuman Anil Deshmukh (Nov 02)
    • Re: Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 10/31/2013 Joel Esler (Nov 02)
• Barnyard2 reports database insert errors Dave Corsello (Nov 01)
  • Re: Barnyard2 reports database insert errors beenph (Nov 01)
    • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 01)
      • Re: Barnyard2 reports database insert errors beenph (Nov 02)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 02)
      • Re: Barnyard2 reports database insert errors beenph (Nov 02)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 03)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 04)
      • Re: Barnyard2 reports database insert errors beenph (Nov 04)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 05)
      • Re: Barnyard2 reports database insert errors waldo kitty (Nov 05)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 05)
      • Re: Barnyard2 reports database insert errors waldo kitty (Nov 05)
      • Re: Barnyard2 reports database insert errors waldo kitty (Nov 02)
      • Re: Barnyard2 reports database insert errors Dave Corsello (Nov 02)
• Pulledpork issue 142 Anshuman Anil Deshmukh (Nov 01)
  • Re: Pulledpork issue 142 JJC (Nov 01)
• Writing Preprocessor For Snort Amtul Saboor (Nov 02)
  • Re: Writing Preprocessor For Snort Joel Esler (Nov 03)
  • Re: Writing Preprocessor For Snort Mayur Patil (Nov 03)
  • Re: Writing Preprocessor For Snort Amtul Saboor (Nov 06)
    • Re: Writing Preprocessor For Snort Russ Combs (Nov 07)
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Re: Writing Preprocessor For Snort Russ Combs (Nov 08)
      • Re: Writing Preprocessor For Snort Amtul Saboor (Nov 08)
    • Re: Writing Preprocessor For Snort Gregory W. MacPherson (Nov 14)
• Snort Rule and FTP server quocviet nguyen (Nov 03)
  • Re: Snort Rule and FTP server Joel Esler (Nov 03)
• RE : Snort Rule and FTP server rmkml (Nov 03)
• Snortsam with snort quocviet nguyen (Nov 03)
  • Re: Snortsam with snort Luis Daniel Lucio Quiroz (Nov 03)
    • Re: Snortsam with snort quocviet nguyen (Nov 03)
      • Re: Snortsam with snort quocviet nguyen (Nov 04)
• snort stop unexpectedly Jorge G. Perez (Nov 04)
  • Re: snort stop unexpectedly Joel Esler (Nov 04)
    • Re: snort stop unexpectedly Edward Borgoyn (Nov 04)
• Incremental latency when ping via Snort inline Wei-li Tang (Nov 05)
• Pulled Pork 0.7.0 Issues Turnbough, Bradley E. (Nov 05)
  • Re: Pulled Pork 0.7.0 Issues Turnbough, Bradley E. (Nov 07)
    • Re: Pulled Pork 0.7.0 Issues JJC (Nov 07)
• TIFF images in MS-Office documents used in targeted attacks James Lay (Nov 05)
  • Re: TIFF images in MS-Office documents used in targeted attacks Paul Bottomley (Nov 06)
  • Re: TIFF images in MS-Office documents used in targeted attacks Joel Esler (Nov 06)
    • Re: TIFF images in MS-Office documents used in targeted attacks James Lay (Nov 06)
• Sourcefire VRT Certified Snort Rules Update 2013-11-05 Research (Nov 05)
• Logstash and snort James Lay (Nov 05)
• Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 11/05/2013 Joel Esler (Nov 05)
• Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword L0rd Ch0de1m0rt (Nov 06)
  • Re: [Snort-devel] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword Bad Horse (Nov 07)
  • Re: Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword Bhagya Bantwal (Nov 07)
    • Re: Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword L0rd Ch0de1m0rt (Nov 07)
      • Re: [Snort-sigs] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword rmkml (Nov 08)
      • Re: Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword L0rd Ch0de1m0rt (Nov 20)
      • Re: Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword rmkml (Nov 20)
      • Re: [Snort-devel] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword Bhagya Bantwal (Nov 22)
      • Re: Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword L0rd Ch0de1m0rt (Dec 04)
      • Re: [Snort-users] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword rmkml (Dec 04)
      • Re: [Snort-users] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword L0rd Ch0de1m0rt (Dec 05)
      • Re: [Snort-users] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword Joel Esler (jesler) (Dec 09)
      • Re: [Snort-users] [Snort-devel] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword lists () packetmail net (Dec 09)
      • Re: [Snort-sigs] [Snort-users] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword Joel Esler (jesler) (Dec 09)
• SNORT vs WANGUARD Florent Bautista (Nov 07)
• Sourcefire VRT Certified Snort Rules Update 2013-11-07 Research (Nov 07)
• (no subject) Seydou Mamadou Traore (Nov 07)
  • Re: (no subject) Randal T. Rioux (Nov 29)
• UNKNOWN METHOD Jorge G. Perez (Nov 07)
  • Re: UNKNOWN METHOD Mayur Patil (Nov 07)
    • Message not available
      • Re: UNKNOWN METHOD Mayur Patil (Nov 07)
  • Re: UNKNOWN METHOD waldo kitty (Nov 07)
  • Re: UNKNOWN METHOD waldo kitty (Nov 07)
• Sourcefire VRT Certified Snort Rules for CVE-2013-3906 Jeremy Scott (Nov 07)
  • Re: Sourcefire VRT Certified Snort Rules for CVE-2013-3906 Patrick Mullen (Nov 08)
• Writing a dynamic rules donfack zeufack hermann (Nov 09)
  • Re: Writing a dynamic rules Patrick Mullen (Nov 11)
• Regarding Snort Rules Prashant Mishra (Nov 11)
  • Re: Regarding Snort Rules Joel Esler (Nov 11)
• Unified2 file corrupt? Zach Hatsis (Nov 11)
  • Re: Unified2 file corrupt? Bhagya Bantwal (Nov 13)
    • Re: Unified2 file corrupt? Zach Hatsis (Nov 13)
• scan rules on pfsense Leonardo Pezente (Nov 11)
  • Re: scan rules on pfsense Joel Esler (Nov 11)
    • Re: scan rules on pfsense Leonardo Pezente (Nov 12)
• Writing normalizer for snort Harry Härpfer (Nov 11)
  • Re: Writing normalizer for snort Matt Watchinski (Nov 12)
    • Re: Writing normalizer for snort highend root (Nov 12)
• RHEL 6.0 documenation Irlam, Oliver J. [RA] (Nov 12)
  • Re: RHEL 6.0 documenation Jeremy Hoel (Nov 12)
• SNORT DB question Glass, Keith (Nov 12)
• Fake Conferences CSCI and WORLDCOMP of Hamid Arabnia abbasakbar (Nov 12)
  • <Possible follow-ups>
  • Fake Conferences CSCI and WORLDCOMP of Hamid Arabnia abbasakbar (Nov 12)
  • Fake Conferences CSCI and WORLDCOMP of Hamid Arabnia abbasakbar (Nov 12)
• working snort > 2.9.5 on archs with strict memory alignment? Markus Lude (Nov 12)
  • Re: working snort > 2.9.5 on archs with strict memory alignment? Bhagya Bantwal (Nov 12)
• Asprox Sig James Lay (Nov 12)
  • <Possible follow-ups>
  • Fwd: Re: Asprox Sig James Lay (Nov 12)
• Offered new rule for detect last Outlook/Crypto API... rmkml (Nov 12)
  • Re: [Emerging-Sigs] Offered new rule for detect last Outlook/Crypto API... Will Metcalf (Nov 12)
  • Re: Offered new rule for detect last Outlook/Crypto API... rmkml (Nov 13)
• Correlation rules Jaime Nebrera (Nov 12)
• Sourcefire VRT Certified Snort Rules Update 2013-11-12 Research (Nov 12)
• Barnyard2 / Extra Data Logging -- Status Turnbough, Bradley E. (Nov 13)
  • Re: Barnyard2 / Extra Data Logging -- Status Turnbough, Bradley E. (Nov 14)
• show snort rules Nguyen Quoc Viet (Nov 13)
  • Re: show snort rules Y M (Nov 13)
• Syntax for "ignore=" in Pulledpork Stark, Vernon L. (Nov 13)
  • Re: Syntax for "ignore=" in Pulledpork Y M (Nov 13)
• tools in tools folder not automatically built from .spec file?!?! Turnbough, Bradley E. (Nov 13)
  • Re: tools in tools folder not automatically built from .spec file?!?! Turnbough, Bradley E. (Nov 14)
    • Re: tools in tools folder not automatically built from .spec file?!?! Russ Combs (Nov 14)
• so_rules fidel69 (Nov 13)
• How to send packets to Snort without using pcap. aneeque khan (Nov 13)
• Problems with Snort Installation on Windows 7 ƒabricio - (Nov 13)
• 'conifg stateful' option Jeremy Hoel (Nov 13)
  • Re: 'conifg stateful' option waldo kitty (Nov 13)
    • Re: 'conifg stateful' option Jeremy Hoel (Nov 13)
• @empty rules files anagha b (Nov 14)
  • Re: @empty rules files waldo kitty (Nov 14)
  • <Possible follow-ups>
  • @empty rules files anagha b (Nov 17)
• I am unable to View rules for specific events in snort database Sri ranjani (Nov 14)
• About README.UNSOCK WangChuang (Nov 14)
  • Re: About README.UNSOCK Bhagya Bantwal (Nov 14)
    • Re: About README.UNSOCK WangChuang (Nov 18)
• disablesid.conf Issue (was Syntax for "ignore=" in Pulledpork) Stark, Vernon L. (Nov 14)
  • Re: [Snort-users] disablesid.conf Issue (was Syntax for "ignore=" in Pulledpork) James Lay (Nov 14)
• Expiro sigs Y M (Nov 14)
  • Re: Expiro sigs Geoffrey Serrao (Nov 14)
    • Re: Expiro sigs Y M (Nov 14)
      • Re: Expiro sigs Y M (Nov 14)
  • Re: Expiro sigs Carlos Pacho (Nov 14)
• HNAP Admin attempts James Lay (Nov 14)
  • Re: HNAP Admin attempts lists () packetmail net (Nov 14)
    • Re: HNAP Admin attempts James Lay (Nov 14)
      • Re: HNAP Admin attempts Carlos Pacho (Nov 14)
      • Re: HNAP Admin attempts rmkml (Nov 14)
      • Re: HNAP Admin attempts waldo kitty (Nov 14)
      • Re: HNAP Admin attempts Y M (Nov 14)
      • Re: HNAP Admin attempts James Lay (Nov 14)
• Attribute Table question SnortFan (Nov 14)
  • Re: Attribute Table question Jefferson, Shawn (Nov 14)
    • Re: Attribute Table question SnortFan (Nov 18)
      • Re: Attribute Table question Joel Esler (jesler) (Nov 18)
• First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
  • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 14)
    • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 14)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 15)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Y M (Nov 15)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 15)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 15)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 15)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 19)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 19)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 19)
      • Re: First time snorting ... ERROR: The dynamic detection library ... Alan McKay (Nov 19)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 19)
      • Re: First time snorting ... ERROR: The dynamic detection library ... waldo kitty (Nov 19)
• Sourcefire VRT Certified Snort Rules Update 2013-11-14 Research (Nov 14)
• quick sanity check please? Jamie Riden (Nov 15)
  • Re: quick sanity check please? James Lay (Nov 15)
  • <Possible follow-ups>
  • Re: quick sanity check please? Y M (Nov 15)
• difference between pulledpork -P and -n option? DA_667 (Nov 16)
  • Re: difference between pulledpork -P and -n option? waldo kitty (Nov 16)
• Rule to match all non-HTTP traffic Stephen Teti (Nov 18)
• Sourcefire VRT Certified Snort Rules Update 2013-11-18 Research (Nov 18)
• elmountasser.eloukoud () gmail com el mountasser el oukoud (Nov 18)
• Snort 2.9.5.6 Now Available Snort Releases (Nov 18)
  • <Possible follow-ups>
  • Snort 2.9.5.6 Now Available Snort Releases (Nov 18)
• Snort 2.9.6 Beta Now Available Snort Releases (Nov 18)
  • <Possible follow-ups>
  • Snort 2.9.6 Beta Now Available Snort Releases (Nov 18)
• @portscan log not showing all decoys anagha b (Nov 19)
• JBoss AS Exploit Sig James Lay (Nov 19)
• FATAL ERROR: Cannot decode data link type 113 waldo kitty (Nov 19)
  • Re: FATAL ERROR: Cannot decode data link type 113 James Lay (Nov 19)
    • Re: FATAL ERROR: Cannot decode data link type 113 waldo kitty (Nov 19)
• Linux Fokirtor Backdoor Y M (Nov 19)
• Using snort in an PCI DSS environment elof (Nov 20)
  • Re: Using snort in an PCI DSS environment James Lay (Nov 20)
    • Re: Using snort in an PCI DSS environment elof (Nov 20)
      • Re: Using snort in an PCI DSS environment James Lay (Nov 20)
      • Re: Using snort in an PCI DSS environment elof (Nov 21)
      • Re: Using snort in an PCI DSS environment James Lay (Nov 22)
  • Re: Using snort in an PCI DSS environment John Millican (Nov 20)
    • Re: Using snort in an PCI DSS environment elof (Nov 20)
      • Re: Using snort in an PCI DSS environment John Millican (Nov 20)
• Sourcefire VRT Certified Snort Rules Update 2013-11-20 Research (Nov 20)
• What to do? Ellad G. Yatsko (Nov 21)
  • Re: What to do? James Lay (Nov 21)
    • Re: What to do? Ellad G. Yatsko (Nov 21)
      • Re: What to do? James Lay (Nov 22)
      • Re: What to do? Ellad G. Yatsko (Nov 22)
  • Re: What to do? Ellad G. Yatsko (Nov 21)
    • Re: What to do? Ellad G. Yatsko (Nov 22)
      • Is it a bug? Ellad G. Yatsko (Nov 24)
      • Re: Is it a bug? Russ Combs (Dec 02)
• Update: new release on ETPLC project ! rmkml (Nov 21)
• Need help to know which files to be changed in Dynamic preprocessor starter kit Amtul Saboor (Nov 22)
  • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Russ Combs (Nov 22)
    • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Amtul Saboor (Nov 22)
      • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Amtul Saboor (Nov 26)
      • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Amtul Saboor (Dec 26)
      • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Emiliano Fausto (Dec 26)
      • Re: Need help to know which files to be changed in Dynamic preprocessor starter kit Russ Combs (Dec 26)
• Sourcefire VRT Certified Snort Rules Update 2013-11-22 Research (Nov 22)
• Snort variables longer than 65535 bytes Jon Larson (Nov 22)
  • <Possible follow-ups>
  • Snort variables longer than 65535 bytes Jon Larson (Dec 01)
    • Re: Snort variables longer than 65535 bytes Russ Combs (Dec 02)
      • Re: Snort variables longer than 65535 bytes Joshua Kinard (Dec 02)
• I2P traffic Paul Bottomley (Nov 25)
• Columbia, MD Snort Users Group Harley H (Nov 25)
  • Re: Columbia, MD Snort Users Group Joel Esler (jesler) (Nov 25)
• [Snort-user] requires libdnet.so.1 LaTonya Hall (Nov 25)
  • Re: [Snort-user] requires libdnet.so.1 Joel Esler (jesler) (Nov 25)
• IPS does not detect MS12-020 vulnerability via backtrack module Lukas Matt (Nov 26)
  • Re: IPS does not detect MS12-020 vulnerability via backtrack module Joel Esler (jesler) (Nov 26)
  • Re: IPS does not detect MS12-020 vulnerability via backtrack module Joel Esler (jesler) (Nov 26)
• snort nmap not working Mustafa Karci (Nov 26)
• i hvave error when run snort abdelkader . djebbar (Nov 26)
  • Re: i hvave error when run snort Joel Esler (jesler) (Nov 26)
  • Re: i hvave error when run snort waldo kitty (Nov 26)
• Malware detection with Snort Daniel Calvo Castro (Nov 26)
  • Re: Malware detection with Snort Salvo (Nov 26)
    • Re: Malware detection with Snort Mayur Patil (Nov 26)
  • <Possible follow-ups>
  • Re: Malware detection with Snort Maxwell, Jamison [HDS] (Nov 26)
• Timezone issue in SNORT LOG Balamurali (Nov 26)
  • Re: Timezone issue in SNORT LOG waldo kitty (Nov 26)
    • Re: Timezone issue in SNORT LOG Joel Esler (jesler) (Nov 26)
      • Re: Timezone issue in SNORT LOG Russ Combs (Dec 02)
• Sourcefire VRT Certified Snort Rules Update 2013-11-26 Research (Nov 26)
• Snort.org Blog: Sourcefire VRT Certified Snort Rules Update for 11/26/2013 Joel Esler (jesler) (Nov 26)
• Air Installer PUA James Lay (Nov 26)
  • Re: Air Installer PUA James Lay (Nov 26)
• How to use Snort to detect DNS reverse lookup queries Qinwen Hu (Nov 26)
• Issues with suppressing some preproc rules Mike Hale (Nov 26)
  • Re: Issues with suppressing some preproc rules waldo kitty (Nov 26)
    • Re: Issues with suppressing some preproc rules Mike Hale (Nov 26)
• False Positive on VRT 28039 Jeremy Hoel (Nov 26)
  • Re: False Positive on VRT 28039 Joel Esler (jesler) (Nov 26)
    • Re: False Positive on VRT 28039 Jeremy Hoel (Nov 26)
      • Re: False Positive on VRT 28039 Joel Esler (jesler) (Nov 27)
• [HITB-Announce] #HITB2014AMS Call for Papers Now Open Hafez Kamal (Nov 27)
• DPX Output Verification Amtul Saboor (Nov 27)
  • Re: DPX Output Verification Amtul Saboor (Dec 13)
    • Re: DPX Output Verification Russ Combs (Dec 16)
• @snort alert anagha b (Nov 27)
  • Re: @snort alert waldo kitty (Nov 28)
  • Re: @snort alert Randal T. Rioux (Nov 29)
• prepossesors (fsportscan) not working Mustafa Karci (Nov 28)
  • Re: prepossesors (fsportscan) not working Rodrigo Montoro(Sp0oKeR) (Nov 28)
• Snort not taking nmap second time (scan) Mustafa Karci (Nov 29)
  • Re: Snort not taking nmap second time (scan) Russ Combs (Dec 02)
• Please verif Output of DPX (sample dynamic preprocessor tool kit) Amtul Saboor (Nov 29)
  • Re: Please verif Output of DPX (sample dynamic preprocessor tool kit) Russ Combs (Dec 02)
• install avm31982 (Nov 29)
  • Re: install waldo kitty (Nov 29)
• Snort 0,01 seconds too late? Gregor Mahnic (Dec 01)
  • Re: Snort 0,01 seconds too late? waldo kitty (Dec 01)
• SNORT/BASE does not fill the BASE Homepage Portscan bar olivier a (Dec 01)
• [SPAM] Re: Snort variables longer than 65535 bytes Dave Venman (Dec 02)
• compile options? Budinich Galvez, Luis Alberto (Dec 02)
  • Re: compile options? waldo kitty (Dec 02)
  • <Possible follow-ups>
  • Re: compile options? Hui Cao (huica) (Dec 03)
    • Re: compile options? Hui Cao (huica) (Dec 03)
• Sourcefire VRT Certified Snort Rules Update 2013-12-02 Research (Dec 02)
• BASE does not fill the BASE Homepage Portscan bar oalabeatrix (Dec 03)
• Alerting on internal TCP connection attempts to non-existent services or hosts . Jonathan Heard (Dec 03)
  • Re: Alerting on internal TCP connection attempts to non-existent services or hosts . James Lay (Dec 03)
    • Re: Alerting on internal TCP connection attempts to non-existent services or hosts . Stark, Vernon L. (Dec 03)
      • Re: Alerting on internal TCP connection attemptsto non-existent services or hosts . . Jonathan Heard (Dec 05)
• Confusion about SID 25282 Lukas Matt (Dec 04)
  • Re: Confusion about SID 25282 Joel Esler (jesler) (Dec 04)
• http://webres1.pand.ctmail.com/ Dwayne Hottinger (Dec 04)
  • Re: http://webres1.pand.ctmail.com/ paul meding (Dec 04)
    • Re: http://webres1.pand.ctmail.com/ Dwayne Hottinger (Dec 04)
      • Re: http://webres1.pand.ctmail.com/ waldo kitty (Dec 04)
• [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
  • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
    • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 04)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 05)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 05)
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 05)
      • Re: [snort-devel] Chainning pre-processors Hui Cao (Dec 05)
      • Message not available
      • Message not available
      • Message not available
      • Re: [snort-devel] Chainning pre-processors Emiliano Fausto (Dec 05)
• Defines on preprocids.h Rodrigo Pimpão (Dec 04)
  • Re: Defines on preprocids.h Hui Cao (Dec 04)
• OT: DNS sinkhole question Jason Haar (Dec 04)
  • Re: OT: DNS sinkhole question waldo kitty (Dec 04)
• A question in regards to rules, ACK and flow. Jeremy Hoel (Dec 04)
  • Re: A question in regards to rules, ACK and flow. Joel Esler (jesler) (Dec 04)
    • Re: A question in regards to rules, ACK and flow. Jeremy Hoel (Dec 04)
• Sourcefire VRT Certified Snort Rules Update 2013-12-05 Research (Dec 05)
• Cannot make default /usr/lib/snort_dynamicpreprocessor into ...lib64... cjgd7-facebook () yahoo com (Dec 05)
  • Re: Cannot make default /usr/lib/snort_dynamicpreprocessor into ...lib64... Hui Cao (Dec 05)
• FTP / Telnet normalization and anomaly detection Frank Kirschner (Dec 06)
  • Re: FTP / Telnet normalization and anomaly detection James Lay (Dec 06)
• Errors on using Dynamic Rules Zach Hatsis (Dec 06)
• RE : Re: FTP / Telnet normalization and anomaly detection rmkml (Dec 06)
  • Re: FTP / Telnet normalization and anomaly detection Frank Kirschner (Dec 07)
• Reputation preprocessor isn't blocking traffic Dave Corsello (Dec 07)
  • Re: Reputation preprocessor isn't blocking traffic Joel Esler (jesler) (Dec 09)
    • Re: Reputation preprocessor isn't blocking traffic Dave Corsello (Dec 10)
      • Re: Reputation preprocessor isn't blocking traffic Dave Corsello (Dec 13)
• Rovnix Sig Y M (Dec 09)
• FW: Re: FTP / Telnet normalization and anomaly detection Frank Kirschner (Dec 10)
• [snort-users] Stream5 doesn't take into account every TCP segment Emiliano Fausto (Dec 10)
  • Re: [snort-users] Stream5 doesn't take into account every TCP segment Emiliano Fausto (Dec 10)
• preprocessor drop packets issues Han Zhang (Dec 10)
  • Re: preprocessor drop packets issues Ed Borgoyn (eborgoyn) (Dec 11)
    • Re: preprocessor drop packets issues Han Zhang (Dec 11)
• Help with a rule Tyler MacPherson (Dec 10)
  • Re: Help with a rule lists () packetmail net (Dec 10)
    • Re: Help with a rule Kyle Creyts (Dec 10)
  • Re: Help with a rule Y M (Dec 10)
    • Re: Help with a rule Joel Esler (jesler) (Dec 10)
• Sourcefire VRT Certified Snort Rules Update 2013-12-10 Research (Dec 10)
• Snort UDP traffic in loopback interface evalues evalues (Dec 11)
  • Re: Snort UDP traffic in loopback interface rmkml (Dec 11)
    • Re: Snort UDP traffic in loopback interface evalues evalues (Dec 12)
      • Re: Snort UDP traffic in loopback interface Максим Завилов (Dec 13)
      • Re: Snort UDP traffic in loopback interface Joel Esler (jesler) (Dec 13)
  • Re: Snort UDP traffic in loopback interface Lowe, Richard B (Dec 12)
• Snort gives different stats for different runs with the same set of inputs Mahendra Ladhe (Dec 12)
  • Re: Snort gives different stats for different runs with the same set of inputs Russ Combs (Dec 12)
    • Re: Snort gives different stats for different runs with the same set of inputs Mahendra Ladhe (Dec 12)
      • Re: Snort gives different stats for different runs with the same set of inputs Stephen Fernandis [IT Shared Services – Hub] (Dec 13)
• Sourcefire VRT Certified Snort Rules Update 2013-12-12 Research (Dec 12)
• Snort 2.9.6 RC Now Available Snort Releases (Dec 12)
  • <Possible follow-ups>
  • Snort 2.9.6 RC Now Available Snort Releases (Dec 12)
• Error 504 when fetching Rules Stark, Vernon L. (Dec 13)
  • Re: Error 504 when fetching Rules Joel Esler (jesler) (Dec 13)
    • Re: Error 504 when fetching Rules James Lay (Dec 13)
  • Re: Error 504 when fetching Rules Joel Esler (jesler) (Dec 13)
    • Re: Error 504 when fetching Rules Stark, Vernon L. (Dec 13)
• CF Admin parser access sig James Lay (Dec 13)
  • Re: CF Admin parser access sig Nicholas Mavis (Dec 13)
    • Re: CF Admin parser access sig James Lay (Dec 13)
• CyberHack Christmas Challenge John York (Dec 13)
• vrt subscribe installation Felix Hosner (Dec 14)
• Bad range in Snort rules Lukas Matt (Dec 16)
  • Re: Bad range in Snort rules Joel Esler (jesler) (Dec 16)
• OPENFPC Proxy merge Kevin Ross (Dec 17)
  • Re: OPENFPC Proxy merge Joel Esler (jesler) (Dec 17)
    • Re: OPENFPC Proxy merge Leon Ward (Dec 17)
      • Re: OPENFPC Proxy merge Kevin Ross (Dec 18)
      • Re: OPENFPC Proxy merge Kevin Ross (Dec 18)
      • Re: OPENFPC Proxy merge Jeremy Hoel (Dec 18)
      • Re: OPENFPC Proxy merge Kevin Ross (Dec 19)
      • Re: OPENFPC Proxy merge Kevin Ross (Dec 19)
      • Re: OPENFPC Proxy merge Leon Ward (Dec 30)
    • Re: OPENFPC Proxy merge Leon Ward (Dec 30)
      • Re: OPENFPC Proxy merge Kevin Ross (Dec 17)
  • Re: OPENFPC Proxy merge Jeremy Hoel (Dec 17)
    • Re: OPENFPC Proxy merge John York (Dec 17)
• Sourcefire VRT Certified Snort Rules Update 2013-12-17 Research (Dec 17)
• Rules with options like http_uri of flow onno (Dec 17)
  • Re: Rules with options like http_uri of flow rmkml (Dec 17)
    • Re: Rules with options like http_uri of flow Nicholas Mavis (Dec 17)
  • <Possible follow-ups>
  • Re: Rules with options like http_uri of flow Onno van der Leun (Dec 18)
    • Re: Rules with options like http_uri of flow Joel Esler (jesler) (Dec 18)
      • Re: Rules with options like http_uri of flow Onno van der Leun (Dec 18)
• Pulled Pork error SnortFan (Dec 18)
  • <Possible follow-ups>
  • Re: Pulled Pork error onno () b00z nl (Dec 18)
    • Re: Pulled Pork error SnortFan (Dec 18)
      • Re: Pulled Pork error Joel Esler (jesler) (Dec 18)
• Can snort dump full pcap of alert? Onno van der Leun (Dec 19)
  • Re: Can snort dump full pcap of alert? Y M (Dec 19)
    • Re: Can snort dump full pcap of alert? Heine Lysemose (Dec 19)
  • Re: Can snort dump full pcap of alert? Kevin Ross (Dec 20)
    • Re: Can snort dump full pcap of alert? Lay, James (Dec 20)
• Sourcefire VRT Certified Snort Rules Update 2013-12-19 Research (Dec 19)
• Feedback on rule testing James Dickenson (Dec 20)
  • Re: Feedback on rule testing Rob MacGregor (Dec 20)
    • Re: Feedback on rule testing James Dickenson (Dec 20)
• Commented out rules. SnortFan (Dec 20)
  • Re: Commented out rules. Joel Esler (jesler) (Dec 20)
  • Re: Commented out rules. Y M (Dec 20)
    • Re: Commented out rules. SnortFan (Dec 21)
• Snort work is slowing Ozgur Karatas (Dec 21)
• Blocking Domain name like example.com Ayodele Okeowo (Dec 21)
  • Re: Blocking Domain name like example.com waldo kitty (Dec 21)
    • Re: Blocking Domain name like example.com Ayodele Okeowo (Dec 23)
      • Re: Blocking Domain name like example.com waldo kitty (Dec 23)
      • Re: Blocking Domain name like example.com Ayodele Okeowo (Dec 23)
• Testing my own rules/signatures on pcap file Beenish Raza (Dec 22)
  • Re: Testing my own rules/signatures on pcap file Joel Esler (jesler) (Dec 22)
    • Re: [Snort-devel] Testing my own rules/signatures on pcap file guillaume . daleux (Dec 22)
      • Re: [Snort-devel] Testing my own rules/signatures on pcap file Beenish Raza (Dec 30)
• Snort & Barnyard James (Dec 22)
  • Message not available
    • Re: Snort & Barnyard James (Dec 23)
      • Re: Snort & Barnyard Ayodele Okeowo (Dec 23)
  • Message not available
    • Re: Snort & Barnyard James Hodge (Dec 30)
      • Re: Snort & Barnyard Ayodele Okeowo (Dec 30)
• snort normalization trouble // not working as I expect Lil Evil (Dec 23)
  • Re: snort normalization trouble // not working as I expect Joel Esler (jesler) (Dec 23)
    • Re: snort normalization trouble // not working as I expect Lil Evil (Dec 23)
      • Re: snort normalization trouble // not working as I expect Joel Esler (jesler) (Dec 23)
• Periodic save rule profiling logs Kiryukhin Andrey (Dec 23)
  • Re: Periodic save rule profiling logs Ayodele Okeowo (Dec 23)
  • Re: Periodic save rule profiling logs waldo kitty (Dec 23)
• sublime text 2 tmlanguage syntax highlighting for snort rules? John Babio (Dec 23)
  • Re: sublime text 2 tmlanguage syntax highlighting for snort rules? Victor Roemer (Dec 24)
    • Re: sublime text 2 tmlanguage syntax highlighting for snort rules? John Babio (Dec 24)
• Sourcefire VRT Certified Snort Rules Update 2013-12-24 Research (Dec 24)
• Logs Storage Problem Angel Chiriboga Torres (Dec 26)
  • Re: Logs Storage Problem Ayodele Okeowo (Dec 26)
• Help to understand functions Rodrigo Pimpão (Dec 26)
• File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 26)
  • Re: File magic rules for 2.9.6, what options are required? Joel Esler (jesler) (Dec 26)
    • Re: File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 27)
    • Re: File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Joel Esler (jesler) (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Hui Cao (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Victor Roemer (Dec 27)
      • Re: File magic rules for 2.9.6, what options are required? Joshua Kinard (Dec 27)
• Hey, Snort Users JS (Dec 27)
• RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Wright, Jonathon S CTR (US) (Dec 27)
  • Re: RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Joshua Kinard (Dec 27)
    • Re: RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Wright, Jonathon S CTR (US) (Dec 27)
      • Re: RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Joshua Kinard (Dec 27)
      • Re: RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Wright, Jonathon S CTR (US) (Dec 27)
  • Message not available
    • Message not available
      • Message not available
      • RHEL 6 with Snort 2.9.5.6-1 and PCRE 8.33 install issue (UNCLASSIFIED) Wright, Jonathon S CTR (US) (Dec 27)
• snort with SVM Amir Azhdari (Dec 27)
• installing Snort OSX 10.9.1 Jason Buker (Dec 30)
  • Re: installing Snort OSX 10.9.1 James Lay (Dec 30)
• How to define External Port lists to be ignored in snort Omar Sattar/NOC/Nexlinx (Dec 30)
• Question about SNORT Sensor Placement bk6662 (Dec 31)
  • Re: Question about SNORT Sensor Placement Jeremy Hoel (Dec 31)
• Sourcefire VRT Certified Snort Rules Update 2013-12-31 Research (Dec 31)
• snort on alix 2d13 Celso Fajardo (Dec 31)

Previous period

Next period