Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

1032 messages starting Jul 01 14 and ending Sep 30 14
Date index | Thread index | Author index

• Re: FW: Afpacket daq-2.0.1 snort Juan Jesus Prieto (Jul 01)
  • Re: FW: Afpacket daq-2.0.1 snort Anshuman Anil Deshmukh (Jul 02)
    • Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera (Jul 02)
      • Re: FW: Afpacket daq-2.0.1 snort Anshuman Anil Deshmukh (Jul 02)
      • Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera (Jul 02)
      • Re: FW: Afpacket daq-2.0.1 snort Juan Jesus Prieto (Jul 02)
      • Re: FW: Afpacket daq-2.0.1 snort Randal T. Rioux (Jul 06)
      • Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera (Jul 06)
• multi-threaded snort Maxim Uvarov (Jul 01)
  • Re: multi-threaded snort Russ Combs (rucombs) (Jul 02)
• help with file BPF block ip hernani (Jul 01)
  • Re: help with file BPF block ip waldo kitty (Jul 01)
• Sourcefire VRT Certified Snort Rules Update 2014-07-01 Research (Jul 01)
• Re: Stream5 reload bug Bhagya Bantwal (bbantwal) (Jul 01)
  • <Possible follow-ups>
  • Re: Stream5 reload bug Bhagya Bantwal (bbantwal) (Aug 12)
    • Re: Stream5 reload bug Eugenio Pérez (Aug 12)
• Re: u2boat filters patch Bhagya Bantwal (bbantwal) (Jul 01)
• Snort Windows 8 Pro? John Gomez (Jul 01)
  • Re: Snort Windows 8 Pro? Michael Steele (Jul 02)
    • Re: Snort Windows 8 Pro? John Gomez (Jul 02)
      • Re: Snort Windows 8 Pro? Stephen Gantz (Jul 02)
      • Re: Snort Windows 8 Pro? John Gomez (Jul 02)
      • Re: Snort Windows 8 Pro? Michael Steele (Jul 02)
      • Re: Snort Windows 8 Pro? Randal T. Rioux (Jul 06)
• Snort 2.9.7 Beta is now available Snort Releases (Jul 01)
  • <Possible follow-ups>
  • Snort 2.9.7 Beta is now available Snort Releases (Jul 01)
• Fedora build conma293 (Jul 01)
• Can't run pulledpork Indira Kas (Jul 02)
  • Re: Can't run pulledpork basant subba (Jul 02)
    • Re: Can't run pulledpork Shirkdog (Jul 02)
    • Re: Can't run pulledpork JJC (Jul 02)
• Re: HTTP reassembly problem - Snort 2.9.6.1 Joel Esler (jesler) (Jul 02)
  • Re: HTTP reassembly problem - Snort 2.9.6.1 Mateusz Pigulski (Jul 02)
    • Re: HTTP reassembly problem - Snort 2.9.6.1 Mateusz Pigulski (Jul 07)
• Re: bug in snort reload via HUP signal Bhagya Bantwal (bbantwal) (Jul 02)
  • <Possible follow-ups>
  • Re: bug in snort reload via HUP signal Bhagya Bantwal (bbantwal) (Jul 02)
    • Re: bug in snort reload via HUP signal Juan Jesus Prieto (Jul 02)
• sid-msg.map file is missing Indira Kas (Jul 02)
  • Re: sid-msg.map file is missing Shirkdog (Jul 02)
  • Re: sid-msg.map file is missing Y M (Jul 02)
• Re: snort log to remote syslog Robert Millott (Jul 02)
  • Re: snort log to remote syslog Y M (Jul 02)
  • Message not available
    • Re: snort log to remote syslog Robert Millott (Jul 02)
• Could someone test a rule for me please? Charlie Egan (Jul 02)
  • Re: Could someone test a rule for me please? lists () packetmail net (Jul 02)
    • Re: Could someone test a rule for me please? Charlie Egan (Jul 02)
      • Re: Could someone test a rule for me please? Joel Esler (jesler) (Jul 02)
      • Re: Could someone test a rule for me please? lists () packetmail net (Jul 02)
      • Re: Could someone test a rule for me please? Charlie Egan (Jul 03)
      • Re: Could someone test a rule for me please? Charlie Egan (Jul 07)
      • Re: Could someone test a rule for me please? Joel Esler (jesler) (Jul 07)
      • Re: Could someone test a rule for me please? Charlie Egan (Jul 07)
      • Re: Could someone test a rule for me please? Charlie Egan (Jul 09)
      • Re: Could someone test a rule for me please? Joel Esler (jesler) (Jul 09)
      • Re: Could someone test a rule for me please? Joel Esler (jesler) (Jul 02)
  • Re: Could someone test a rule for me please? Jamie Riden (Jul 09)
    • Re: Could someone test a rule for me please? Charlie Egan (Jul 09)
      • Re: Could someone test a rule for me please? Joel Esler (jesler) (Jul 09)
      • Re: Could someone test a rule for me please? Jamie Riden (Jul 09)
• Can't generate alerts on HTTP GET attacks Sabawoon Mageedzada (Jul 02)
  • Re: Can't generate alerts on HTTP GET attacks Ryan (Jul 02)
  • Re: Can't generate alerts on HTTP GET attacks Y M (Jul 02)
    • Re: Can't generate alerts on HTTP GET attacks rmkml (Jul 02)
  • <Possible follow-ups>
  • Re: Can't generate alerts on HTTP GET attacks Simon Wesseldine (Jul 03)
  • Re: Can't generate alerts on HTTP GET attacks Nicholas Mavis (nmavis) (Jul 08)
• Sourcefire VRT Certified Snort Rules Update 2014-07-02 Research (Jul 02)
• INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Chase Turner (Jul 02)
  • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Doug Burks (Jul 02)
  • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Jaime Nebrera (Jul 03)
    • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Randal T. Rioux (Jul 06)
      • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Jaime Nebrera (Jul 06)
      • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Joel Esler (jesler) (Jul 07)
  • Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Livio Ricciulli (Jul 10)
• help with bad traffic rule hernani (Jul 03)
• Snort BPF.filter doesn't work Robert Millott (Jul 03)
  • Re: Snort BPF.filter doesn't work Nicholas Mavis (nmavis) (Jul 03)
    • Re: Snort BPF.filter doesn't work Robert Millott (Jul 03)
      • Re: Snort BPF.filter doesn't work Nicholas Mavis (nmavis) (Jul 03)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 03)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 08)
      • Re: Snort BPF.filter doesn't work Geoffrey Serrao (Jul 08)
      • Re: Snort BPF.filter doesn't work James Lay (Jul 08)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 10)
      • Re: Snort BPF.filter doesn't work Jeremy Hoel (Jul 10)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 10)
      • Re: Snort BPF.filter doesn't work Jeremy Hoel (Jul 10)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 10)
      • Re: Snort BPF.filter doesn't work Jeremy Hoel (Jul 10)
      • Re: Snort BPF.filter doesn't work James Lay (Jul 10)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 10)
      • Re: Snort BPF.filter doesn't work Jeremy Hoel (Jul 10)
      • Re: Snort BPF.filter doesn't work waldo kitty (Jul 10)
      • Re: Snort BPF.filter doesn't work Robert Millott (Jul 11)
      • Re: Snort BPF.filter doesn't work waldo kitty (Jul 11)
• Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis) (Jul 03)
  • <Possible follow-ups>
  • Re: Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis) (Jul 03)
    • Re: Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis) (Jul 10)
      • Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao (Jul 10)
  • Re: Rig Exploit Kit outbound URI request signature lists () packetmail net (Jul 10)
    • Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao (Jul 10)
      • Re: Rig Exploit Kit outbound URI request signature lists () packetmail net (Jul 10)
      • Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao (Jul 10)
      • Re: Rig Exploit Kit outbound URI request signature lists () packetmail net (Jul 10)
      • Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao (Jul 10)
• Wacky Idea Re: OpenAppID Randal T. Rioux (Jul 06)
  • Re: Wacky Idea Re: OpenAppID Joel Esler (jesler) (Jul 07)
• Snort Blog: OpenAppID Training Videos: How to create a custom detector Joel Esler (jesler) (Jul 07)
• Events with no packet data James Lay (Jul 08)
  • Re: Events with no packet data Y M (Jul 09)
    • Re: Events with no packet data James Lay (Jul 09)
• Sourcefire VRT Certified Snort Rules Update 2014-07-08 Research (Jul 08)
  • <Possible follow-ups>
  • Sourcefire VRT Certified Snort Rules Update 2014-07-08 Research (Jul 08)
• Whitelist IP's? Jeff Meigs (Jul 08)
  • Re: Whitelist IP's? waldo kitty (Jul 08)
    • Re: Whitelist IP's? Joel Esler (jesler) (Jul 08)
      • Re: Whitelist IP's? waldo kitty (Jul 08)
      • Re: Whitelist IP's? Jeff Meigs (Jul 09)
      • Re: Whitelist IP's? Y M (Jul 09)
      • Re: Whitelist IP's? waldo kitty (Jul 10)
      • FW: Whitelist IP's? Jeff Meigs (Jul 10)
      • Re: FW: Whitelist IP's? Y M (Jul 10)
  • <Possible follow-ups>
  • Whitelist IP's? Jeff Meigs (Jul 09)
• default snort rules Abhijit Tikekar (Jul 08)
  • Snort additional-downloads dead link Guillaume Daleux (Jul 08)
    • Re: Snort additional-downloads dead link Jaime Nebrera (Jul 08)
      • Re: Snort additional-downloads dead link Guillaume Daleux (Jul 08)
      • Re: Snort additional-downloads dead link Juan Jesus Prieto (Jul 08)
    • Re: Snort additional-downloads dead link Jason (Jul 08)
  • Re: default snort rules waldo kitty (Jul 08)
  • Re: default snort rules Joel Esler (jesler) (Jul 08)
    • Re: default snort rules Abhijit Tikekar (Jul 10)
      • Re: default snort rules Jeremy Hoel (Jul 10)
      • Re: default snort rules Abhijit Tikekar (Jul 10)
      • Re: default snort rules Jeremy Hoel (Jul 10)
      • Re: default snort rules Abhijit Tikekar (Jul 10)
      • Re: default snort rules Jeremy Hoel (Jul 10)
      • Re: default snort rules Abhijit Tikekar (Jul 10)
      • Re: default snort rules Abhijit Tikekar (Jul 15)
• mysql with windows snort Alan Gao (Jul 08)
  • Re: mysql with windows snort Steve Gantz (Jul 08)
    • Re: mysql with windows snort Joel Esler (jesler) (Jul 08)
  • Re: mysql with windows snort Michael Steele (Jul 08)
  • <Possible follow-ups>
  • mysql with windows snort Alan Gao (Jul 09)
    • Re: mysql with windows snort Joel Esler (jesler) (Jul 09)
      • Re: mysql with windows snort Michael Steele (Jul 09)
      • Re: mysql with windows snort Joel Esler (jesler) (Jul 09)
      • Message not available
      • Re: mysql with windows snort Michael Steele (Jul 16)
    • Re: mysql with windows snort Michael Steele (Jul 09)
• Snort Blog: We have a brand new Snort.org, and are moving to it soon! Joel Esler (jesler) (Jul 09)
  • Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Shirkdog (Jul 09)
  • Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Randal T. Rioux (Jul 09)
    • Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Joel Esler (jesler) (Jul 09)
• Snort Blog: The New Snort.org is here! Joel Esler (jesler) (Jul 09)
  • Re: Snort Blog: The New Snort.org is here! waldo kitty (Jul 10)
• HTTP 422 when trying to download rulesets with pulledpork Laszlo Toth (Jul 10)
• Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 10)
  • Re: HTTP 422 when trying to download rulesets with pulledpork Shirkdog (Jul 10)
    • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 10)
    • Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark (Jul 10)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 10)
  • <Possible follow-ups>
  • Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 11)
    • Re: HTTP 422 when trying to download rulesets with pulledpork Stark, Vernon L. (Jul 11)
    • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 11)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 11)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar (Jul 11)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 11)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 12)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 12)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 12)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler) (Jul 13)
      • Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar (Jul 13)
• S5: Session exceeded & Pruned session Anshuman Anil Deshmukh (Jul 10)
• Re: preprocessor sfportscan does not generate alerts L0rd Ch0de1m0rt (Jul 10)
  • Re: preprocessor sfportscan does not generate alerts L0rd Ch0de1m0rt (Jul 11)
• Sourcefire VRT Certified Snort Rules Update 2014-07-10 Research (Jul 10)
  • Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Heine Lysemose (Jul 10)
    • Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Joe Gedeon (Jul 10)
      • Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Heine Lysemose (Jul 10)
      • Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Joel Esler (jesler) (Jul 10)
• Rule Downloads Failing Turnbough, Bradley E. (Jul 10)
  • Re: Rule Downloads Failing waldo kitty (Jul 10)
    • Re: Rule Downloads Failing Joel Esler (jesler) (Jul 10)
• BPF problem Mike Patterson (Jul 10)
  • Re: BPF problem Mike Patterson (Jul 11)
    • Re: BPF problem James Lay (Jul 11)
      • Re: BPF problem Mike Patterson (Jul 11)
    • Re: BPF problem waldo kitty (Jul 11)
      • Re: BPF problem Mike Patterson (Jul 11)
      • Re: BPF problem James Lay (Jul 11)
      • Re: BPF problem Mike Patterson (Jul 11)
      • Re: BPF problem James Lay (Jul 11)
      • Re: BPF problem Mike Patterson (Jul 11)
      • Re: BPF problem elof (Jul 16)
      • Re: BPF problem Mike Patterson (Jul 16)
      • Re: BPF problem Mike Patterson (Jul 16)
• SMTP_Header_Name_Overfolw Majed (Jul 11)
• Alojzy Kleks - 7/12/2014 3:00:16 PM Alojzy Kleks (Jul 12)
  • Re: Alojzy Kleks - 7/12/2014 3:00:16 PM Joel Esler (jesler) (Jul 12)
• Multiple instances of snort -G option Robert Millott (Jul 14)
  • <Possible follow-ups>
  • FW: Multiple instances of snort -G option Tony Reusser (Jul 14)
  • RE: Multiple instances of snort -G option Eugenio Perez (Jul 14)
    • Re: Multiple instances of snort -G option Scott Schweitzer (Jul 14)
• Snort Blog: Snort Subscriber Rule Set Update Joel Esler (jesler) (Jul 14)
• Help needed writing GET requests Sabawoon Mageedzada (Jul 14)
  • Re: Help needed writing GET requests lists () packetmail net (Jul 14)
• Ruxcon 2014 Final Call For Presentations cfp (Jul 14)
• [SOLVED] RE: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh (Jul 15)
• Snort Blog: OpenAppId Detector Developer Guide has been posted! Joel Esler (jesler) (Jul 15)
• [PATCH] implement odp daq module Maxim Uvarov (Jul 15)
  • Re: [PATCH] implement odp daq module Maxim Uvarov (Jul 18)
    • Re: [PATCH] implement odp daq module Carter Waxman (cwaxman) (Jul 18)
• Sourcefire VRT Certified Snort Rules Update 2014-07-15 Research (Jul 15)
  • Re: Sourcefire VRT Certified Snort Rules Update 2014-07-15 Heine Lysemose (Jul 15)
  • <Possible follow-ups>
  • Sourcefire VRT Certified Snort Rules Update 2014-07-15 Research (Jul 15)
• snort Installer not copying over H i (Jul 15)
  • Re: snort Installer not copying over Michael Steele (Jul 15)
    • Re: snort Installer not copying over H i (Jul 15)
  • Re: snort Installer not copying over waldo kitty (Jul 15)
    • Re: snort Installer not copying over Michael Steele (Jul 15)
• Re: Bug report - can't compile snort unless FLEXRESP3 option is enabled elof (Jul 16)
  • Re: Bug report - can't compile snort unless FLEXRESP3 option is enabled Joel Esler (jesler) (Jul 16)
• Re: Snort-users Digest, Vol 98, Issue 29 Chiranjeevi Chekka (Jul 16)
  • Re: Snort-users Digest, Vol 98, Issue 29 Joel Esler (jesler) (Jul 16)
• Packet I/O Totals section elof (Jul 16)
  • Bugs in Packet I/O Totals section elof (Jul 17)
  • Re: Packet I/O Totals section Carter Waxman (cwaxman) (Jul 17)
• Snort Alert [1:xx] - sid-msg.map looks correct William Rehnquyst (Jul 16)
  • Re: Snort Alert [1:xx] - sid-msg.map looks correct Joel Esler (jesler) (Jul 16)
  • Re: Snort Alert [1:xx] - sid-msg.map looks correct Y M (Jul 16)
• SNORT has stopped alerting Farnsworth, Robert (Jul 16)
  • Re: SNORT has stopped alerting Y M (Jul 16)
    • Re: SNORT has stopped alerting Farnsworth, Robert (Jul 16)
      • Re: SNORT has stopped alerting Joel Esler (jesler) (Jul 16)
      • Re: SNORT has stopped alerting Y M (Jul 16)
      • Re: SNORT has stopped alerting Farnsworth, Robert (Jul 16)
      • Re: SNORT has stopped alerting Y M (Jul 16)
      • Re: SNORT has stopped alerting Farnsworth, Robert (Jul 17)
      • Re: SNORT has stopped alerting Y M (Jul 17)
      • Re: SNORT has stopped alerting Farnsworth, Robert (Jul 17)
      • Re: SNORT has stopped alerting Y M (Jul 17)
      • Re: SNORT has stopped alerting Farnsworth, Robert (Jul 22)
      • Re: SNORT has stopped alerting Jeremy Hoel (Jul 22)
• Finding which rule is blocking freber1977 (Jul 16)
  • Re: Finding which rule is blocking waldo kitty (Jul 16)
• Snort rules downloaded from Amazon AWS through plain http Vladimir Rabotka (Jul 16)
• RAT sigs from CrowdStrike Report Y M (Jul 16)
  • Re: RAT sigs from CrowdStrike Report Joel Esler (jesler) (Jul 16)
    • Re: RAT sigs from CrowdStrike Report Y M (Jul 16)
• nighthunter?? waldo kitty (Jul 16)
• [HITB-Announce] REMINDER: #HITB2014KUL CFP Deadline: 1st August Hafez Kamal (Jul 16)
• Snort 2.9.6.2 Now Available Snort Releases (Jul 17)
  • <Possible follow-ups>
  • Snort 2.9.6.2 Now Available Snort Releases (Jul 17)
    • Re: Snort 2.9.6.2 Now Available James (Aug 15)
      • Re: Snort 2.9.6.2 Now Available Joel Esler (jesler) (Aug 15)
• Rules EoL James Lay (Jul 17)
  • Re: Rules EoL Y M (Jul 17)
    • Re: Rules EoL Y M (Jul 17)
• Sourcefire VRT Certified Snort Rules Update 2014-07-17 Research (Jul 17)
• Override alert msg for reputation preprocessor? Duane Howard (Jul 17)
  • Re: Override alert msg for reputation preprocessor? Hui cao (Jul 17)
    • Re: Override alert msg for reputation preprocessor? Duane Howard (Jul 17)
      • Re: Override alert msg for reputation preprocessor? Hui cao (Jul 17)
• Sniffer War!! Randal T. Rioux (Jul 17)
  • Re: Sniffer War!! Doug Burks (Jul 17)
    • Re: Sniffer War!! James Lay (Jul 17)
  • Re: Sniffer War!! C. L. Martinez (Jul 17)
  • Re: Sniffer War!! Vivek Rajagopalan (Jul 18)
  • Re: Sniffer War!! Jeremy Hoel (Jul 18)
    • Re: Sniffer War!! beenph (Jul 19)
• question regarding distance 0 modifier James Dickenson (Jul 17)
  • Re: question regarding distance 0 modifier Joel Esler (jesler) (Jul 18)
    • Re: question regarding distance 0 modifier James Dickenson (Jul 18)
• tuning Matheus Condi'ez (Jul 17)
• wrong version of gen-msg.map on labs? Gregory S Thomas (Jul 17)
  • Re: wrong version of gen-msg.map on labs? Joel Esler (jesler) (Jul 17)
  • Re: wrong version of gen-msg.map on labs? Joel Esler (jesler) (Jul 18)
    • Re: wrong version of gen-msg.map on labs? Gregory S Thomas (Jul 18)
• ERROR : SID: 15450, GID: 3 not registered properly. Disabling this rule Beenish Raza (Jul 18)
• Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Anshuman Anil Deshmukh (Jul 18)
  • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler) (Jul 18)
  • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Michael Steele (Jul 18)
    • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler) (Jul 18)
      • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 waldo kitty (Jul 18)
      • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler) (Jul 18)
  • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler) (Jul 18)
    • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Andre DiMino (Jul 22)
      • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler) (Jul 22)
      • Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Andre DiMino (Jul 22)
• HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 18)
  • Re: HTTP INSPECT fails on Mirror Port Joel Esler (jesler) (Jul 18)
    • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 18)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port James Lay (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Doug Burks (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port James Lay (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port James Lay (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port James Lay (Jul 21)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 22)
      • Re: HTTP INSPECT fails on Mirror Port James Lay (Jul 23)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 24)
      • Re: [Snort-users] HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 24)
      • Re: [Snort-users] HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Jul 24)
      • Re: [Snort-users] HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 24)
      • Re: [Snort-users] HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Jul 25)
      • HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 25)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Jul 28)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 31)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Jul 31)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 04)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 05)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 05)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 06)
      • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Aug 07)
      • Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs) (Aug 07)
    • Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam (Jul 18)
• Not able to block telnet command with snort Mitesh Jadia (Jul 18)
• Link for snort configurations not working Anshuman Anil Deshmukh (Jul 18)
  • Re: Link for snort configurations not working Joel Esler (jesler) (Jul 18)
• Snort Blog: Upgrading Snort to 2.9.6.2, the ruleset. Joel Esler (jesler) (Jul 18)
• Snort in Debian 6.0.9 with Barnyard2 chozy fachrul (Jul 18)
• Genetic Algorithm and Snort chozy fachrul (Jul 18)
• Internal IPS slowing down internet connection VM PC (Jul 20)
  • Re: Internal IPS slowing down internet connection Shirkdog (Jul 20)
    • Re: Internal IPS slowing down internet connection Y M (Jul 20)
  • Re: Internal IPS slowing down internet connection Y M (Jul 20)
    • Re: Internal IPS slowing down internet connection PS (Jul 20)
      • Re: Internal IPS slowing down internet connection PS (Jul 20)
  • Re: Internal IPS slowing down internet connection Jason Haar (Jul 20)
• receive snort signature vien chuyen (Jul 21)
  • Re: receive snort signature lists () packetmail net (Jul 21)
• my mail vien chuyen (Jul 21)
• Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler (Jul 21)
  • Re: Snort with PulledPork and Ubuntu 12.04 Server Joel Esler (jesler) (Jul 21)
    • Re: Snort with PulledPork and Ubuntu 12.04 Server JJC (Jul 21)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Joel Esler (jesler) (Jul 21)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler (Jul 21)
    • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler (Jul 24)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Doug Burks (Jul 24)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler (Jul 24)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Doug Burks (Jul 24)
      • Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler (Jul 24)
• Write rules Snort Iliass Hakim (Jul 21)
• Re: Snort installation Y M (Jul 21)
• Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jutichai Thongkrachai (Jul 21)
  • Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty (Jul 21)
    • Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jeremy Hoel (Jul 21)
      • Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty (Jul 22)
• Winsnort on virtual machine Alan Gao (Jul 21)
  • Re: Winsnort on virtual machine Michael Steele (Jul 21)
• Snort Blog: Snort Rule Downloaders, we don't support "edge" anymore. Joel Esler (jesler) (Jul 21)
• Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jutichai Thongkrachai (Jul 21)
  • Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty (Jul 22)
• Error 422 again Andre DiMino (Jul 21)
  • Re: Error 422 again waldo kitty (Jul 22)
    • Re: Error 422 again Andre DiMino (Jul 22)
      • Re: Error 422 again Ian (Jul 23)
      • Re: Error 422 again Joel Esler (jesler) (Jul 23)
      • Re: Error 422 again waldo kitty (Jul 23)
      • Re: Error 422 again Joel Esler (jesler) (Jul 23)
      • Re: Error 422 again waldo kitty (Jul 23)
  • <Possible follow-ups>
  • Re: Error 422 again Laszlo Toth (Jul 23)
    • Re: Error 422 again Jeremy Hoel (Jul 23)
• Snorts EOLs Budinich Galvez, Luis Alberto (Jul 22)
  • Re: Snorts EOLs James Lay (Jul 22)
    • Re: Snorts EOLs Budinich Galvez, Luis Alberto (Jul 22)
      • Re: Snorts EOLs Joel Esler (jesler) (Jul 22)
      • Re: Snorts EOLs Budinich Galvez, Luis Alberto (Jul 22)
      • Re: Snorts EOLs Joel Esler (jesler) (Jul 22)
• Sourcefire VRT Certified Snort Rules Update 2014-07-22 Research (Jul 22)
• -S and ipvar vs. var Duane Howard (Jul 22)
  • Re: -S and ipvar vs. var Steve Gantz (Jul 22)
    • Re: -S and ipvar vs. var Duane Howard (Jul 22)
      • Re: -S and ipvar vs. var Joel Esler (jesler) (Jul 22)
      • Re: -S and ipvar vs. var Duane Howard (Jul 22)
      • Re: -S and ipvar vs. var Joel Esler (jesler) (Jul 22)
      • Re: -S and ipvar vs. var Duane Howard (Jul 23)
• problem about snort 2.9.6 and pr_ring cars000000 (Jul 22)
• Snort and rules Richard Smollett (Jul 23)
  • Re: Snort and rules Jeremy Hoel (Jul 23)
    • Re: Snort and rules Richard Smollett (Jul 23)
      • Re: Snort and rules Jeremy Hoel (Jul 23)
      • Re: Snort and rules Joel Esler (jesler) (Jul 23)
• POST on SNORT karim Cisco (Jul 23)
  • Re: POST on SNORT Joel Esler (jesler) (Jul 23)
• Learning more about alerts Rowell Dionicio (Jul 23)
  • Re: Learning more about alerts waldo kitty (Jul 23)
  • <Possible follow-ups>
  • Re: Learning more about alerts Tom Peters (thopeter) (Jul 23)
    • Re: Learning more about alerts Rowell Dionicio (Jul 24)
• OpSyslog_Alert(): is currently unable to handle Event Type [72] Robert Millott (Jul 23)
  • Re: OpSyslog_Alert(): is currently unable to handle Event Type [72] beenph (Jul 23)
• Having trouble editing the configuration file for Windows Trevor Thompson (Jul 23)
  • Re: Having trouble editing the configuration file for Windows Michael Steele (Jul 23)
  • Re: Having trouble editing the configuration file for Windows waldo kitty (Jul 23)
    • Re: Having trouble editing the configuration file for Windows Trevor Thompson (Jul 24)
      • Re: Having trouble editing the configuration file for Windows waldo kitty (Jul 24)
      • Re: Having trouble editing the configuration file for Windows Trevor Thompson (Jul 24)
      • Re: Having trouble editing the configuration file for Windows waldo kitty (Jul 25)
      • Re: Having trouble editing the configuration file for Windows Trevor Thompson (Jul 25)
• Nmap -sT detection Meysam Farazmand (Jul 23)
  • Re: Nmap -sT detection waldo kitty (Jul 24)
• libdnet.1()(64bit) is needed by snort ?????? (Jul 24)
  • Re: libdnet.1()(64bit) is needed by snort Jeremy Hoel (Jul 24)
    • Message not available
      • Re: libdnet.1()(64bit) is needed by snort Jeremy Hoel (Jul 30)
• How to check the latest XXS attacks from the latest SNORT signatures karim Cisco (Jul 24)
• Dynamic Rule [3:xxxxx] was not initialized properly Paul Biciunas (Jul 24)
• Proxy server configuration for pulledpork.conf file basant subba (Jul 24)
• How to log an IP address in dpx.c ? Zeeuw, L.V. de (Jul 24)
  • Re: How to log an IP address in dpx.c ? Emiliano Fausto (Jul 24)
    • Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de (Jul 25)
  • <Possible follow-ups>
  • Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de (Sep 15)
    • Re: How to log an IP address in dpx.c ? Emiliano Fausto (Sep 15)
      • Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de (Sep 15)
      • Re: How to log an IP address in dpx.c ? Steven Sturges (Sep 15)
      • Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de (Sep 16)
      • Re: How to log an IP address in dpx.c ? Emiliano Fausto (Sep 16)
• Sourcefire VRT Certified Snort Rules Update 2014-07-24 Research (Jul 24)
• Arpspoof preprocessor not generating alerts Michael Psaila (Jul 24)
• finding which rule Richard Smollett (Jul 24)
  • Re: finding which rule Y M (Jul 24)
    • Re: finding which rule Richard Smollett (Jul 24)
      • Re: finding which rule Y M (Jul 24)
      • Re: finding which rule Richard Smollett (Jul 24)
      • Re: finding which rule Y M (Jul 24)
      • Re: finding which rule Richard Smollett (Jul 24)
      • Re: finding which rule Y M (Jul 24)
      • Re: finding which rule Richard Smollett (Jul 25)
      • Re: finding which rule Joel Esler (jesler) (Jul 25)
      • Re: finding which rule waldo kitty (Jul 25)
  • Re: finding which rule James Lay (Jul 24)
• Proxy server settings for pulledpork basant subba (Jul 24)
  • Re: Proxy server settings for pulledpork Doug Burks (Jul 25)
• question about rule detect nmap scan Vuong D. Chieu (Jul 25)
  • Re: question about rule detect nmap scan lists () packetmail net (Jul 25)
• MailPoet Vulnerability Júlio César Melo (Jul 25)
• Re: Snort-users Digest, Vol 98, Issue 97 Rowell Dionicio (Jul 25)
• IP address check to anonymous-servers.com Tony Robinson (Jul 25)
• arpspoof preprocessor for offline PCAPs Michael Psaila (Jul 25)
• Can I install the latest version of Snort on Centos 7? Jutichai Thongkrachai (Jul 26)
  • Re: Can I install the latest version of Snort on Centos 7? Shirkdog (Jul 26)
  • Re: Can I install the latest version of Snort on Centos 7? Y M (Jul 26)
    • Re: Can I install the latest version of Snort on Centos 7? Shirkdog (Jul 26)
      • Re: Can I install the latest version of Snort on Centos 7? Livio Ricciulli (Jul 26)
• Snort database cannot update. Joseph Boo (Jul 26)
  • Re: Snort database cannot update. Y M (Jul 26)
    • Re: Snort database cannot update. Joel Esler (jesler) (Jul 26)
• AUTO: AYYILDIZ, Cihan is out of the office. (returning 11.08.2014) Cihan AYYILDIZ (Jul 26)
• Issues with remote syslog and snort.conf James Lay (Jul 26)
  • Re: Issues with remote syslog and snort.conf Y M (Jul 26)
    • Re: Issues with remote syslog and snort.conf Y M (Jul 26)
    • Re: Issues with remote syslog and snort.conf James Lay (Jul 26)
  • Re: Issues with remote syslog and snort.conf Stephen Gantz (Jul 26)
    • Re: Issues with remote syslog and snort.conf James Lay (Jul 26)
      • Re: Issues with remote syslog and snort.conf Y M (Jul 26)
• High Amount of http_inspect: OVERSIZE REQUEST-URI DIRECTORY Rowell Dionicio (Jul 28)
  • Re: High Amount of http_inspect: OVERSIZE REQUEST-URI DIRECTORY waldo kitty (Jul 28)
• Ideal way to update the rules Anshuman Anil Deshmukh (Jul 28)
  • Re: Ideal way to update the rules Joel Esler (jesler) (Jul 28)
  • Re: Ideal way to update the rules Livio Ricciulli (Jul 28)
    • Re: Ideal way to update the rules Anshuman Anil Deshmukh (Jul 29)
      • Re: Ideal way to update the rules Anshuman Anil Deshmukh (Jul 30)
      • Re: Ideal way to update the rules Jefferson, Shawn (Jul 30)
      • Re: Ideal way to update the rules Anshuman Anil Deshmukh (Jul 30)
      • Re: Ideal way to update the rules Jefferson, Shawn (Jul 30)
      • Re: Ideal way to update the rules Shirkdog (Jul 30)
      • Re: Ideal way to update the rules Jefferson, Shawn (Jul 30)
      • Re: Ideal way to update the rules Y M (Jul 31)
• Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar (Jul 29)
  • Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph (Jul 29)
    • Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar (Jul 30)
      • Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph (Jul 30)
      • Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar (Jul 31)
      • Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph (Jul 31)
• Sourcefire VRT Certified Snort Rules Update 2014-07-29 Research (Jul 29)
• Event mismatch Anshuman Anil Deshmukh (Jul 30)
  • FW: Event mismatch Anshuman Anil Deshmukh (Aug 04)
    • Re: Event mismatch Joel Esler (jesler) (Aug 04)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 04)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 04)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 05)
      • Re: Event mismatch JJC (Aug 05)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 05)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 08)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 13)
      • Re: Event mismatch Anshuman Anil Deshmukh (Aug 13)
      • Re: Event mismatch James Lay (Aug 13)
• Snort Drop Rules Logging PS (Jul 30)
  • Re: Snort Drop Rules Logging Joel Esler (jesler) (Jul 30)
    • Re: Snort Drop Rules Logging PS (Jul 30)
• AppID warnings and Snort Segmentation fault Kiryukhin Andrey (Jul 30)
  • Re: AppID warnings and Snort Segmentation fault Joel Esler (jesler) (Jul 30)
    • Message not available
      • Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey (Jul 30)
  • <Possible follow-ups>
  • Re: AppID warnings and Snort Segmentation fault Joel Cornett (jocornet) (Jul 30)
    • Re: AppID warnings and Snort Segmentation fault Kiryukhin Andrey (Jul 30)
      • Message not available
      • Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey (Jul 31)
      • Message not available
      • Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey (Jul 31)
• Pulled Pork Update Domains Matt Brichetto (Jul 30)
  • Re: Pulled Pork Update Domains Joel Esler (jesler) (Jul 30)
• Need help with Snort Rule for a HTTP GET parameter and pattern matching. Sabawoon Mageedzada (Jul 31)
  • Re: Need help with Snort Rule for a HTTP GET parameter and pattern matching. Y M (Jul 31)
• snort rules confuse Joseph Boo (Jul 31)
• Re: Need help with Snort Rule for a HTTP GET parameter and Simon Wesseldine (Jul 31)
• Sourcefire VRT Certified Snort Rules Update 2014-07-31 Research (Jul 31)
• Sfportscan Meysam Farazmand (Aug 01)
• How to handle multiple snort sensors Robert Millott (Aug 01)
  • Re: How to handle multiple snort sensors Doug Burks (Aug 01)
  • Re: How to handle multiple snort sensors Jaime Nebrera (Aug 01)
    • Re: How to handle multiple snort sensors Shirkdog (Aug 01)
  • Re: How to handle multiple snort sensors Jeremy Hoel (Aug 01)
• Sourcefire VRT Certified Snort Rules Update 2014-08-01 Research (Aug 01)
• Can't generate snort alerts with GET HTTP using pcre. Sabawoon Mageedzada (Aug 03)
• Re: Can't generate snort alerts with GET HTTP using pcre. Simon Wesseldine (Aug 04)
• snort darpa dataset mehdi maleki (Aug 04)
• HTTP_PORTS and http_inspect Duane Howard (Aug 04)
• snort.org down? Duane Howard (Aug 04)
  • Re: snort.org down? Shirkdog (Aug 04)
    • Re: snort.org down? Duane Howard (Aug 04)
      • Re: snort.org down? Joel Esler (jesler) (Aug 04)
• darpa dataset problem(zero alert) mehdi maleki (Aug 05)
  • Re: darpa dataset problem(zero alert) waldo kitty (Aug 05)
  • <Possible follow-ups>
  • darpa dataset problem(zero alert) mehdi maleki (Aug 06)
    • Message not available
      • Message not available
      • Fw: re: darpa dataset problem(zero alert) mehdi maleki (Aug 06)
    • Re: darpa dataset problem(zero alert) Joel Esler (jesler) (Aug 07)
      • Re: darpa dataset problem(zero alert) Joel Esler (jesler) (Aug 12)
      • Re: darpa dataset problem(zero alert) mehdi maleki (Aug 25)
      • Fw: darpa dataset problem(zero alert) mehdi maleki (Aug 25)
      • Re: darpa dataset problem(zero alert) Joel Esler (jesler) (Aug 19)
      • Re: darpa dataset problem(zero alert) waldo kitty (Aug 19)
      • Fw: darpa dataset problem(zero alert) mehdi maleki (Aug 25)
      • Re: darpa dataset problem(zero alert) Joel Esler (jesler) (Aug 25)
      • Re: darpa dataset problem(zero alert) waldo kitty (Aug 25)
  • Re: darpa dataset problem(zero alert) stephane.nasdrovisky (Aug 09)
• Yumato usuarionuevo nuevo nuevo (Aug 05)
  • FW: Yumato usuarionuevo nuevo nuevo (Aug 05)
    • Re: FW: Yumato waldo kitty (Aug 05)
  • Re: Yumato James Lay (Aug 05)
    • Re: Yumato lists () packetmail net (Aug 05)
  • Re: Yumato waldo kitty (Aug 05)
• Sourcefire VRT Certified Snort Rules Update 2014-08-05 Research (Aug 05)
• Re: Snort-users Digest, Vol 99, Issue 12 mehdi maleki (Aug 06)
  • Re: Snort-users Digest, Vol 99, Issue 12 waldo kitty (Aug 06)
• Sourcefire VRT Certified Snort Rules Update 2014-08-06 Research (Aug 06)
• I'm having trouble configuring Snort as a Daemon Trevor Thompson (Aug 06)
  • Re: I'm having trouble configuring Snort as a Daemon Bill Bernsen (Aug 08)
    • Re: I'm having trouble configuring Snort as a Daemon Trevor Thompson (Aug 12)
      • Re: I'm having trouble configuring Snort as a Daemon Bill Bernsen (Aug 12)
      • Re: I'm having trouble configuring Snort as a Daemon Robert Millott (Aug 12)
      • Re: I'm having trouble configuring Snort as a Daemon Trevor Thompson (Aug 12)
• [PATCH] Compile snort as library Maxim Uvarov (Aug 06)
  • Re: [PATCH] Compile snort as library Hui cao (Aug 06)
• Need help with snort rules Sabawoon Mageedzada (Aug 07)
  • Re: Need help with snort rules lists () packetmail net (Aug 07)
• RPMs on Snort.org Randal T. Rioux (Aug 07)
• Fw: libsf_appid_preproc.so: undefined symbol errors Theron ZORBAS (Aug 07)
  • Re: [Snort-users] libsf_appid_preproc.so: undefined symbol errors Joel Esler (jesler) (Aug 11)
• libpcap mmap issues on Snort Anand Raj Manickam (Aug 08)
  • <Possible follow-ups>
  • Re: libpcap mmap issues on Snort Anand Raj Manickam (Aug 11)
• no alert for darpa dataset mehdi maleki (Aug 08)
  • Re: no alert for darpa dataset waldo kitty (Aug 08)
    • Re: no alert for darpa dataset mehdi maleki (Aug 08)
• darpa dataset problem(zero alert) (9) mehdi maleki (Aug 09)
• Sourcefire VRT Certified Snort Rules Update 2014-08-12 Research (Aug 12)
• stream5 tcp session without 3-say handshake overload Robert Millott (Aug 12)
  • Re: stream5 tcp session without 3-say handshake overload Joel Esler (jesler) (Aug 12)
• [GZIP] Gzip inspection isn't working Pablo Artuso (Aug 13)
• wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson (Aug 13)
  • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Jefferson Diego Gomes Rosa (Aug 13)
    • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson (Aug 13)
      • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Joel Esler (jesler) (Aug 14)
      • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson (Aug 15)
      • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Joel Esler (jesler) (Aug 15)
      • Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson (Aug 15)
• Sourcefire VRT Certified Snort Rules Update 2014-08-14 Research (Aug 14)
• Detection for "niki-bot" and "Awesome Screenshot URL" spyware Tony Robinson (Aug 14)
• May be wrong error msg Balasubramaniam Natarajan (Aug 16)
  • Re: May be wrong error msg waldo kitty (Aug 16)
    • Re: May be wrong error msg Balasubramaniam Natarajan (Aug 16)
  • <Possible follow-ups>
  • Re: May be wrong error msg Balasubramaniam Natarajan (Aug 16)
• Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 17)
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty (Aug 17)
  • <Possible follow-ups>
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 18)
    • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty (Aug 19)
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 19)
    • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty (Aug 19)
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 21)
    • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty (Aug 21)
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 22)
    • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode James Lay (Aug 23)
  • Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai (Aug 23)
• Tcp session hijacking Meysam Farazmand (Aug 17)
  • Re: Tcp session hijacking waldo kitty (Aug 17)
    • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
      • Re: Tcp session hijacking Joel Esler (jesler) (Aug 19)
      • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
      • Re: Tcp session hijacking Joel Esler (jesler) (Aug 19)
      • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
      • Re: Tcp session hijacking Russ Combs (rucombs) (Aug 19)
      • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
      • Re: Tcp session hijacking Russ Combs (rucombs) (Aug 19)
      • Re: Tcp session hijacking Jefferson, Shawn (Aug 19)
      • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
      • Re: Tcp session hijacking waldo kitty (Aug 19)
      • Re: Tcp session hijacking Meysam Farazmand (Aug 19)
• Re: Snort crash when reload rules with tag session Netanel Maman (Aug 17)
  • Re: Snort crash when reload rules with tag session Netanel Maman (Aug 27)
• Snort Blog: Snort Subscriber Ruleset: Re-categorization of the Shared Object Rules Joel Esler (jesler) (Aug 18)
• Sourcefire VRT Certified Snort Rules Update 2014-08-19 Research (Aug 19)
• Snort does not capture with PF_RINF DNA Ivan Petrov (Aug 20)
• Suse Linux Enterprise Server 11 Daniel Gonnsen (Aug 20)
• Pulled Pork Errors again Weir, Jason (Aug 20)
  • Re: Pulled Pork Errors again Joel Esler (jesler) (Aug 20)
• CPU affinity in Snort under FreeBSD C. L. Martinez (Aug 21)
  • Re: CPU affinity in Snort under FreeBSD Shirkdog (Aug 21)
    • Re: CPU affinity in Snort under FreeBSD C. L. Martinez (Aug 21)
      • Re: CPU affinity in Snort under FreeBSD Juan Jesús Prieto (Aug 21)
      • Re: CPU affinity in Snort under FreeBSD C. L. Martinez (Aug 21)
      • Re: CPU affinity in Snort under FreeBSD Juan Jesús Prieto (Aug 21)
• Sourcefire VRT Certified Snort Rules Update 2014-08-21 Research (Aug 21)
• What does this rule mean? Richard Smollett (Aug 22)
  • Re: What does this rule mean? James Lay (Aug 22)
    • Re: What does this rule mean? Richard Smollett (Aug 22)
      • Re: What does this rule mean? Joel Esler (jesler) (Aug 22)
• Unable to get snort to output unified logs Khanh Tran (Aug 22)
  • Re: Unable to get snort to output unified logs waldo kitty (Aug 22)
    • Re: Unable to get snort to output unified logs Khanh Tran (Aug 22)
      • Re: Unable to get snort to output unified logs Jeremy Hoel (Aug 22)
      • Re: Unable to get snort to output unified logs Khanh Tran (Aug 23)
• in-line mode question Richard Smollett (Aug 22)
  • <Possible follow-ups>
  • Re: in-line mode question Y M (Aug 22)
• snort 2.9.6.2 make fails on OSX 10.9.4 hushsnort (Aug 22)
  • Re: snort 2.9.6.2 make fails on OSX 10.9.4 hushsnort (Aug 23)
• Missing shared object files in snapshot download file greg . mcnathansonsnuf003 (Aug 23)
  • Re: Missing shared object files in snapshot download file Y M (Aug 23)
    • Re: Missing shared object files in snapshot download file greg . mcnathansonsnuf003 (Aug 23)
      • Re: Missing shared object files in snapshot download file Y M (Aug 24)
      • Re: Missing shared object files in snapshot download file Y M (Aug 26)
      • Re: Missing shared object files in snapshot download file Joel Esler (jesler) (Aug 27)
• Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 23)
  • Re: Snort 2.9.6.2 inline mode problem Y M (Aug 23)
    • Message not available
      • Re: Snort 2.9.6.2 inline mode problem Y M (Aug 24)
      • Re: Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 24)
      • Re: Snort 2.9.6.2 inline mode problem Y M (Aug 24)
      • Re: Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 24)
      • Re: Snort 2.9.6.2 inline mode problem Y M (Aug 25)
      • Re: Snort 2.9.6.2 inline mode problem James Lay (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem James Lay (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem James Lay (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem Y M (Aug 27)
      • Re: Snort 2.9.6.2 inline mode problem Debason Shockre (Aug 28)
• SSL traffic block using Snort rules Ravi Kukadia (Aug 25)
  • Re: SSL traffic block using Snort rules Joel Esler (jesler) (Aug 25)
  • Re: SSL traffic block using Snort rules waldo kitty (Aug 25)
• two outputs kinomakino (Aug 25)
  • Re: two outputs Joel Esler (jesler) (Aug 25)
• 10GbE & 40GbE Support for Multiple Parallel Snort Instances Scott Schweitzer (Aug 25)
  • Re: 10GbE & 40GbE Support for Multiple Parallel Snort Instances Joel Esler (jesler) (Aug 25)
• OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross (Aug 26)
  • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Joel Esler (jesler) (Aug 26)
    • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross (Aug 26)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Joel Esler (jesler) (Aug 26)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC John York (Aug 26)
  • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Marty Roesch (maroesch) (Aug 26)
    • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Jeremy Hoel (Aug 26)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross (Aug 27)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Leon Ward (leonward) (Aug 27)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Jeremy Hoel (Aug 27)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross (Aug 28)
      • Re: OpenFPC Daemonlogger Segfault Through OpenFPC Leon Ward (leonward) (Aug 29)
• Sourcefire VRT Certified Snort Rules Update 2014-08-26 Research (Aug 26)
• Urgent Bankole Agunbiade (Aug 27)
  • Re: Urgent John Gomez (Aug 27)
    • Re: Urgent Shirkdog (Aug 27)
      • Re: Urgent Joel Esler (jesler) (Aug 27)
      • Re: Urgent Jeremy Hoel (Aug 27)
• Bad so_rules on file snortrules-snapshot-2961.tar.gz Budinich Galvez, Luis Alberto (Aug 27)
  • Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Joel Esler (jesler) (Aug 27)
    • Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Joel Esler (jesler) (Aug 27)
      • Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Budinich Galvez, Luis Alberto (Aug 28)
• trouble with inline mode Richard Smollett (Aug 27)
  • Re: trouble with inline mode VM PC (Aug 27)
  • Re: trouble with inline mode James Lay (Aug 27)
• installation help Sharif Uddin (Aug 27)
  • Re: installation help Robert Millott (Aug 27)
    • Re: installation help Sharif Uddin (Aug 27)
      • Re: installation help Robert Millott (Aug 27)
    • Re: installation help Jeremy Hoel (Aug 27)
  • Re: installation help Joel Esler (jesler) (Aug 27)
  • Re: installation help waldo kitty (Aug 27)
    • Re: installation help Sharif Uddin (Aug 28)
      • Re: installation help Sharif Uddin (Aug 28)
  • <Possible follow-ups>
  • Re: installation help Scott Finlon (Aug 27)
• Bug in 2.9.6.2??? Starner, Mark (Aug 27)
  • Re: Bug in 2.9.6.2??? Joel Esler (jesler) (Aug 27)
• Performance Issues, disk io? Weir, Jason (Aug 27)
• snort -> barnyard2 -> splunk Robert Millott (Aug 27)
  • Re: snort -> barnyard2 -> splunk Shirkdog (Aug 27)
  • Re: snort -> barnyard2 -> splunk VM PC (Aug 27)
• Re: Performance Issues, disk io? SOLVED! Weir, Jason (Aug 28)
• no documentation about some rules Maurizio Di Pietro (Esterna) (Aug 28)
  • Re: no documentation about some rules Joel Esler (jesler) (Aug 28)
    • R: no documentation about some rules Maurizio Di Pietro (Esterna) (Aug 29)
      • Re: no documentation about some rules Joel Esler (jesler) (Aug 29)
  • Re: no documentation about some rules Jamie Riden (Aug 28)
    • Re: no documentation about some rules Joel Esler (jesler) (Aug 28)
      • Re: no documentation about some rules Jamie Riden (Aug 29)
• snort syslog to siem kinomakino (Aug 28)
  • Re: snort syslog to siem Y M (Aug 28)
    • Re: snort syslog to siem kinomakino (Aug 28)
• Pulled Pork 404 Errors? Matt M. (Aug 29)
  • Re: Pulled Pork 404 Errors? Y M (Aug 29)
    • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Y M (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Y M (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Joel Esler (jesler) (Aug 29)
      • Re: Pulled Pork 404 Errors? Joel Esler (jesler) (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Matt M. (Aug 29)
      • Re: Pulled Pork 404 Errors? Joel Esler (jesler) (Aug 29)
  • <Possible follow-ups>
  • Re: Pulled Pork 404 Errors? Y M (Aug 29)
• PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason (Aug 29)
  • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Doug Burks (Aug 29)
  • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M (Aug 29)
    • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason (Aug 29)
      • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M (Aug 29)
      • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason (Aug 29)
      • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M (Aug 29)
  • Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates James Lay (Aug 29)
• Unknown ClassType: web-application-attack Matt M. (Aug 29)
  • Re: Unknown ClassType: web-application-attack Y M (Aug 30)
    • Re: Unknown ClassType: web-application-attack Matt M. (Aug 30)
      • Re: Unknown ClassType: web-application-attack Matt M. (Aug 30)
• Query on log_tcpdump Balasubramaniam Natarajan (Sep 01)
  • Re: Query on log_tcpdump waldo kitty (Sep 01)
  • Re: Query on log_tcpdump Y M (Sep 01)
    • Re: Query on log_tcpdump Balasubramaniam Natarajan (Sep 01)
• alerts on blacklisted IPs Victor-Alexandru Truica (Sep 01)
  • Re: alerts on blacklisted IPs Joel Esler (jesler) (Sep 01)
• Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 01)
  • Re: Facing problem using AFPACKET James Lay (Sep 01)
    • Re: Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 01)
  • Re: Facing problem using AFPACKET Y M (Sep 01)
    • Re: Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 03)
      • Re: Facing problem using AFPACKET Y M (Sep 03)
      • Re: Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 03)
      • Re: Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 04)
      • Re: Facing problem using AFPACKET Y M (Sep 04)
      • Re: Facing problem using AFPACKET Anshuman Anil Deshmukh (Sep 04)
      • Re: Facing problem using AFPACKET Y M (Sep 05)
• configuring rules Sharif Uddin (Sep 02)
  • Re: configuring rules Joel Esler (jesler) (Sep 02)
    • Re: configuring rules Sharif Uddin (Sep 02)
      • Re: configuring rules Joel Esler (jesler) (Sep 02)
      • Re: configuring rules Sharif Uddin (Sep 02)
      • Re: configuring rules Joel Esler (jesler) (Sep 02)
      • Re: configuring rules Sharif Uddin (Sep 03)
      • Re: configuring rules Y M (Sep 03)
      • Re: configuring rules Joel Esler (Sep 03)
      • Re: configuring rules Joel Esler (Sep 03)
      • Re: configuring rules Sharif Uddin (Sep 03)
      • Re: configuring rules Sharif Uddin (Sep 04)
• Sourcefire VRT Certified Snort Rules Update 2014-09-02 Research (Sep 02)
• Fw: Snort[]: FATAL ERROR: Event6 type not yet supported! vinay kadagave (Sep 02)
• Analyzing Snort Alerts and EMailing Matt M. (Sep 03)
  • Re: Analyzing Snort Alerts and EMailing Weir, Jason (Sep 03)
    • Re: Analyzing Snort Alerts and EMailing Matt M. (Sep 03)
      • Re: Analyzing Snort Alerts and EMailing Weir, Jason (Sep 03)
      • Re: Analyzing Snort Alerts and EMailing Matt M. (Sep 03)
      • Re: Analyzing Snort Alerts and EMailing Jeremy Hoel (Sep 03)
      • Re: Analyzing Snort Alerts and EMailing Sharif Uddin (Sep 04)
      • Re: Analyzing Snort Alerts and EMailing Matt M. (Sep 04)
      • Re: Analyzing Snort Alerts and EMailing Da Beave (Sep 05)
  • Re: Analyzing Snort Alerts and EMailing Doug Burks (Sep 03)
    • Re: Analyzing Snort Alerts and EMailing Matt M. (Sep 03)
  • Re: Analyzing Snort Alerts and EMailing Enrique de Juan (Sep 03)
  • Re: Analyzing Snort Alerts and EMailing Shirkdog (Sep 03)
• Auto Response Mike Jendrejcak (Sep 03)
  • <Possible follow-ups>
  • Auto Response Mike Jendrejcak (Sep 03)
• Sourcefire VRT Certified Snort Rules Update 2014-09-04 Research (Sep 04)
• Cannot build afpacket module for DAQ 2.0.2 Sec Aficionado (Sep 04)
  • Re: Cannot build afpacket module for DAQ 2.0.2 James Lay (Sep 04)
    • Re: Cannot build afpacket module for DAQ 2.0.2 Sec Aficionado (Sep 05)
      • Re: Cannot build afpacket module for DAQ 2.0.2 James Lay (Sep 05)
      • Re: Cannot build afpacket module for DAQ 2.0.2 Sec_Aficionado (Sep 05)
      • Re: Cannot build afpacket module for DAQ 2.0.2 James Lay (Sep 05)
• Log: Alter folder with local IP address for attacker addres (snort for win). THE WAR (Sep 05)
• Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Ing . Fernando Chávez Mosso (Sep 05)
  • Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Joel Esler (jesler) (Sep 05)
    • Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Ing . Fernando Chávez Mosso (Sep 05)
• Snorby Setup Issue Matt M. (Sep 05)
  • Re: Snorby Setup Issue Matt M. (Sep 09)
• snort telnet login alert Виталий Щетинин (Sep 07)
  • Re: snort telnet login alert waldo kitty (Sep 07)
    • Re: snort telnet login alert Виталий Щетинин (Sep 07)
      • Re: snort telnet login alert lists () packetmail net (Sep 07)
      • Re: snort telnet login alert Joel Esler (jesler) (Sep 07)
      • Re: snort telnet login alert Shirkdog (Sep 07)
      • Re: snort telnet login alert Виталий Щетинин (Sep 07)
• Is this claim still true for portscan detection in Snort ? sashank (Sep 07)
• most usfull snort rules amir levinzon (Sep 08)
• 502.2 Bad Gateway Error Message Martin, Greg (Sep 08)
  • Re: 502.2 Bad Gateway Error Message waldo kitty (Sep 08)
    • Re: 502.2 Bad Gateway Error Message Joel Esler (jesler) (Sep 08)
      • Re: 502.2 Bad Gateway Error Message waldo kitty (Sep 09)
• logging location Sean Browne (Sep 08)
  • Re: logging location Joel Esler (jesler) (Sep 08)
• stream5 in dynamic rules Виталий Щетинин (Sep 08)
  • Re: stream5 in dynamic rules Joel Esler (Sep 09)
    • Re: stream5 in dynamic rules Виталий Щетинин (Sep 09)
      • Re: stream5 in dynamic rules Patrick Mullen (Sep 09)
• network issue? kinomakino (Sep 09)
• rules explanations Sharif Uddin (Sep 09)
  • Re: rules explanations James Lay (Sep 09)
• Wordpress brute force rule-wp-login.php akh form (Sep 09)
  • Re: Wordpress brute force rule-wp-login.php Rodrigo Montoro(Sp0oKeR) (Sep 09)
• RE : Wordpress brute force rule-wp-login.php rmkml (Sep 09)
  • Re: RE : Wordpress brute force rule-wp-login.php akh form (Sep 09)
    • Re: RE : Wordpress brute force rule-wp-login.php akh form (Sep 10)
• cannot decode data link type 239 Sharif Uddin (Sep 09)
  • Re: cannot decode data link type 239 James Lay (Sep 09)
    • Re: cannot decode data link type 239 Sharif Uddin (Sep 09)
      • Re: cannot decode data link type 239 James Lay (Sep 09)
      • Re: cannot decode data link type 239 Sharif Uddin (Sep 09)
      • Re: cannot decode data link type 239 James Lay (Sep 09)
      • Re: cannot decode data link type 239 Russ Combs (rucombs) (Sep 09)
      • Re: cannot decode data link type 239 waldo kitty (Sep 09)
• Sourcefire VRT Certified Snort Rules Update 2014-09-09 Research (Sep 09)
• 18174.txt Kube, Cindy (Sep 09)
  • Re: 18174.txt Y M (Sep 09)
    • Re: 18174.txt Kube, Cindy (Sep 09)
  • Re: 18174.txt waldo kitty (Sep 09)
• Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam (Sep 09)
  • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M (Sep 10)
    • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam (Sep 10)
      • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M (Sep 10)
      • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam (Sep 10)
      • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M (Sep 10)
      • Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam (Sep 10)
• Re: not logging data Sharif Uddin (Sep 10)
• snort alert ip source/Dest changed kinomakino (Sep 10)
• rule explanation Sharif Uddin (Sep 10)
• Barnyard2 MySQL DB Error Matt M. (Sep 10)
  • Re: Barnyard2 MySQL DB Error Bill Bernsen (Sep 10)
    • Re: Barnyard2 MySQL DB Error Matt M. (Sep 10)
      • Re: Barnyard2 MySQL DB Error Bill Bernsen (Sep 11)
      • Re: Barnyard2 MySQL DB Error Sharif Uddin (Sep 12)
      • Re: Barnyard2 MySQL DB Error Matt M. (Sep 12)
• No Sensors Showing in Snorby Matt M. (Sep 10)
  • Re: No Sensors Showing in Snorby waldo kitty (Sep 10)
    • Re: No Sensors Showing in Snorby Matt M. (Sep 11)
      • Re: No Sensors Showing in Snorby waldo kitty (Sep 11)
      • Re: No Sensors Showing in Snorby Sharif Uddin (Sep 12)
      • Re: No Sensors Showing in Snorby Sharif Uddin (Sep 12)
      • Re: No Sensors Showing in Snorby Matt M. (Sep 12)
      • Re: No Sensors Showing in Snorby Matt M. (Sep 12)
• Sourcefire VRT Certified Snort Rules Update 2014-09-11 Research (Sep 11)
• Randomness in Snort engine Hyunseok (Sep 11)
  • Fwd: Randomness in Snort engine Hyunseok (Sep 11)
  • Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 11)
    • Re: Randomness in Snort engine Hyunseok (Sep 11)
      • Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 11)
      • Re: Randomness in Snort engine Hyunseok (Sep 11)
      • Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 12)
      • Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 12)
      • Re: Randomness in Snort engine Hyunseok (Sep 12)
• Pulled Pork issue Martin, Greg (Sep 11)
  • Re: Pulled Pork issue Shirkdog (Sep 11)
• Best way to change and apply multiple rules for a certain criteria Rochon, Jason (Sep 12)
  • Re: Best way to change and apply multiple rules for a certain criteria waldo kitty (Sep 12)
• rule for cacti failed login Sharif Uddin (Sep 12)
  • Re: rule for cacti failed login Jeremy Hoel (Sep 12)
    • Re: rule for cacti failed login Sharif Uddin (Sep 15)
      • Re: rule for cacti failed login Jeremy Hoel (Sep 15)
      • Re: rule for cacti failed login Sharif Uddin (Sep 16)
      • Re: rule for cacti failed login waldo kitty (Sep 16)
      • Re: rule for cacti failed login Sharif Uddin (Sep 16)
      • Re: rule for cacti failed login waldo kitty (Sep 16)
• No Events/Alerts Arriving in Snorby Matt M. (Sep 12)
  • Re: No Events/Alerts Arriving in Snorby waldo kitty (Sep 12)
• Is there not a database schema in Snort Source for Snort? Jutichai Thongkrachai (Sep 13)
  • Re: Is there not a database schema in Snort Source for Snort? waldo kitty (Sep 14)
    • Re: Is there not a database schema in Snort Source for Snort? waldo kitty (Sep 15)
  • Re: Is there not a database schema in Snort Source for Snort? Sharif Uddin (Sep 15)
• there is nothing in Snort log on my server Jutichai Thongkrachai (Sep 13)
• Kerberos login failure detection Sharif Uddin (Sep 15)
  • Re: Kerberos login failure detection waldo kitty (Sep 15)
• SSH between subnets Cody Brugh (Sep 15)
  • Re: SSH between subnets Joel Esler (jesler) (Sep 15)
    • Re: SSH between subnets Cody Brugh (Sep 15)
      • Re: SSH between subnets Cody Brugh (Sep 15)
• Snort inline afpaquet slow network Ezequiel M. Cardinali (Sep 15)
• Fin Fisher rules jean paul cesari (Sep 15)
• basic understanding questions amir levinzon (Sep 16)
  • Re: basic understanding questions Joel Esler (jesler) (Sep 16)
    • Re: basic understanding questions amir levinzon (Sep 16)
      • Re: basic understanding questions waldo kitty (Sep 16)
• memcap maxed out Sharif Uddin (Sep 16)
  • Re: memcap maxed out Khanh Tran (Sep 16)
  • Re: memcap maxed out Kurzawa, Kevin (Sep 22)
    • Re: memcap maxed out Sharif Uddin (Sep 22)
      • Re: memcap maxed out Khanh Tran (Sep 22)
      • Re: memcap maxed out Sharif Uddin (Sep 23)
• Sourcefire VRT Certified Snort Rules Update 2014-09-16 Research (Sep 16)
• alert on folder permissions Sharif Uddin (Sep 17)
• missing frames Bankole Agunbiade (Sep 18)
• Snort with pf_ring -- recommendations for DAQ settings Risto Vaarandi (Sep 18)
  • Re: Snort with pf_ring -- recommendations for DAQ settings Eugenio Perez (Sep 24)
  • Snort not generating any severity Khanh Tran (Sep 25)
    • Re: Snort not generating any severity waldo kitty (Sep 25)
• Sourcefire VRT Certified Snort Rules Update 2014-09-18 Research (Sep 18)
• React Rule Trouble Daniel Ayoub (Sep 19)
• A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 19)
  • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 23)
    • Re: A size of log file is zero although there is an attack Sharif Uddin (Sep 24)
    • Re: A size of log file is zero although there is an attack James Lay (Sep 24)
  • <Possible follow-ups>
  • Re: A size of log file is zero although there is an attack Sharif Uddin (Sep 26)
• Pulledpork on Gentoo Robert Millott (Sep 22)
  • Re: Pulledpork on Gentoo Shirkdog (Sep 22)
    • Re: Pulledpork on Gentoo Robert Millott (Sep 22)
• snort 2.9.6.2 unified2 John Hally (Sep 22)
  • Re: snort 2.9.6.2 unified2 Shirkdog (Sep 22)
    • Re: snort 2.9.6.2 unified2 John Hally (Sep 23)
      • Re: snort 2.9.6.2 unified2 Sharif Uddin (Sep 23)
      • Re: snort 2.9.6.2 unified2 John Hally (Sep 23)
      • Re: snort 2.9.6.2 unified2 Sharif Uddin (Sep 23)
      • Re: snort 2.9.6.2 unified2 John Hally (Sep 23)
      • Re: snort 2.9.6.2 unified2 Sharif Uddin (Sep 23)
      • Re: snort 2.9.6.2 unified2 John Hally (Sep 23)
• Sourcefire VRT Certified Snort Rules Update 2014-09-23 Research (Sep 23)
• Snort Rules Issues Tarzan538 NONO (Sep 23)
  • Re: Snort Rules Issues waldo kitty (Sep 23)
  • <Possible follow-ups>
  • Re: Snort Rules Issues Simon Wesseldine (Sep 24)
  • Re: Snort Rules Issues Simon Wesseldine (Sep 25)
• DAQ output Eugenio Perez (Sep 24)
• SID 31968 EXPLOIT-KIT Astrum exploit kit Adobe Flash exploit payload request Joe Gedeon (Sep 24)
  • Re: SID 31968 EXPLOIT-KIT Astrum exploit kit Adobe Flash exploit payload request Y M (Sep 24)
• Sourcefire VRT Certified Snort Rules Update 2014-09-24 Research (Sep 24)
• Re: Snort-sigs Digest, Vol 100, Issue 8 Tarzan538 NONO (Sep 24)
• PulledPork failing to fetch opensource.gz.md5 Bill Bernsen (Sep 24)
  • Re: PulledPork failing to fetch opensource.gz.md5 Joel Esler (jesler) (Sep 24)
    • Re: PulledPork failing to fetch opensource.gz.md5 Bill Bernsen (Sep 24)
      • Re: PulledPork failing to fetch opensource.gz.md5 Joel Esler (jesler) (Sep 24)
• Snort with ipfilter Vasiq Mz (Sep 25)
• Any new Rules for Sheelshock/Bash Attacks? Brook, S. Barrie (Sep 25)
  • Re: Any new Rules for Sheelshock/Bash Attacks? Joel Esler (jesler) (Sep 25)
  • Re: Any new Rules for Sheelshock/Bash Attacks? waldo kitty (Sep 25)
• Sourcefire VRT Certified Snort Rules Update 2014-09-25 Research (Sep 25)
• I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 25)
  • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler) (Sep 25)
    • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 25)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 25)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 25)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Jeremy Hoel (Sep 25)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 26)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler) (Sep 26)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming (Sep 26)
      • Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler) (Sep 26)
• Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge (Sep 25)
  • Re: Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge (Sep 26)
• Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 25)
  • Re: A size of log file is zero although there is an attack Sharif Uddin (Sep 26)
  • Re: A size of log file is zero although there is an attack waldo kitty (Sep 26)
  • <Possible follow-ups>
  • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 26)
    • Re: A size of log file is zero although there is an attack Sharif Uddin (Sep 26)
  • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 26)
  • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 26)
    • Re: A size of log file is zero although there is an attack Sharif Uddin (Sep 26)
  • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 27)
    • Re: A size of log file is zero although there is an attack waldo kitty (Sep 27)
    • Re: A size of log file is zero although there is an attack Jutichai Thongkrachai (Sep 28)
• http_header not working NIDS TEAM (Sep 26)
  • Re: http_header not working Shirkdog (Sep 26)
    • Re: http_header not working NIDS TEAM (Sep 26)
  • Re: http_header not working Stephen Gantz (Sep 26)
    • Re: http_header not working NIDS TEAM (Sep 26)
      • Re: http_header not working Joel Esler (jesler) (Sep 26)
      • Re: http_header not working NIDS TEAM (Sep 26)
      • Re: http_header not working Joel Esler (jesler) (Sep 26)
      • Re: http_header not working NIDS TEAM (Sep 26)
      • Re: http_header not working Joel Esler (jesler) (Sep 26)
      • Re: http_header not working NIDS TEAM (Sep 29)
      • Re: http_header not working waldo kitty (Sep 29)
  • Re: http_header not working Mitesh Jadia (Sep 29)
    • Re: http_header not working NIDS TEAM (Sep 29)
• BASH vulnerability/community.rules Farnsworth, Robert (Sep 26)
  • Re: BASH vulnerability/community.rules waldo kitty (Sep 26)
• Are so rules needed? Robert Millott (Sep 26)
  • Re: Are so rules needed? Joel Esler (jesler) (Sep 26)
• Sourcefire VRT Certified Snort Rules Update 2014-09-26 Research (Sep 26)
• DAQ 2.0.2, NFQ - DAQ error when trying to start snort Peter Fyon (Sep 28)
  • Re: DAQ 2.0.2, NFQ - DAQ error when trying to start snort Hui Cao (huica) (Sep 30)
• DAQ: parallel build problem Jann Röder (Sep 28)
  • Re: DAQ: parallel build problem Hui Cao (huica) (Sep 30)
• Re: Snort-devel Digest, Vol 98, Issue 7 Muhammad Ridwan Zalbina (Sep 29)
  • Re: Snort-devel Digest, Vol 98, Issue 7 Hui Cao (huica) (Sep 30)
• Salir Suscripcion Dilan Loboa (Sep 29)
• hi westlake (Sep 29)
• Cannot install Snort with RPM file. Jutichai Thongkrachai (Sep 30)
  • Re: Cannot install Snort with RPM file. Kurzawa, Kevin (Sep 30)
    • Re: Cannot install Snort with RPM file. Bill Bernsen (Sep 30)
• Sourcefire VRT Certified Snort Rules Update 2014-09-30 Research (Sep 30)
• Fast Pattern Matcher not using http_raw_* content strings? Mike Cox (Sep 30)

Previous period

Next period