Snort: by date

• RSS Feed
• About List
• All Lists

Previous period

Next period

1032 messages starting Jul 01 14 and ending Sep 30 14
Date index | Thread index | Author index

Tuesday, 01 July

Re: FW: Afpacket daq-2.0.1 snort Juan Jesus Prieto
multi-threaded snort Maxim Uvarov
help with file BPF block ip hernani
Sourcefire VRT Certified Snort Rules Update 2014-07-01 Research
Re: Stream5 reload bug Bhagya Bantwal (bbantwal)
Re: u2boat filters patch Bhagya Bantwal (bbantwal)
Re: help with file BPF block ip waldo kitty
Snort Windows 8 Pro? John Gomez
Snort 2.9.7 Beta is now available Snort Releases
Snort 2.9.7 Beta is now available Snort Releases
Fedora build conma293

Wednesday, 02 July

Can't run pulledpork Indira Kas
Re: Snort Windows 8 Pro? Michael Steele
Re: Snort Windows 8 Pro? John Gomez
Re: multi-threaded snort Russ Combs (rucombs)
Re: HTTP reassembly problem - Snort 2.9.6.1 Joel Esler (jesler)
Re: bug in snort reload via HUP signal Bhagya Bantwal (bbantwal)
Re: bug in snort reload via HUP signal Bhagya Bantwal (bbantwal)
Re: Can't run pulledpork basant subba
Re: Can't run pulledpork Shirkdog
sid-msg.map file is missing Indira Kas
Re: Snort Windows 8 Pro? Stephen Gantz
Re: Snort Windows 8 Pro? John Gomez
Re: sid-msg.map file is missing Shirkdog
Re: snort log to remote syslog Robert Millott
Re: HTTP reassembly problem - Snort 2.9.6.1 Mateusz Pigulski
Could someone test a rule for me please? Charlie Egan
Re: Snort Windows 8 Pro? Michael Steele
Re: FW: Afpacket daq-2.0.1 snort Anshuman Anil Deshmukh
Re: Could someone test a rule for me please? lists () packetmail net
Re: Could someone test a rule for me please? Charlie Egan
Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera
Re: Could someone test a rule for me please? Joel Esler (jesler)
Re: Could someone test a rule for me please? Joel Esler (jesler)
Re: Could someone test a rule for me please? lists () packetmail net
Re: FW: Afpacket daq-2.0.1 snort Anshuman Anil Deshmukh
Can't generate alerts on HTTP GET attacks Sabawoon Mageedzada
Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera
Re: Can't generate alerts on HTTP GET attacks Ryan
Re: Can't generate alerts on HTTP GET attacks Y M
Re: snort log to remote syslog Y M
Re: sid-msg.map file is missing Y M
Re: Can't generate alerts on HTTP GET attacks rmkml
Sourcefire VRT Certified Snort Rules Update 2014-07-02 Research
Re: bug in snort reload via HUP signal Juan Jesus Prieto
Re: snort log to remote syslog Robert Millott
INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Chase Turner
Re: Can't run pulledpork JJC
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Doug Burks
Re: FW: Afpacket daq-2.0.1 snort Juan Jesus Prieto

Thursday, 03 July

Re: Can't generate alerts on HTTP GET attacks Simon Wesseldine
Re: Could someone test a rule for me please? Charlie Egan
help with bad traffic rule hernani
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Jaime Nebrera
Snort BPF.filter doesn't work Robert Millott
Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis)
Re: Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis)
Re: Snort BPF.filter doesn't work Robert Millott
Re: Snort BPF.filter doesn't work Nicholas Mavis (nmavis)
Re: Snort BPF.filter doesn't work Robert Millott
Re: Snort BPF.filter doesn't work Nicholas Mavis (nmavis)

Sunday, 06 July

Wacky Idea Re: OpenAppID Randal T. Rioux
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Randal T. Rioux
Re: Snort Windows 8 Pro? Randal T. Rioux
Re: FW: Afpacket daq-2.0.1 snort Randal T. Rioux
Re: FW: Afpacket daq-2.0.1 snort Jaime Nebrera
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Jaime Nebrera

Monday, 07 July

Re: HTTP reassembly problem - Snort 2.9.6.1 Mateusz Pigulski
Re: Could someone test a rule for me please? Charlie Egan
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Joel Esler (jesler)
Re: Wacky Idea Re: OpenAppID Joel Esler (jesler)
Re: Could someone test a rule for me please? Joel Esler (jesler)
Re: Could someone test a rule for me please? Charlie Egan
Snort Blog: OpenAppID Training Videos: How to create a custom detector Joel Esler (jesler)

Tuesday, 08 July

Re: Can't generate alerts on HTTP GET attacks Nicholas Mavis (nmavis)
Events with no packet data James Lay
Sourcefire VRT Certified Snort Rules Update 2014-07-08 Research
Whitelist IP's? Jeff Meigs
default snort rules Abhijit Tikekar
Re: Snort BPF.filter doesn't work Robert Millott
Snort additional-downloads dead link Guillaume Daleux
Re: Snort BPF.filter doesn't work Geoffrey Serrao
Re: Snort additional-downloads dead link Jaime Nebrera
Re: Snort additional-downloads dead link Jason
Re: Whitelist IP's? waldo kitty
Re: Snort additional-downloads dead link Guillaume Daleux
Re: default snort rules waldo kitty
Re: Snort BPF.filter doesn't work James Lay
Sourcefire VRT Certified Snort Rules Update 2014-07-08 Research
mysql with windows snort Alan Gao
Re: default snort rules Joel Esler (jesler)
Re: mysql with windows snort Steve Gantz
Re: Snort additional-downloads dead link Juan Jesus Prieto
Re: Whitelist IP's? Joel Esler (jesler)
Re: mysql with windows snort Joel Esler (jesler)
Re: mysql with windows snort Michael Steele
Re: Whitelist IP's? waldo kitty

Wednesday, 09 July

Re: Whitelist IP's? Jeff Meigs
Whitelist IP's? Jeff Meigs
mysql with windows snort Alan Gao
Re: mysql with windows snort Joel Esler (jesler)
Snort Blog: We have a brand new Snort.org, and are moving to it soon! Joel Esler (jesler)
Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Shirkdog
Re: mysql with windows snort Michael Steele
Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Randal T. Rioux
Re: Snort Blog: We have a brand new Snort.org, and are moving to it soon! Joel Esler (jesler)
Re: Could someone test a rule for me please? Charlie Egan
Re: Could someone test a rule for me please? Joel Esler (jesler)
Re: Could someone test a rule for me please? Jamie Riden
Re: Could someone test a rule for me please? Charlie Egan
Re: Could someone test a rule for me please? Joel Esler (jesler)
Re: Could someone test a rule for me please? Jamie Riden
Re: mysql with windows snort Michael Steele
Re: Events with no packet data Y M
Re: Events with no packet data James Lay
Re: Whitelist IP's? Y M
Re: mysql with windows snort Joel Esler (jesler)
Snort Blog: The New Snort.org is here! Joel Esler (jesler)

Thursday, 10 July

HTTP 422 when trying to download rulesets with pulledpork Laszlo Toth
Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Re: HTTP 422 when trying to download rulesets with pulledpork Shirkdog
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
S5: Session exceeded & Pruned session Anshuman Anil Deshmukh
Re: Snort BPF.filter doesn't work Robert Millott
Re: Rig Exploit Kit outbound URI request signature Nicholas Mavis (nmavis)
Re: default snort rules Abhijit Tikekar
Re: Snort BPF.filter doesn't work Jeremy Hoel
Re: Rig Exploit Kit outbound URI request signature lists () packetmail net
Re: default snort rules Jeremy Hoel
Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao
Re: Snort BPF.filter doesn't work Robert Millott
Re: Snort BPF.filter doesn't work Jeremy Hoel
Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao
Re: Snort Blog: The New Snort.org is here! waldo kitty
Re: default snort rules Abhijit Tikekar
Re: Whitelist IP's? waldo kitty
Re: preprocessor sfportscan does not generate alerts L0rd Ch0de1m0rt
Re: default snort rules Jeremy Hoel
Re: Rig Exploit Kit outbound URI request signature lists () packetmail net
Re: Snort BPF.filter doesn't work Robert Millott
Sourcefire VRT Certified Snort Rules Update 2014-07-10 Research
Re: Snort BPF.filter doesn't work Jeremy Hoel
Re: default snort rules Abhijit Tikekar
Re: Snort BPF.filter doesn't work James Lay
Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao
Re: Rig Exploit Kit outbound URI request signature lists () packetmail net
Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Heine Lysemose
Re: default snort rules Jeremy Hoel
Re: Rig Exploit Kit outbound URI request signature Geoffrey Serrao
FW: Whitelist IP's? Jeff Meigs
Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Joe Gedeon
Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Heine Lysemose
Re: FW: Whitelist IP's? Y M
Re: default snort rules Abhijit Tikekar
Rule Downloads Failing Turnbough, Bradley E.
Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark
Re: Snort BPF.filter doesn't work Robert Millott
Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark
Re: Rule Downloads Failing waldo kitty
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark
Re: Sourcefire VRT Certified Snort Rules Update 2014-07-10 Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: Rule Downloads Failing Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Starner, Mark
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: Snort BPF.filter doesn't work Jeremy Hoel
BPF problem Mike Patterson
Re: Snort BPF.filter doesn't work waldo kitty
Re: INQUIRY - seeking suitable micro-appliance for snort deployment and centralized alerts console from variety of WAN deployments in residential networks Livio Ricciulli

Friday, 11 July

Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Re: HTTP 422 when trying to download rulesets with pulledpork Stark, Vernon L.
Re: Snort BPF.filter doesn't work Robert Millott
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: preprocessor sfportscan does not generate alerts L0rd Ch0de1m0rt
SMTP_Header_Name_Overfolw Majed
Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: Snort BPF.filter doesn't work waldo kitty
Re: BPF problem Mike Patterson
Re: BPF problem James Lay
Re: BPF problem waldo kitty
Re: BPF problem Mike Patterson
Re: BPF problem Mike Patterson
Re: BPF problem James Lay
Re: BPF problem Mike Patterson
Re: BPF problem James Lay
Re: BPF problem Mike Patterson

Saturday, 12 July

Alojzy Kleks - 7/12/2014 3:00:16 PM Alojzy Kleks
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: Alojzy Kleks - 7/12/2014 3:00:16 PM Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)

Sunday, 13 July

Re: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar
Re: HTTP 422 when trying to download rulesets with pulledpork Joel Esler (jesler)
Re: HTTP 422 when trying to download rulesets with pulledpork Avery Rozar

Monday, 14 July

Multiple instances of snort -G option Robert Millott
Snort Blog: Snort Subscriber Rule Set Update Joel Esler (jesler)
FW: Multiple instances of snort -G option Tony Reusser
Help needed writing GET requests Sabawoon Mageedzada
Re: Help needed writing GET requests lists () packetmail net
RE: Multiple instances of snort -G option Eugenio Perez
Re: Multiple instances of snort -G option Scott Schweitzer
Ruxcon 2014 Final Call For Presentations cfp

Tuesday, 15 July

[SOLVED] RE: HTTP 422 when trying to download rulesets with pulledpork Anshuman Anil Deshmukh
Snort Blog: OpenAppId Detector Developer Guide has been posted! Joel Esler (jesler)
Re: default snort rules Abhijit Tikekar
[PATCH] implement odp daq module Maxim Uvarov
Sourcefire VRT Certified Snort Rules Update 2014-07-15 Research
Re: Sourcefire VRT Certified Snort Rules Update 2014-07-15 Heine Lysemose
snort Installer not copying over H i
Sourcefire VRT Certified Snort Rules Update 2014-07-15 Research
Re: snort Installer not copying over Michael Steele
Re: snort Installer not copying over H i
Re: snort Installer not copying over waldo kitty
Re: snort Installer not copying over Michael Steele

Wednesday, 16 July

Re: Bug report - can't compile snort unless FLEXRESP3 option is enabled elof
Re: Bug report - can't compile snort unless FLEXRESP3 option is enabled Joel Esler (jesler)
Re: Snort-users Digest, Vol 98, Issue 29 Chiranjeevi Chekka
Re: Snort-users Digest, Vol 98, Issue 29 Joel Esler (jesler)
Re: BPF problem elof
Re: BPF problem Mike Patterson
Re: BPF problem Mike Patterson
Packet I/O Totals section elof
Snort Alert [1:xx] - sid-msg.map looks correct William Rehnquyst
SNORT has stopped alerting Farnsworth, Robert
Re: Snort Alert [1:xx] - sid-msg.map looks correct Joel Esler (jesler)
Re: Snort Alert [1:xx] - sid-msg.map looks correct Y M
Re: SNORT has stopped alerting Y M
Finding which rule is blocking freber1977
Re: SNORT has stopped alerting Farnsworth, Robert
Re: SNORT has stopped alerting Joel Esler (jesler)
Snort rules downloaded from Amazon AWS through plain http Vladimir Rabotka
Re: SNORT has stopped alerting Y M
RAT sigs from CrowdStrike Report Y M
Re: SNORT has stopped alerting Farnsworth, Robert
Re: RAT sigs from CrowdStrike Report Joel Esler (jesler)
Re: SNORT has stopped alerting Y M
Re: Finding which rule is blocking waldo kitty
Re: RAT sigs from CrowdStrike Report Y M
Re: mysql with windows snort Michael Steele
nighthunter?? waldo kitty
[HITB-Announce] REMINDER: #HITB2014KUL CFP Deadline: 1st August Hafez Kamal

Thursday, 17 July

Bugs in Packet I/O Totals section elof
Snort 2.9.6.2 Now Available Snort Releases
Snort 2.9.6.2 Now Available Snort Releases
Re: SNORT has stopped alerting Farnsworth, Robert
Rules EoL James Lay
Re: SNORT has stopped alerting Y M
Re: Rules EoL Y M
Re: Packet I/O Totals section Carter Waxman (cwaxman)
Re: SNORT has stopped alerting Farnsworth, Robert
Re: SNORT has stopped alerting Y M
Re: Rules EoL Y M
Sourcefire VRT Certified Snort Rules Update 2014-07-17 Research
Override alert msg for reputation preprocessor? Duane Howard
Re: Override alert msg for reputation preprocessor? Hui cao
Re: Override alert msg for reputation preprocessor? Duane Howard
Re: Override alert msg for reputation preprocessor? Hui cao
Sniffer War!! Randal T. Rioux
Re: Sniffer War!! Doug Burks
question regarding distance 0 modifier James Dickenson
tuning Matheus Condi'ez
Re: Sniffer War!! James Lay
wrong version of gen-msg.map on labs? Gregory S Thomas
Re: wrong version of gen-msg.map on labs? Joel Esler (jesler)
Re: Sniffer War!! C. L. Martinez

Friday, 18 July

ERROR : SID: 15450, GID: 3 not registered properly. Disabling this rule Beenish Raza
Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Anshuman Anil Deshmukh
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler)
HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Joel Esler (jesler)
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Michael Steele
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Not able to block telnet command with snort Mitesh Jadia
Re: Sniffer War!! Vivek Rajagopalan
Link for snort configurations not working Anshuman Anil Deshmukh
Re: question regarding distance 0 modifier Joel Esler (jesler)
Re: Link for snort configurations not working Joel Esler (jesler)
Snort Blog: Upgrading Snort to 2.9.6.2, the ruleset. Joel Esler (jesler)
Re: [PATCH] implement odp daq module Maxim Uvarov
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler)
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler)
Re: [PATCH] implement odp daq module Carter Waxman (cwaxman)
Re: wrong version of gen-msg.map on labs? Joel Esler (jesler)
Re: question regarding distance 0 modifier James Dickenson
Re: Sniffer War!! Jeremy Hoel
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 waldo kitty
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler)
Snort in Debian 6.0.9 with Barnyard2 chozy fachrul
Genetic Algorithm and Snort chozy fachrul
Re: wrong version of gen-msg.map on labs? Gregory S Thomas

Saturday, 19 July

Re: Sniffer War!! beenph

Sunday, 20 July

Internal IPS slowing down internet connection VM PC
Re: Internal IPS slowing down internet connection Shirkdog
Re: Internal IPS slowing down internet connection Y M
Re: Internal IPS slowing down internet connection Y M
Re: Internal IPS slowing down internet connection Jason Haar
Re: Internal IPS slowing down internet connection PS
Re: Internal IPS slowing down internet connection PS

Monday, 21 July

receive snort signature vien chuyen
my mail vien chuyen
Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: Snort with PulledPork and Ubuntu 12.04 Server Joel Esler (jesler)
Write rules Snort Iliass Hakim
Re: receive snort signature lists () packetmail net
Re: Snort installation Y M
Re: HTTP INSPECT fails on Mirror Port James Lay
Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jutichai Thongkrachai
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Doug Burks
Re: HTTP INSPECT fails on Mirror Port James Lay
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port James Lay
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port James Lay
Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty
Winsnort on virtual machine Alan Gao
Re: Winsnort on virtual machine Michael Steele
Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jeremy Hoel
Snort Blog: Snort Rule Downloaders, we don't support "edge" anymore. Joel Esler (jesler)
Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 Jutichai Thongkrachai
Re: Snort with PulledPork and Ubuntu 12.04 Server JJC
Re: Snort with PulledPork and Ubuntu 12.04 Server Joel Esler (jesler)
Error 422 again Andre DiMino
Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler

Tuesday, 22 July

Snorts EOLs Budinich Galvez, Luis Alberto
Re: Snorts EOLs James Lay
Re: Snorts EOLs Budinich Galvez, Luis Alberto
Re: Snorts EOLs Joel Esler (jesler)
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: Snorts EOLs Budinich Galvez, Luis Alberto
Re: Snorts EOLs Joel Esler (jesler)
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Andre DiMino
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2014-07-22 Research
Re: Error 422 when fetching https://www.snort.org/reg-rules/opensource.gz.md5 Andre DiMino
Re: SNORT has stopped alerting Farnsworth, Robert
Re: SNORT has stopped alerting Jeremy Hoel
-S and ipvar vs. var Duane Howard
Re: -S and ipvar vs. var Steve Gantz
Re: -S and ipvar vs. var Duane Howard
Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty
Re: Is that ok to use tcpdump 4.0 for snort on Centos 6.5 waldo kitty
Re: Error 422 again waldo kitty
Re: -S and ipvar vs. var Joel Esler (jesler)
Re: -S and ipvar vs. var Duane Howard
Re: -S and ipvar vs. var Joel Esler (jesler)
problem about snort 2.9.6 and pr_ring cars000000
Re: Error 422 again Andre DiMino

Wednesday, 23 July

Re: HTTP INSPECT fails on Mirror Port James Lay
Snort and rules Richard Smollett
Re: Error 422 again Ian
Re: Error 422 again Joel Esler (jesler)
POST on SNORT karim Cisco
Re: Snort and rules Jeremy Hoel
Re: Error 422 again Laszlo Toth
Re: Error 422 again Jeremy Hoel
Learning more about alerts Rowell Dionicio
Re: -S and ipvar vs. var Duane Howard
Re: POST on SNORT Joel Esler (jesler)
Re: Learning more about alerts Tom Peters (thopeter)
Re: Snort and rules Richard Smollett
Re: Snort and rules Jeremy Hoel
OpSyslog_Alert(): is currently unable to handle Event Type [72] Robert Millott
Having trouble editing the configuration file for Windows Trevor Thompson
Re: Snort and rules Joel Esler (jesler)
Re: Error 422 again waldo kitty
Re: Learning more about alerts waldo kitty
Re: Having trouble editing the configuration file for Windows Michael Steele
Re: Error 422 again Joel Esler (jesler)
Re: Having trouble editing the configuration file for Windows waldo kitty
Re: OpSyslog_Alert(): is currently unable to handle Event Type [72] beenph
Re: Error 422 again waldo kitty
Nmap -sT detection Meysam Farazmand

Thursday, 24 July

libdnet.1()(64bit) is needed by snort ??????
Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler
How to check the latest XXS attacks from the latest SNORT signatures karim Cisco
Re: Snort with PulledPork and Ubuntu 12.04 Server Doug Burks
Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler
Re: Snort with PulledPork and Ubuntu 12.04 Server Doug Burks
Re: Snort with PulledPork and Ubuntu 12.04 Server Christian Gebler
Dynamic Rule [3:xxxxx] was not initialized properly Paul Biciunas
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Proxy server configuration for pulledpork.conf file basant subba
How to log an IP address in dpx.c ? Zeeuw, L.V. de
Re: Learning more about alerts Rowell Dionicio
Sourcefire VRT Certified Snort Rules Update 2014-07-24 Research
Re: libdnet.1()(64bit) is needed by snort Jeremy Hoel
Arpspoof preprocessor not generating alerts Michael Psaila
Re: [Snort-users] HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: Having trouble editing the configuration file for Windows Trevor Thompson
Re: How to log an IP address in dpx.c ? Emiliano Fausto
Re: [Snort-users] HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
finding which rule Richard Smollett
Re: Nmap -sT detection waldo kitty
Re: Having trouble editing the configuration file for Windows waldo kitty
Re: finding which rule Y M
Re: Having trouble editing the configuration file for Windows Trevor Thompson
Re: finding which rule Richard Smollett
Re: finding which rule Y M
Re: finding which rule Richard Smollett
Re: finding which rule James Lay
Re: finding which rule Y M
Re: finding which rule Richard Smollett
Re: finding which rule Y M
Re: [Snort-users] HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Proxy server settings for pulledpork basant subba

Friday, 25 July

Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de
question about rule detect nmap scan Vuong D. Chieu
Re: Proxy server settings for pulledpork Doug Burks
MailPoet Vulnerability Júlio César Melo
Re: finding which rule Richard Smollett
Re: finding which rule Joel Esler (jesler)
Re: question about rule detect nmap scan lists () packetmail net
Re: Snort-users Digest, Vol 98, Issue 97 Rowell Dionicio
Re: [Snort-users] HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
IP address check to anonymous-servers.com Tony Robinson
arpspoof preprocessor for offline PCAPs Michael Psaila
Re: Having trouble editing the configuration file for Windows waldo kitty
Re: Having trouble editing the configuration file for Windows Trevor Thompson
HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: finding which rule waldo kitty

Saturday, 26 July

Can I install the latest version of Snort on Centos 7? Jutichai Thongkrachai
Snort database cannot update. Joseph Boo
AUTO: AYYILDIZ, Cihan is out of the office. (returning 11.08.2014) Cihan AYYILDIZ
Issues with remote syslog and snort.conf James Lay
Re: Issues with remote syslog and snort.conf Y M
Re: Issues with remote syslog and snort.conf Y M
Re: Snort database cannot update. Y M
Re: Issues with remote syslog and snort.conf James Lay
Re: Issues with remote syslog and snort.conf Stephen Gantz
Re: Snort database cannot update. Joel Esler (jesler)
Re: Issues with remote syslog and snort.conf James Lay
Re: Can I install the latest version of Snort on Centos 7? Shirkdog
Re: Issues with remote syslog and snort.conf Y M
Re: Can I install the latest version of Snort on Centos 7? Y M
Re: Can I install the latest version of Snort on Centos 7? Shirkdog
Re: Can I install the latest version of Snort on Centos 7? Livio Ricciulli

Monday, 28 July

High Amount of http_inspect: OVERSIZE REQUEST-URI DIRECTORY Rowell Dionicio
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Ideal way to update the rules Anshuman Anil Deshmukh
Re: Ideal way to update the rules Joel Esler (jesler)
Re: Ideal way to update the rules Livio Ricciulli
Re: High Amount of http_inspect: OVERSIZE REQUEST-URI DIRECTORY waldo kitty

Tuesday, 29 July

Re: Ideal way to update the rules Anshuman Anil Deshmukh
Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar
Sourcefire VRT Certified Snort Rules Update 2014-07-29 Research
Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph

Wednesday, 30 July

Re: Ideal way to update the rules Anshuman Anil Deshmukh
Event mismatch Anshuman Anil Deshmukh
Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar
Snort Drop Rules Logging PS
AppID warnings and Snort Segmentation fault Kiryukhin Andrey
Re: libdnet.1()(64bit) is needed by snort Jeremy Hoel
Re: Snort Drop Rules Logging Joel Esler (jesler)
Re: AppID warnings and Snort Segmentation fault Joel Esler (jesler)
Re: Snort Drop Rules Logging PS
Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey
Re: AppID warnings and Snort Segmentation fault Joel Cornett (jocornet)
Re: Ideal way to update the rules Jefferson, Shawn
Re: AppID warnings and Snort Segmentation fault Kiryukhin Andrey
Re: Ideal way to update the rules Anshuman Anil Deshmukh
Pulled Pork Update Domains Matt Brichetto
Re: Pulled Pork Update Domains Joel Esler (jesler)
Re: Ideal way to update the rules Jefferson, Shawn
Re: Ideal way to update the rules Shirkdog
Re: Ideal way to update the rules Jefferson, Shawn
Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph

Thursday, 31 July

Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey
Re: [Snort-openappid] AppID warnings and Snort Segmentation fault Kiryukhin Andrey
Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires Avery Rozar
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Need help with Snort Rule for a HTTP GET parameter and pattern matching. Sabawoon Mageedzada
Re: Need help with Snort Rule for a HTTP GET parameter and pattern matching. Y M
Re: Ideal way to update the rules Y M
snort rules confuse Joseph Boo
Re: Need help with Snort Rule for a HTTP GET parameter and Simon Wesseldine
Sourcefire VRT Certified Snort Rules Update 2014-07-31 Research
Re: Barnyard2 process stops when [gid :124] [sid: 1] [upd_rev: 1] fires beenph

Friday, 01 August

Sfportscan Meysam Farazmand
How to handle multiple snort sensors Robert Millott
Re: How to handle multiple snort sensors Doug Burks
Re: How to handle multiple snort sensors Jaime Nebrera
Re: How to handle multiple snort sensors Jeremy Hoel
Re: How to handle multiple snort sensors Shirkdog
Sourcefire VRT Certified Snort Rules Update 2014-08-01 Research

Sunday, 03 August

Can't generate snort alerts with GET HTTP using pcre. Sabawoon Mageedzada

Monday, 04 August

Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: Can't generate snort alerts with GET HTTP using pcre. Simon Wesseldine
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
FW: Event mismatch Anshuman Anil Deshmukh
snort darpa dataset mehdi maleki
Re: Event mismatch Joel Esler (jesler)
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Re: Event mismatch Anshuman Anil Deshmukh
HTTP_PORTS and http_inspect Duane Howard
Re: Event mismatch Anshuman Anil Deshmukh
snort.org down? Duane Howard
Re: snort.org down? Shirkdog
Re: snort.org down? Duane Howard
Re: snort.org down? Joel Esler (jesler)

Tuesday, 05 August

Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
darpa dataset problem(zero alert) mehdi maleki
Re: Event mismatch Anshuman Anil Deshmukh
Re: Event mismatch JJC
FW: Yumato usuarionuevo nuevo nuevo
Yumato usuarionuevo nuevo nuevo
Sourcefire VRT Certified Snort Rules Update 2014-08-05 Research
Re: Yumato James Lay
Re: Yumato waldo kitty
Re: Yumato lists () packetmail net
Re: darpa dataset problem(zero alert) waldo kitty
Re: FW: Yumato waldo kitty
Re: Event mismatch Anshuman Anil Deshmukh
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)

Wednesday, 06 August

Re: Snort-users Digest, Vol 99, Issue 12 mehdi maleki
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
darpa dataset problem(zero alert) mehdi maleki
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Sourcefire VRT Certified Snort Rules Update 2014-08-06 Research
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
Re: Snort-users Digest, Vol 99, Issue 12 waldo kitty
I'm having trouble configuring Snort as a Daemon Trevor Thompson
[PATCH] Compile snort as library Maxim Uvarov
Re: [PATCH] Compile snort as library Hui cao
Fw: re: darpa dataset problem(zero alert) mehdi maleki

Thursday, 07 August

Re: HTTP INSPECT fails on Mirror Port Anand Raj Manickam
Re: darpa dataset problem(zero alert) Joel Esler (jesler)
Need help with snort rules Sabawoon Mageedzada
Re: Need help with snort rules lists () packetmail net
Re: HTTP INSPECT fails on Mirror Port Russ Combs (rucombs)
RPMs on Snort.org Randal T. Rioux
Fw: libsf_appid_preproc.so: undefined symbol errors Theron ZORBAS

Friday, 08 August

libpcap mmap issues on Snort Anand Raj Manickam
no alert for darpa dataset mehdi maleki
Re: I'm having trouble configuring Snort as a Daemon Bill Bernsen
Re: Event mismatch Anshuman Anil Deshmukh
Re: no alert for darpa dataset waldo kitty
Re: no alert for darpa dataset mehdi maleki

Saturday, 09 August

Re: darpa dataset problem(zero alert) stephane.nasdrovisky
darpa dataset problem(zero alert) (9) mehdi maleki

Monday, 11 August

Re: [Snort-users] libsf_appid_preproc.so: undefined symbol errors Joel Esler (jesler)
Re: libpcap mmap issues on Snort Anand Raj Manickam

Tuesday, 12 August

Re: Stream5 reload bug Bhagya Bantwal (bbantwal)
Re: I'm having trouble configuring Snort as a Daemon Trevor Thompson
Re: I'm having trouble configuring Snort as a Daemon Bill Bernsen
Re: I'm having trouble configuring Snort as a Daemon Robert Millott
Re: Stream5 reload bug Eugenio Pérez
Sourcefire VRT Certified Snort Rules Update 2014-08-12 Research
Re: darpa dataset problem(zero alert) Joel Esler (jesler)
Re: I'm having trouble configuring Snort as a Daemon Trevor Thompson
stream5 tcp session without 3-say handshake overload Robert Millott
Re: stream5 tcp session without 3-say handshake overload Joel Esler (jesler)

Wednesday, 13 August

[GZIP] Gzip inspection isn't working Pablo Artuso
Re: Event mismatch Anshuman Anil Deshmukh
Re: Event mismatch Anshuman Anil Deshmukh
Re: Event mismatch James Lay
wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Jefferson Diego Gomes Rosa
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson

Thursday, 14 August

Sourcefire VRT Certified Snort Rules Update 2014-08-14 Research
Detection for "niki-bot" and "Awesome Screenshot URL" spyware Tony Robinson
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Joel Esler (jesler)

Friday, 15 August

Re: Snort 2.9.6.2 Now Available James
Re: Snort 2.9.6.2 Now Available Joel Esler (jesler)
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Joel Esler (jesler)
Re: wget to snort.org fails; 301 redirect to 127.0.0.1 Tony Robinson

Saturday, 16 August

May be wrong error msg Balasubramaniam Natarajan
Re: May be wrong error msg Balasubramaniam Natarajan
Re: May be wrong error msg waldo kitty
Re: May be wrong error msg Balasubramaniam Natarajan

Sunday, 17 August

Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai
Tcp session hijacking Meysam Farazmand
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty
Re: Tcp session hijacking waldo kitty
Re: Snort crash when reload rules with tag session Netanel Maman

Monday, 18 August

Snort Blog: Snort Subscriber Ruleset: Re-categorization of the Shared Object Rules Joel Esler (jesler)
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai

Tuesday, 19 August

Re: Tcp session hijacking Meysam Farazmand
Re: Tcp session hijacking Joel Esler (jesler)
Re: Tcp session hijacking Meysam Farazmand
Re: Tcp session hijacking Joel Esler (jesler)
Re: Tcp session hijacking Meysam Farazmand
Re: Tcp session hijacking Russ Combs (rucombs)
Re: Tcp session hijacking Meysam Farazmand
Re: Tcp session hijacking Russ Combs (rucombs)
Sourcefire VRT Certified Snort Rules Update 2014-08-19 Research
Re: Tcp session hijacking Meysam Farazmand
Re: Tcp session hijacking Jefferson, Shawn
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty
Re: Tcp session hijacking waldo kitty
Re: Tcp session hijacking Meysam Farazmand
Re: darpa dataset problem(zero alert) Joel Esler (jesler)
Re: darpa dataset problem(zero alert) waldo kitty
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty

Wednesday, 20 August

Snort does not capture with PF_RINF DNA Ivan Petrov
Suse Linux Enterprise Server 11 Daniel Gonnsen
Pulled Pork Errors again Weir, Jason
Re: Pulled Pork Errors again Joel Esler (jesler)

Thursday, 21 August

Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai
CPU affinity in Snort under FreeBSD C. L. Martinez
Re: CPU affinity in Snort under FreeBSD Shirkdog
Re: CPU affinity in Snort under FreeBSD C. L. Martinez
Re: CPU affinity in Snort under FreeBSD C. L. Martinez
Re: CPU affinity in Snort under FreeBSD Juan Jesús Prieto
Re: CPU affinity in Snort under FreeBSD Juan Jesús Prieto
Sourcefire VRT Certified Snort Rules Update 2014-08-21 Research
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode waldo kitty

Friday, 22 August

What does this rule mean? Richard Smollett
Re: What does this rule mean? James Lay
Re: What does this rule mean? Richard Smollett
Re: What does this rule mean? Joel Esler (jesler)
Unable to get snort to output unified logs Khanh Tran
in-line mode question Richard Smollett
Re: in-line mode question Y M
Re: Unable to get snort to output unified logs waldo kitty
Re: Unable to get snort to output unified logs Khanh Tran
Re: Unable to get snort to output unified logs Jeremy Hoel
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai
snort 2.9.6.2 make fails on OSX 10.9.4 hushsnort

Saturday, 23 August

Re: Unable to get snort to output unified logs Khanh Tran
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode Jutichai Thongkrachai
Re: Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode James Lay
Missing shared object files in snapshot download file greg . mcnathansonsnuf003
Re: Missing shared object files in snapshot download file Y M
Re: Missing shared object files in snapshot download file greg . mcnathansonsnuf003
Snort 2.9.6.2 inline mode problem Debason Shockre
Re: snort 2.9.6.2 make fails on OSX 10.9.4 hushsnort
Re: Snort 2.9.6.2 inline mode problem Y M

Sunday, 24 August

Re: Missing shared object files in snapshot download file Y M
Re: Snort 2.9.6.2 inline mode problem Y M
Re: Snort 2.9.6.2 inline mode problem Debason Shockre
Re: Snort 2.9.6.2 inline mode problem Y M
Re: Snort 2.9.6.2 inline mode problem Debason Shockre

Monday, 25 August

Fw: darpa dataset problem(zero alert) mehdi maleki
Re: darpa dataset problem(zero alert) mehdi maleki
Fw: darpa dataset problem(zero alert) mehdi maleki
Re: darpa dataset problem(zero alert) Joel Esler (jesler)
SSL traffic block using Snort rules Ravi Kukadia
Re: SSL traffic block using Snort rules Joel Esler (jesler)
Re: Snort 2.9.6.2 inline mode problem Y M
two outputs kinomakino
Re: two outputs Joel Esler (jesler)
10GbE & 40GbE Support for Multiple Parallel Snort Instances Scott Schweitzer
Re: 10GbE & 40GbE Support for Multiple Parallel Snort Instances Joel Esler (jesler)
Re: SSL traffic block using Snort rules waldo kitty
Re: darpa dataset problem(zero alert) waldo kitty

Tuesday, 26 August

OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Joel Esler (jesler)
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Joel Esler (jesler)
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Marty Roesch (maroesch)
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Jeremy Hoel
Re: OpenFPC Daemonlogger Segfault Through OpenFPC John York
Sourcefire VRT Certified Snort Rules Update 2014-08-26 Research
Re: Missing shared object files in snapshot download file Y M

Wednesday, 27 August

Urgent Bankole Agunbiade
Bad so_rules on file snortrules-snapshot-2961.tar.gz Budinich Galvez, Luis Alberto
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross
Re: Urgent John Gomez
Re: Snort 2.9.6.2 inline mode problem James Lay
Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Joel Esler (jesler)
trouble with inline mode Richard Smollett
Re: Missing shared object files in snapshot download file Joel Esler (jesler)
Re: trouble with inline mode VM PC
Re: Urgent Shirkdog
Re: trouble with inline mode James Lay
installation help Sharif Uddin
Re: installation help Robert Millott
Re: installation help Sharif Uddin
Re: installation help Jeremy Hoel
Re: installation help Scott Finlon
Re: Snort 2.9.6.2 inline mode problem Debason Shockre
Re: installation help Robert Millott
Bug in 2.9.6.2??? Starner, Mark
Performance Issues, disk io? Weir, Jason
Re: Snort 2.9.6.2 inline mode problem James Lay
Re: Bug in 2.9.6.2??? Joel Esler (jesler)
Re: Urgent Joel Esler (jesler)
Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Joel Esler (jesler)
Re: Urgent Jeremy Hoel
Re: Snort 2.9.6.2 inline mode problem Debason Shockre
Re: Snort 2.9.6.2 inline mode problem James Lay
Re: installation help Joel Esler (jesler)
snort -> barnyard2 -> splunk Robert Millott
Re: snort -> barnyard2 -> splunk Shirkdog
Re: snort -> barnyard2 -> splunk VM PC
Re: Snort 2.9.6.2 inline mode problem Y M
Re: Snort crash when reload rules with tag session Netanel Maman
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Leon Ward (leonward)
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Jeremy Hoel
Re: installation help waldo kitty

Thursday, 28 August

Re: OpenFPC Daemonlogger Segfault Through OpenFPC Kevin Ross
Re: Bad so_rules on file snortrules-snapshot-2961.tar.gz Budinich Galvez, Luis Alberto
Re: installation help Sharif Uddin
Re: Performance Issues, disk io? SOLVED! Weir, Jason
Re: installation help Sharif Uddin
no documentation about some rules Maurizio Di Pietro (Esterna)
Re: no documentation about some rules Joel Esler (jesler)
Re: no documentation about some rules Jamie Riden
snort syslog to siem kinomakino
Re: snort syslog to siem Y M
Re: snort syslog to siem kinomakino
Re: Snort 2.9.6.2 inline mode problem Debason Shockre
Re: no documentation about some rules Joel Esler (jesler)

Friday, 29 August

Re: no documentation about some rules Jamie Riden
R: no documentation about some rules Maurizio Di Pietro (Esterna)
Re: no documentation about some rules Joel Esler (jesler)
Re: OpenFPC Daemonlogger Segfault Through OpenFPC Leon Ward (leonward)
Pulled Pork 404 Errors? Matt M.
PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Doug Burks
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates James Lay
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason
Re: Pulled Pork 404 Errors? Y M
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Y M
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Weir, Jason
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Y M
Re: PulledPork 0.7.0 not parsing enablesid, disablesid, modifysid or threshold.conf files when there are no rule updates Y M
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Y M
Re: Pulled Pork 404 Errors? Joel Esler (jesler)
Re: Pulled Pork 404 Errors? Joel Esler (jesler)
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Matt M.
Re: Pulled Pork 404 Errors? Joel Esler (jesler)
Unknown ClassType: web-application-attack Matt M.

Saturday, 30 August

Re: Unknown ClassType: web-application-attack Y M
Re: Unknown ClassType: web-application-attack Matt M.
Re: Unknown ClassType: web-application-attack Matt M.

Monday, 01 September

Query on log_tcpdump Balasubramaniam Natarajan
alerts on blacklisted IPs Victor-Alexandru Truica
Re: alerts on blacklisted IPs Joel Esler (jesler)
Facing problem using AFPACKET Anshuman Anil Deshmukh
Re: Facing problem using AFPACKET James Lay
Re: Facing problem using AFPACKET Y M
Re: Query on log_tcpdump waldo kitty
Re: Facing problem using AFPACKET Anshuman Anil Deshmukh
Re: Query on log_tcpdump Y M
Re: Query on log_tcpdump Balasubramaniam Natarajan

Tuesday, 02 September

configuring rules Sharif Uddin
Re: configuring rules Joel Esler (jesler)
Re: configuring rules Sharif Uddin
Re: configuring rules Joel Esler (jesler)
Re: configuring rules Sharif Uddin
Re: configuring rules Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2014-09-02 Research
Fw: Snort[]: FATAL ERROR: Event6 type not yet supported! vinay kadagave

Wednesday, 03 September

Re: Facing problem using AFPACKET Anshuman Anil Deshmukh
Re: Facing problem using AFPACKET Y M
Re: Facing problem using AFPACKET Anshuman Anil Deshmukh
Re: configuring rules Sharif Uddin
Re: configuring rules Y M
Re: configuring rules Joel Esler
Re: configuring rules Joel Esler
Re: configuring rules Sharif Uddin
Analyzing Snort Alerts and EMailing Matt M.
Re: Analyzing Snort Alerts and EMailing Weir, Jason
Re: Analyzing Snort Alerts and EMailing Matt M.
Re: Analyzing Snort Alerts and EMailing Doug Burks
Re: Analyzing Snort Alerts and EMailing Matt M.
Auto Response Mike Jendrejcak
Re: Analyzing Snort Alerts and EMailing Weir, Jason
Re: Analyzing Snort Alerts and EMailing Enrique de Juan
Re: Analyzing Snort Alerts and EMailing Matt M.
Auto Response Mike Jendrejcak
Re: Analyzing Snort Alerts and EMailing Jeremy Hoel
Re: Analyzing Snort Alerts and EMailing Shirkdog

Thursday, 04 September

Re: Analyzing Snort Alerts and EMailing Sharif Uddin
Re: configuring rules Sharif Uddin
Sourcefire VRT Certified Snort Rules Update 2014-09-04 Research
Re: Analyzing Snort Alerts and EMailing Matt M.
Cannot build afpacket module for DAQ 2.0.2 Sec Aficionado
Re: Cannot build afpacket module for DAQ 2.0.2 James Lay
Re: Facing problem using AFPACKET Anshuman Anil Deshmukh
Re: Facing problem using AFPACKET Y M
Re: Facing problem using AFPACKET Anshuman Anil Deshmukh

Friday, 05 September

Re: Facing problem using AFPACKET Y M
Re: Cannot build afpacket module for DAQ 2.0.2 Sec Aficionado
Re: Cannot build afpacket module for DAQ 2.0.2 James Lay
Log: Alter folder with local IP address for attacker addres (snort for win). THE WAR
Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Ing . Fernando Chávez Mosso
Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Joel Esler (jesler)
Re: Error: failed to initialize dynamic preprocessor: SF_DCERPC version 1.1.5 Ing . Fernando Chávez Mosso
Snorby Setup Issue Matt M.
Re: Analyzing Snort Alerts and EMailing Da Beave
Re: Cannot build afpacket module for DAQ 2.0.2 Sec_Aficionado
Re: Cannot build afpacket module for DAQ 2.0.2 James Lay

Sunday, 07 September

snort telnet login alert Виталий Щетинин
Re: snort telnet login alert waldo kitty
Re: snort telnet login alert Виталий Щетинин
Re: snort telnet login alert lists () packetmail net
Re: snort telnet login alert Joel Esler (jesler)
Re: snort telnet login alert Shirkdog
Re: snort telnet login alert Виталий Щетинин
Is this claim still true for portscan detection in Snort ? sashank

Monday, 08 September

most usfull snort rules amir levinzon
502.2 Bad Gateway Error Message Martin, Greg
Re: 502.2 Bad Gateway Error Message waldo kitty
logging location Sean Browne
Re: logging location Joel Esler (jesler)
Re: 502.2 Bad Gateway Error Message Joel Esler (jesler)
stream5 in dynamic rules Виталий Щетинин

Tuesday, 09 September

network issue? kinomakino
Re: stream5 in dynamic rules Joel Esler
Re: stream5 in dynamic rules Виталий Щетинин
rules explanations Sharif Uddin
Re: rules explanations James Lay
Re: stream5 in dynamic rules Patrick Mullen
Wordpress brute force rule-wp-login.php akh form
Re: Wordpress brute force rule-wp-login.php Rodrigo Montoro(Sp0oKeR)
RE : Wordpress brute force rule-wp-login.php rmkml
Re: 502.2 Bad Gateway Error Message waldo kitty
Re: RE : Wordpress brute force rule-wp-login.php akh form
cannot decode data link type 239 Sharif Uddin
Re: cannot decode data link type 239 James Lay
Re: cannot decode data link type 239 Sharif Uddin
Re: cannot decode data link type 239 James Lay
Re: cannot decode data link type 239 Sharif Uddin
Re: cannot decode data link type 239 James Lay
Sourcefire VRT Certified Snort Rules Update 2014-09-09 Research
Re: cannot decode data link type 239 Russ Combs (rucombs)
18174.txt Kube, Cindy
Re: 18174.txt Y M
Re: 18174.txt Kube, Cindy
Re: Snorby Setup Issue Matt M.
Re: cannot decode data link type 239 waldo kitty
Re: 18174.txt waldo kitty
Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam

Wednesday, 10 September

Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M
Re: RE : Wordpress brute force rule-wp-login.php akh form
Re: not logging data Sharif Uddin
snort alert ip source/Dest changed kinomakino
rule explanation Sharif Uddin
Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam
Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M
Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam
Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Y M
Re: Help needed to modify drop rules to reject rules with pulledpork modifysid.conf Alex Lam
Barnyard2 MySQL DB Error Matt M.
Re: Barnyard2 MySQL DB Error Bill Bernsen
Re: Barnyard2 MySQL DB Error Matt M.
No Sensors Showing in Snorby Matt M.
Re: No Sensors Showing in Snorby waldo kitty

Thursday, 11 September

Sourcefire VRT Certified Snort Rules Update 2014-09-11 Research
Randomness in Snort engine Hyunseok
Fwd: Randomness in Snort engine Hyunseok
Re: No Sensors Showing in Snorby Matt M.
Re: Randomness in Snort engine Tom Peters (thopeter)
Pulled Pork issue Martin, Greg
Re: Randomness in Snort engine Hyunseok
Re: Barnyard2 MySQL DB Error Bill Bernsen
Re: Pulled Pork issue Shirkdog
Re: No Sensors Showing in Snorby waldo kitty
Re: Randomness in Snort engine Tom Peters (thopeter)
Re: Randomness in Snort engine Hyunseok

Friday, 12 September

Re: Barnyard2 MySQL DB Error Sharif Uddin
Re: No Sensors Showing in Snorby Sharif Uddin
Re: No Sensors Showing in Snorby Sharif Uddin
Re: Randomness in Snort engine Tom Peters (thopeter)
Re: Randomness in Snort engine Tom Peters (thopeter)
Best way to change and apply multiple rules for a certain criteria Rochon, Jason
rule for cacti failed login Sharif Uddin
Re: rule for cacti failed login Jeremy Hoel
Re: Barnyard2 MySQL DB Error Matt M.
Re: No Sensors Showing in Snorby Matt M.
Re: No Sensors Showing in Snorby Matt M.
No Events/Alerts Arriving in Snorby Matt M.
Re: Randomness in Snort engine Hyunseok
Re: Best way to change and apply multiple rules for a certain criteria waldo kitty
Re: No Events/Alerts Arriving in Snorby waldo kitty

Saturday, 13 September

Is there not a database schema in Snort Source for Snort? Jutichai Thongkrachai
there is nothing in Snort log on my server Jutichai Thongkrachai

Sunday, 14 September

Re: Is there not a database schema in Snort Source for Snort? waldo kitty

Monday, 15 September

Re: Is there not a database schema in Snort Source for Snort? Sharif Uddin
Re: rule for cacti failed login Sharif Uddin
Re: How to log an IP address in dpx.c ? Emiliano Fausto
Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de
Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de
Re: How to log an IP address in dpx.c ? Steven Sturges
Kerberos login failure detection Sharif Uddin
SSH between subnets Cody Brugh
Re: rule for cacti failed login Jeremy Hoel
Re: SSH between subnets Joel Esler (jesler)
Re: SSH between subnets Cody Brugh
Snort inline afpaquet slow network Ezequiel M. Cardinali
Re: Kerberos login failure detection waldo kitty
Re: Is there not a database schema in Snort Source for Snort? waldo kitty
Re: SSH between subnets Cody Brugh
Fin Fisher rules jean paul cesari

Tuesday, 16 September

basic understanding questions amir levinzon
Re: rule for cacti failed login Sharif Uddin
Re: basic understanding questions Joel Esler (jesler)
Re: How to log an IP address in dpx.c ? Zeeuw, L.V. de
memcap maxed out Sharif Uddin
Re: memcap maxed out Khanh Tran
Re: How to log an IP address in dpx.c ? Emiliano Fausto
Re: rule for cacti failed login waldo kitty
Re: rule for cacti failed login Sharif Uddin
Re: basic understanding questions amir levinzon
Sourcefire VRT Certified Snort Rules Update 2014-09-16 Research
Re: rule for cacti failed login waldo kitty
Re: basic understanding questions waldo kitty

Wednesday, 17 September

alert on folder permissions Sharif Uddin

Thursday, 18 September

missing frames Bankole Agunbiade
Snort with pf_ring -- recommendations for DAQ settings Risto Vaarandi
Sourcefire VRT Certified Snort Rules Update 2014-09-18 Research

Friday, 19 September

React Rule Trouble Daniel Ayoub
A size of log file is zero although there is an attack Jutichai Thongkrachai

Monday, 22 September

Pulledpork on Gentoo Robert Millott
Re: Pulledpork on Gentoo Shirkdog
Re: Pulledpork on Gentoo Robert Millott
Re: memcap maxed out Kurzawa, Kevin
Re: memcap maxed out Sharif Uddin
Re: memcap maxed out Khanh Tran
snort 2.9.6.2 unified2 John Hally
Re: snort 2.9.6.2 unified2 Shirkdog

Tuesday, 23 September

Re: snort 2.9.6.2 unified2 John Hally
Re: memcap maxed out Sharif Uddin
Re: snort 2.9.6.2 unified2 Sharif Uddin
Re: snort 2.9.6.2 unified2 John Hally
Re: snort 2.9.6.2 unified2 Sharif Uddin
Re: snort 2.9.6.2 unified2 John Hally
Re: snort 2.9.6.2 unified2 Sharif Uddin
Re: snort 2.9.6.2 unified2 John Hally
Sourcefire VRT Certified Snort Rules Update 2014-09-23 Research
Snort Rules Issues Tarzan538 NONO
Re: Snort Rules Issues waldo kitty
Re: A size of log file is zero although there is an attack Jutichai Thongkrachai

Wednesday, 24 September

DAQ output Eugenio Perez
Re: Snort Rules Issues Simon Wesseldine
Re: A size of log file is zero although there is an attack Sharif Uddin
Re: Snort with pf_ring -- recommendations for DAQ settings Eugenio Perez
SID 31968 EXPLOIT-KIT Astrum exploit kit Adobe Flash exploit payload request Joe Gedeon
Re: A size of log file is zero although there is an attack James Lay
Re: SID 31968 EXPLOIT-KIT Astrum exploit kit Adobe Flash exploit payload request Y M
Sourcefire VRT Certified Snort Rules Update 2014-09-24 Research
Re: Snort-sigs Digest, Vol 100, Issue 8 Tarzan538 NONO
PulledPork failing to fetch opensource.gz.md5 Bill Bernsen
Re: PulledPork failing to fetch opensource.gz.md5 Joel Esler (jesler)
Re: PulledPork failing to fetch opensource.gz.md5 Bill Bernsen
Re: PulledPork failing to fetch opensource.gz.md5 Joel Esler (jesler)

Thursday, 25 September

Re: Snort Rules Issues Simon Wesseldine
Snort with ipfilter Vasiq Mz
Snort not generating any severity Khanh Tran
Any new Rules for Sheelshock/Bash Attacks? Brook, S. Barrie
Re: Snort not generating any severity waldo kitty
Re: Any new Rules for Sheelshock/Bash Attacks? Joel Esler (jesler)
Re: Any new Rules for Sheelshock/Bash Attacks? waldo kitty
Sourcefire VRT Certified Snort Rules Update 2014-09-25 Research
I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler)
Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Jeremy Hoel
Re: A size of log file is zero although there is an attack Jutichai Thongkrachai

Friday, 26 September

Re: A size of log file is zero although there is an attack Sharif Uddin
Re: A size of log file is zero although there is an attack Jutichai Thongkrachai
Re: A size of log file is zero although there is an attack Sharif Uddin
Re: A size of log file is zero although there is an attack Jutichai Thongkrachai
Re: A size of log file is zero although there is an attack Sharif Uddin
Re: A size of log file is zero although there is an attack Jutichai Thongkrachai
http_header not working NIDS TEAM
Re: http_header not working Shirkdog
Re: A size of log file is zero although there is an attack Sharif Uddin
Re: http_header not working NIDS TEAM
Re: Possible to configure snort for an alternative to /etc for default conf. files? Rich Burridge
Re: http_header not working Stephen Gantz
Re: http_header not working NIDS TEAM
Re: http_header not working Joel Esler (jesler)
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler)
Re: http_header not working NIDS TEAM
Re: http_header not working Joel Esler (jesler)
Re: http_header not working NIDS TEAM
Re: http_header not working Joel Esler (jesler)
BASH vulnerability/community.rules Farnsworth, Robert
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Teo En Ming
Re: I cannot find the shellshock bug detection rule in the latest community rules from https://www.snort.org Joel Esler (jesler)
Are so rules needed? Robert Millott
Re: A size of log file is zero although there is an attack waldo kitty
Re: BASH vulnerability/community.rules waldo kitty
Re: Are so rules needed? Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2014-09-26 Research

Saturday, 27 September

Re: A size of log file is zero although there is an attack Jutichai Thongkrachai
Re: A size of log file is zero although there is an attack waldo kitty

Sunday, 28 September

Re: A size of log file is zero although there is an attack Jutichai Thongkrachai
DAQ 2.0.2, NFQ - DAQ error when trying to start snort Peter Fyon
DAQ: parallel build problem Jann Röder

Monday, 29 September

Re: Snort-devel Digest, Vol 98, Issue 7 Muhammad Ridwan Zalbina
Re: http_header not working NIDS TEAM
Re: http_header not working Mitesh Jadia
Salir Suscripcion Dilan Loboa
Re: http_header not working waldo kitty
Re: http_header not working NIDS TEAM
hi westlake

Tuesday, 30 September

Cannot install Snort with RPM file. Jutichai Thongkrachai
Re: Cannot install Snort with RPM file. Kurzawa, Kevin
Re: Cannot install Snort with RPM file. Bill Bernsen
Sourcefire VRT Certified Snort Rules Update 2014-09-30 Research
Fast Pattern Matcher not using http_raw_* content strings? Mike Cox
Re: DAQ: parallel build problem Hui Cao (huica)
Re: DAQ 2.0.2, NFQ - DAQ error when trying to start snort Hui Cao (huica)
Re: Snort-devel Digest, Vol 98, Issue 7 Hui Cao (huica)

Previous period

Next period