Snort: by date

• RSS Feed
• About List
• All Lists

Previous period

Next period

792 messages starting Jan 01 15 and ending Mar 31 15
Date index | Thread index | Author index

Thursday, 01 January

(no subject) Namik Benyminov
Re: IPS using DAQ AFPacket problems Y M
Re: (no subject) Namik Benyminov
Re: (no subject) Y M
Re: (no subject) Y M
pulledpork config two different error messages Flo
pulledpork config two different error messages Flo
Re: pulledpork config two different error messages Y M

Friday, 02 January

Setting up simple LAN-sniffing for bad signatures? PattiMichelle
Re: Setting up simple LAN-sniffing for bad signatures? Jeremy Hoel
my email address amin salmani
Re: Setting up simple LAN-sniffing for bad signatures? Jeremy Hoel
Re: error 500 last several days Dmitry Melekhov

Saturday, 03 January

snort rules simegn ztsion

Sunday, 04 January

man page doesn't list two valid alert modes Ely Petty
Re: snort rules Joel Esler (jesler)
Re: man page doesn't list two valid alert modes Joel Esler (jesler)
help, the configuration problem ぜ許〃
Re: man page doesn't list two valid alert modes Ely Petty
Re: man page doesn't list two valid alert modes Joel Esler (jesler)
Problem with pf_ring daq Mark Greenman
Re: config problem xyz xyz

Monday, 05 January

Re: snort rules waldo kitty
regarding network IDS and Darpa dataser manjil bhetwal
Re: help, the configuration problem waldo kitty

Tuesday, 06 January

Multiple log files test engineer
Sourcefire VRT Certified Snort Rules Update 2015-01-06 Research
IIS unicode.map Jean-Sébastien Nicaise

Wednesday, 07 January

Using DNS response fields in an alert msg David Longenecker
Re: Using DNS response fields in an alert msg lists () packetmail net
Re: Using DNS response fields in an alert msg lists () packetmail net
Re: Using DNS response fields in an alert msg Joel Esler (jesler)
Re: Using DNS response fields in an alert msg Rodgers, Anthony (DTMB)
Re: Using DNS response fields in an alert msg lists () packetmail net
Re: Using DNS response fields in an alert msg James Lay
Re: Error 500 today? Joel Esler (jesler)
Re: Using DNS response fields in an alert msg Joel Esler (jesler)
Re: Error 500 today? Jefferson, Shawn
FP on EXPLOIT-KIT Angler(1:31046) Andre DiMino
Re: FP on EXPLOIT-KIT Angler(1:31046) Andre DiMino
Re: FP on EXPLOIT-KIT Angler(1:31046) lists () packetmail net
Re: FP on EXPLOIT-KIT Angler(1:31046) Joel Esler (jesler)
Re: FP on EXPLOIT-KIT Angler(1:31046) Andre DiMino
Re: FP on EXPLOIT-KIT Angler(1:31046) Andre DiMino
Re: Using DNS response fields in an alert msg Mustafa Qasim
Re: Multiple log files waldo kitty

Thursday, 08 January

Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules Scott Savarese
Re: Error 500 today? Dave Corsello
Re: Error 500 today? Jefferson, Shawn
Re: Error 500 today? Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2015-01-08 Research
Re: Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules waldo kitty
Re: Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules Scott Savarese
Monitoring incoming or outgoing traffic Anshuman Anil Deshmukh
Re: Monitoring incoming or outgoing traffic Jeremy Hoel

Friday, 09 January

Re: Monitoring incoming or outgoing traffic Anshuman Anil Deshmukh
Re: Monitoring incoming or outgoing traffic Joel Esler (jesler)
Re: Multiple log files test engineer
Snort Configuration Trouble Jake Hann
Re: Snort Configuration Trouble James Lay
Re: Snort Configuration Trouble Stephen Gantz
Re: Snort Configuration Trouble Jake Hann
Re: Multiple log files Jason Ish
active response and network tap Anthony Sheetz
Re: active response and network tap Steve Gantz
Re: Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules waldo kitty
Re: Multiple log files waldo kitty

Saturday, 10 January

Re: Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules Scott Savarese

Sunday, 11 January

Snort EOL question about VRT rules. Avery Rozar
activate/dynamic rules problem Mark Greenman

Monday, 12 January

What is snort sensor Eugeniu Babin
Old Snort Rules Zeeshan Afzal
Re: Old Snort Rules Joel Esler (jesler)
Re: What is snort sensor Joel Esler (jesler)
Re: activate/dynamic rules problem Joel Esler (jesler)
Re: Snort EOL question about VRT rules. Joel Esler (jesler)
Re: Old Snort Rules Zeeshan Afzal
Re: Old Snort Rules Zeeshan Afzal
Re: IPS using DAQ AFPacket problems Jake Hann
Re: IPS using DAQ AFPacket problems Al Lewis (allewi)
Re: IPS using DAQ AFPacket problems Al Lewis (allewi)
Re: IPS using DAQ AFPacket problems Jake Hann
Re: Old Snort Rules waldo kitty

Tuesday, 13 January

Sourcefire VRT Certified Snort Rules Update 2015-01-13 Research
Re: [Emerging-Sigs] Reference links not working Anshuman Anil Deshmukh

Wednesday, 14 January

byte_test and relative Praveen D
(no subject) Muhammad Ridwan Zalbina
reject without being inline Anthony Sheetz
Not working unified2 module in snort++ (snort 3.0) 박종일

Thursday, 15 January

Re: Not working unified2 module in snort++ (snort 3.0) Russ Combs (rucombs)
BASE timestamp wrong Jake Hann
Sourcefire VRT Certified Snort Rules Update 2015-01-15 Research
Re: BASE timestamp wrong Michael Steele

Friday, 16 January

Barnyard2 Mike Michalak
Re: Barnyard2 Shirkdog
Snort Blog: Snort 2.9.5.6 End of Life is approaching Joel Esler (jesler)
pulledpork 0.7.1 -wc certificate verification problem amn0p
Re: pulledpork 0.7.1 -wc certificate verification problem Joel Esler (jesler)
Re: pulledpork 0.7.1 -wc certificate verification problem Shirkdog
inspect packet with snort zT

Saturday, 17 January

Re: Barnyard2 Mike Michalak
Re: confirm 343ec785cc752e98b958383c9c38dfab4b0200dc 박종일
Re: confirm 343ec785cc752e98b958383c9c38dfab4b0200dc 박종일

Sunday, 18 January

Re: confirm 343ec785cc752e98b958383c9c38dfab4b0200dc Russ Combs (rucombs)
Re: Barnyard2 Jeremy Hoel
Re: Barnyard2 Mike Michalak
Re: Barnyard2 Jeremy Hoel
Re: Barnyard2 Mike Michalak

Monday, 19 January

Re: Barnyard2 Jeremy Hoel
Re: Barnyard2 Mike Michalak
barnyard2, syslog and pulling the packet data Ran Regev
Re: barnyard2, syslog and pulling the packet data Y M
autotools and cmake with enable-large-pcap difference Y M
Snort upgrade using source Avery Rozar
Error compiling Snort 3.0.0-a1 with enable-linux-smp-stats Y M

Tuesday, 20 January

Re: Error compiling Snort 3.0.0-a1 with enable-linux-smp-stats Russ Combs (rucombs)
Re: autotools and cmake with enable-large-pcap difference Russ Combs (rucombs)
Sourcefire VRT Certified Snort Rules Update 2015-01-20 Research

Wednesday, 21 January

Snort on a strato vserver // DAQ NFQ initialisation fails Lil Evil
centos 6 o redhat 6 packages Emilio Joel Macias
How to replay pcap files at arbitrary speed simegn ztsion
error 422 Daniel Kariuki
barnyard2 and GRE packets Eugeniu Babin
restart snort after pulledpork updates ? Eugeniu Babin
packet content match zT
Re: packet content match Al Lewis (allewi)
Re: packet content match Steve Gantz
Re: packet content match Steve Gantz
Re: error 422 Joel Esler (jesler)
SSL problems with snort.org and pulledpork on FreeBSD Tony Robinson
Re: SSL problems with snort.org and pulledpork on FreeBSD Shirkdog
Re: restart snort after pulledpork updates ? waldo kitty
Re: restart snort after pulledpork updates ? Joel Esler (jesler)
Re: Using DNS response fields in an alert msg Jason Haar

Thursday, 22 January

Unified2 Format skip packet entry. Andrew V. Stepanov
Re: restart snort after pulledpork updates ? Eugeniu Babin
Re: Using DNS response fields in an alert msg David Longenecker
test rule zT
Re: Using DNS response fields in an alert msg Joel Esler (jesler)
Re: test rule zT
Re: SSL problems with snort.org and pulledpork on FreeBSD Shirkdog
Re: test rule Al Lewis (allewi)
Re: restart snort after pulledpork updates ? Anthony Sheetz
Building DAQ for freebsd - afpacket Tony Robinson
Hosts Attribute exception/override? Jefferson, Shawn
[Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory. zT
Re: [Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory. Steve Gantz
Re: Building DAQ for freebsd - afpacket Al Lewis (allewi)
Re: [Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory. zT
Re: Building DAQ for freebsd - afpacket Shirkdog
Sourcefire VRT Certified Snort Rules Update 2015-01-22 Research
Re: [Snort-user] ERROR: ./../rules/app-detect.rules(0) Unable to open rules file "./../rules/app-detect.rules": No such file or directory. Joel Esler (jesler)
Re: Hosts Attribute exception/override? Joel Esler (jesler)
[HITB-Announce] #HITB2015AMS Call for Papers 1st Round is Closing in 10 Days Hafez Kamal
Creating a rule for RDP Richard Giles
Re: Hosts Attribute exception/override? Jefferson, Shawn
Re: Hosts Attribute exception/override? Joel Esler (jesler)
Place to install Snort Minh Trung
Analyse pcap file Madz

Friday, 23 January

Re: Analyse pcap file Al Lewis (allewi)
THREAD_LOCAL Sancho Panza
Re: Creating a rule for RDP Richard Giles
Re: THREAD_LOCAL Russ Combs (rucombs)
Re: Creating a rule for RDP Scott Savarese
Re: Place to install Snort waldo kitty
Re: Place to install Snort Minh Trung

Saturday, 24 January

Place to install Snort John Hall
$ sudo service snortd restart zT

Sunday, 25 January

Re: THREAD_LOCAL Sancho Panza
[Snort-user] rule file: get input form terminal zT

Monday, 26 January

Snort decoder Ron Sal
Re: Snort decoder Al Lewis (allewi)
Re: Snort decoder Ron Sal
Re: Snort decoder Al Lewis (allewi)
[Snort-user] error with start snort zT
Re: THREAD_LOCAL Russ Combs (rucombs)
HTTP preprocesor Eugenio Perez
Re: HTTP preprocesor James Lay
Re: HTTP preprocesor Al Lewis (allewi)
[Snort-user] dynamic variable for content match zT
Re: [Snort-user] dynamic variable for content match Al Lewis (allewi)
Re: [Snort-user] dynamic variable for content match zT
Cisco Proprietary Protocol and Snort Jutichai Thongkrachai

Tuesday, 27 January

Re: HTTP preprocesor Eugenio Perez
Re: Cisco Proprietary Protocol and Snort Al Lewis (allewi)
Re: Cisco Proprietary Protocol and Snort Jutichai Thongkrachai
Re: Cisco Proprietary Protocol and Snort Joel Esler (jesler)
Re: [Snort-user] dynamic variable for content match waldo kitty
Re: Cisco Proprietary Protocol and Snort Al Lewis (allewi)
Re: [Snort-user] dynamic variable for content match zT
Sourcefire VRT Certified Snort Rules Update 2015-01-27 Research
Re: Snort-users Digest, Vol 104, Issue 51 Jutichai Thongkrachai

Wednesday, 28 January

Re: Place to install Snort Minh Trung
Unable to view the Signature Information Anshuman Anil Deshmukh
Re: Unable to view the Signature Information Anshuman Anil Deshmukh
Re: Snort-users Digest, Vol 104, Issue 51 Al Lewis (allewi)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Rodgers, Anthony (DTMB)
Re: Place to install Snort Wei Chea Ang
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Jeff Stebelton
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Benjamin Small
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Jeff Stebelton
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Benjamin Small
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Alex McDonnell
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Jeff Stebelton
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Jamie Riden
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Dalton, Gerry
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Mike Hale
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 lists () packetmail net
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 lists () packetmail net
Re: Unable to view the Signature Information Joel Esler (jesler)
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
Re: [Snort-user] dynamic variable for content match waldo kitty
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 lists () packetmail net
init script status check always exits zero Josh Kline
Re: Unable to view the Signature Information Anshuman Anil Deshmukh
Re: [Snort-user] dynamic variable for content match zT
Re: Unable to view the Signature Information Anshuman Anil Deshmukh

Thursday, 29 January

Re: Unable to view the Signature Information Joel Esler (jesler)
Re: [Snort-user] dynamic variable for content match Al Lewis (allewi)
Re: [Snort-user] dynamic variable for content match zT
Using multiple PCRE setests setests
Automation tools to manage NIDS servers? Bryan Arenal
Ghost glibc and EXIM rules Lukas Matt
Please remove me from Snort list Thanks Doug Potter
Re: Ghost glibc and EXIM rules lists () packetmail net
[Snort-user] registerRule(Rule **) error zT
Re: Ghost glibc and EXIM rules Joel Esler (jesler)
Possible Rule Change eric gonzalez
Re: Possible Rule Change Y M
Re: [Snort-users] [Snort-user] registerRule(Rule **) error Joel Esler (jesler)
Re: Please remove me from Snort list Thanks Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2015-01-29 Research
[Snort-user] how to get input for snort rules zT
Snort++ Build 135 Now Available Snort Releases
https Anthony Sheetz
Re: Automation tools to manage NIDS servers? Doug Burks
More information on the rule - sid:31557 Irish Settingg
Re: https Joel Esler (jesler)
Re: More information on the rule - sid:31557 Joel Esler (jesler)
Re: More information on the rule - sid:31557 Irish Settingg
Snort++ Build 135 Now Available Snort Releases
Re: More information on the rule - sid:31557 Joel Esler (jesler)
Re: Automation tools to manage NIDS servers? Bryan Arenal

Friday, 30 January

Dos attacks Madz
OpenAppID Detection Webinar Priyanka Raj -T (priraj - KFORCE INC at Cisco)
Failed to load /lib_sfdynamic_preprocessor_example.so zT
[snort-user] ERROR: Failed to load //lib_sfdynamic_preprocessor_example.so zT

Saturday, 31 January

Re: [Snort-user] how to get input for snort rules zT
Re: Failed to load /lib_sfdynamic_preprocessor_example.so Stephen Gantz
Re: Failed to load /lib_sfdynamic_preprocessor_example.so zT
Content Match Mark Greenman
Re: Automation tools to manage NIDS servers? Jaime Nebrera
Fwd: Dos attacks Madz
Re: Fwd: Dos attacks Joel Esler (jesler)
Re: Automation tools to manage NIDS servers? Jaime Nebrera
[snort-users] generate .rule file for shared object rule zT
Re: [snort-users] generate .rule file for shared object rule waldo kitty
Cannot bind address and add more OS Policy for Stream5 TCP Preprocessor Jutichai Thongkrachai

Sunday, 01 February

Rules question. Or clause with content keyword in rule. Andrei_1980
[snort-user] is there any option to inspect packet? zT
Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Avery Rozar
Re: Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Juan Jesus Prieto
Re: Content Match Al Lewis (allewi)
Re: Cannot bind address and add more OS Policy for Stream5 TCP Preprocessor Al Lewis (allewi)
Re: Cannot bind address and add more OS Policy for Stream5 TCP Preprocessor Al Lewis (allewi)
Re: Rules question. Or clause with content keyword in rule. Al Lewis (allewi)
Re: [snort-user] is there any option to inspect packet? Al Lewis (allewi)

Monday, 02 February

Re: Cannot bind address and add more OS Policy for Stream5 TCP Preprocessor Jutichai Thongkrachai
Re: Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Avery Rozar
Re: Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Juan Jesus Prieto
[Snort-users] How to know what is "any" ip address??? zT
Re: How to know what is "any" ip address??? Jack Pepper
Re: How to know what is "any" ip address??? zT
Re: How to know what is "any" ip address??? zT
InspectorType Sancho Panza
Re: Cannot bind address and add more OS Policy for Stream5 TCP Preprocessor Al Lewis (allewi)
Re: InspectorType Russ Combs (rucombs)
Need help with rule - [124:7:1] smtp: Attempted header name buffer overflow Irish Settingg

Tuesday, 03 February

Re: Welcome to the "Snort-users" mailing list (Digest mode) Al Lewis (allewi)
Re: Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Avery Rozar
Re: Need help with rule - [124:7:1] smtp: Attempted header name buffer overflow Jason Wallace
Re: Upgraded to 2.9.7.0, then down graded to 2.9.6.2 and snort will not start Joel Esler (jesler)
Re: Snort-users Digest, Vol 105, Issue 9 Al Lewis (allewi)
Sourcefire VRT Certified Snort Rules Update 2015-02-03 Research
Re: Need help with rule - [124:7:1] smtp: Attempted header name buffer overflow Irish Settingg
TCP flags issue sajjad purmohseni
Re: How to know what is "any" ip address??? waldo kitty

Wednesday, 04 February

Re: TCP flags issue Balasubramaniam Natarajan
Re: Zero day attack protection Crusty Saint
OpenAppID Webinar Joel Esler (jesler)
Re: OpenAppID Webinar Joel Esler (jesler)
Re: TCP flags issue Steven Sturges
Snort 3.0: Actions Sancho Panza
Fwd: Question Bill Parker
Re: Snort 3.0: Actions Russ Combs (rucombs)
Pawn Storm sig James Lay
DNS Reverse Shell sig James Lay
Re: DNS Reverse Shell sig rmkml
Re: DNS Reverse Shell sig James Lay
Re: DNS Reverse Shell sig Dave Killion
Re: DNS Reverse Shell sig James Lay
Rules Inquiry Eugene Grama
Problem running Snort Inline Anshuman Anil Deshmukh

Thursday, 05 February

Re: Snort 3.0: Actions Sancho Panza
Re: Snort 3.0: Actions Russ Combs (rucombs)
Re: Problem running Snort Inline James Lay
Re: How to know what is "any" ip address??? waldo kitty
Re: Rules Inquiry Joel Esler (jesler)
Re: Snort 3.0: Actions Sancho Panza
Re: Snort 3.0: Actions Russ Combs (rucombs)
Sourcefire VRT Certified Snort Rules Update 2015-02-05 Research
Re: Sourcefire VRT Certified Snort Rules Update 2015-01-27 Joel Esler (jesler)
What are the current default enabled build options? Bryan Arenal
Disabling Rules via disablesid.conf Vona, Steven A CIV NSWCCD Philadelphia, 10411
Re: What are the current default enabled build options? Bryan Arenal
Re: TCP flags issue sajjad purmohseni
Re: What are the current default enabled build options? Russ Combs (rucombs)
Re: What are the current default enabled build options? Bryan Arenal
Re: Problem running Snort Inline Anshuman Anil Deshmukh
Re: Disabling Rules via disablesid.conf Y M
Re: Problem running Snort Inline Y M

Friday, 06 February

Re: Problem running Snort Inline Anshuman Anil Deshmukh
Re: Disabling Rules via disablesid.conf Y M
Re: Problem running Snort Inline Y M
Re: Disabling Rules via disablesid.conf Vona, Steven A CIV NSWCCD Philadelphia, 10411
Re: Disabling Rules via disablesid.conf Jason Wallace
Re: Disabling Rules via disablesid.conf Vona, Steven A CIV NSWCCD Philadelphia, 10411
Re: Disabling Rules via disablesid.conf Jason Wallace
Re: Disabling Rules via disablesid.conf Vona, Steven A CIV NSWCCD Philadelphia, 10411
Re: Disabling Rules via disablesid.conf Y M
Re: Disabling Rules via disablesid.conf Jason Wallace
NoSQL Key Value Port Bob Brown
Re: NoSQL Key Value Port Joel Esler
Re: NoSQL Key Value Port Victor Roemer
Re: NoSQL Key Value Port Bob Brown
snort NIDS rezaa abedi
Re: Creating a rule for RDP Jason Haar
Re: Creating a rule for RDP Dave Killion

Saturday, 07 February

Re: Creating a rule for RDP Samuel M Westerfeld
Re: Creating a rule for RDP Johnathan Wiltberger
Difference between drop and reject rules Mark Greenman
Re: Difference between drop and reject rules Joel Esler (jesler)
Re: Difference between drop and reject rules factoreal
Re: snort NIDS Joel Esler (jesler)
Updating Snort Rules Offline Jeffrey
Re: Updating Snort Rules Offline Y M

Sunday, 08 February

Issue while installing snort Sirvesh Tyagi
Re: Difference between drop and reject rules Mark Greenman
2.9.7.0 Install startup error: snort:symbol lookup error "rand_open" Richard Martin
Magnetic Stripe Card addition to SDF processor? Bill Parker
DDoS Rule Eugene Grama
Re: DDoS Rule Joel Esler (jesler)

Monday, 09 February

Re: Creating a rule for RDP Simon Wesseldine
Re: Difference between drop and reject rules Russ
Re: Creating a rule for RDP Barry Bahrami
Why would my server trigger rule Sid 17487 Kelly D. Leavitt
Re: Why would my server trigger rule Sid 17487 Al Lewis (allewi)
Re: Why would my server trigger rule Sid 17487 Kelly D. Leavitt
Re: Creating a rule for RDP Johnathan Wiltberger
Re: Creating a rule for RDP Barry Bahrami
Re: TCP flags issue Al Lewis (allewi)

Tuesday, 10 February

Re: Why would my server trigger rule Sid 17487 Al Lewis (allewi)
Sourcefire VRT Certified Snort Rules Update 2015-02-10 Research

Wednesday, 11 February

Create rules for Google Hangouts liao zhuodi
Re: Create rules for Google Hangouts Al Lewis (allewi)
SMTP decoder Dan Roberts
Rules Fabio Machado Sanches
Re: Rules Joel Esler (jesler)
Re: SMTP decoder Joel Esler (jesler)
Attack detection reniykec
Re: Attack detection Joel Esler (jesler)
Re: Create rules for Google Hangouts liao zhuodi
Re: Difference between drop and reject rules Mark Greenman

Thursday, 12 February

Re: Create rules for Google Hangouts Al Lewis (allewi)
Re: Difference between drop and reject rules Russ
RES: Rules Fabio Machado Sanches
RES: Rules Fabio Machado Sanches
Re: Difference between drop and reject rules Mark Greenman
Re: RES: Rules Joel Esler (jesler)
RES: RES: Rules Fabio Machado Sanches
Snort 3.0: STATIC_IPS_OPTIONS, STATIC_IPS_ACTIONS Sancho Panza
Re: Difference between drop and reject rules Mark Greenman
Re: RES: RES: Rules Joel Esler (jesler)
Re: Snort 3.0: STATIC_IPS_OPTIONS, STATIC_IPS_ACTIONS Russ
Re: Difference between drop and reject rules Russ
Re: RES: RES: Rules waldo kitty
Re: SMTP decoder waldo kitty
Re: Problem running Snort Inline [RESOLVED] Anshuman Anil Deshmukh
Question about outstanding packets C. L. Martinez

Friday, 13 February

Re: Question about outstanding packets Al Lewis (allewi)
about snort active responses in passive mode chinghsiung
Fw: install/configure Snort IPS mode on Windows OS walid abdalwahab
Re: install/configure Snort IPS mode on Windows OS Joel Esler (jesler)
Re: install/configure Snort IPS mode on Windows OS Stephen Gantz
Re: about snort active responses in passive mode Al Lewis (allewi)
Re: about snort active responses in passive mode chinghsiung
Regarding GID 1, SID 33429 - Microsoft Windows SMB potential group policy fallback exploit attempt Sandeep Singh

Saturday, 14 February

Re: Regarding GID 1, SID 33429 - Microsoft Windows SMB potential group policy fallback exploit attempt Al Lewis (allewi)
HTTP Get Flood Mohammad Rastgoo

Sunday, 15 February

Re: HTTP Get Flood Al Lewis (allewi)
Re: HTTP Get Flood Mohammad Rastgoo
Re: HTTP Get Flood Jamie Riden
Re: HTTP Get Flood Al Lewis (allewi)
Re: HTTP Get Flood Al Lewis (allewi)

Monday, 16 February

Snort even though working properly does not report majority of rules Henry Collins
snort lan sniff Dario Bruno
Re: snort lan sniff Al Lewis (allewi)
Stuck at Commencing Packet Processing Lena Okanovic
Re: Stuck at Commencing Packet Processing Al Lewis (allewi)
Re: Stuck at Commencing Packet Processing Steve Gantz
Fwd: snort using rpcap in windows Eugene Grama

Tuesday, 17 February

Signatures for WSNs - 802.15.4, ZigBee, 6LoWPAN... vb
Pulledpork download rulesets error 500 Dario Bruno
Re: snort using rpcap in windows Eugene Grama
Re: snort using rpcap in windows Eugene Grama
Snort and a remote mssql database server Eugene Grama
Re: Snort and a remote mssql database server Balasubramaniam Natarajan
Re: snort using rpcap in windows Al Lewis (allewi)
Re: Snort and a remote mssql database server Michael Steele
$eth1_ADDRESS still a valid variable in 2.9.7.0? Starner, Mark
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Starner, Mark
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Joel Esler (jesler)
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Starner, Mark
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Al Lewis (allewi)
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? James Lay
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Starner, Mark
Re: $eth1_ADDRESS still a valid variable in 2.9.7.0? Starner, Mark
Sourcefire VRT Certified Snort Rules Update 2015-02-17 Research
Re: Snort-users Digest, Vol 105, Issue 49 Ikenna Chiadikaobi

Wednesday, 18 February

Pulledpork: please verify that you have recently updated your root certificates! Lawrence Decker
Re: Pulledpork: please verify that you have recently updated your root certificates! Shirkdog
Re: Pulledpork: please verify that you have recently updated your root certificates! Joel Esler (jesler)
Alert with no data Beto C
Re: Alert with no data Al Lewis (allewi)

Thursday, 19 February

Re: Pulledpork: please verify that you have recently updated your root certificates! C. L. Martinez
Problem with rule sid 33323 Guillaume Daleux
Possible Dridex C2 UA sig James Lay
Re: Pulledpork: please verify that you have recently updated your root certificates! Joel Esler (jesler)

Friday, 20 February

Re: Problem with rule sid 33323 Patrick Mullen
Re: Problem with rule sid 33323 Guillaume Daleux
Re: Pulledpork: please verify that you have recently updated your root certificates! Lawrence Decker
Dynamic preprocessors: Detection engine on normalized data only Arun Koshal

Saturday, 21 February

Snort unable to drop packets in inline mode Rishabh Shah
Dynamic preprocessor - detection engine on normalized data only Arun Koshal

Sunday, 22 February

Re: Stuck at Commencing Packet Processing Lena Okanovic
Re: Stuck at Commencing Packet Processing Al Lewis (allewi)
Sourcefire VRT Certified Snort Rules Update 2015-02-19 Research
Re: Snort unable to drop packets in inline mode James Lay
Re: Stuck at Commencing Packet Processing Michael Steele
Re: Snort unable to drop packets in inline mode Rishabh Shah
Re: Snort unable to drop packets in inline mode James Lay
Re: Snort unable to drop packets in inline mode Rishabh Shah
Re: Snort unable to drop packets in inline mode James Lay
Re: Dynamic preprocessors: Detection engine on normalized data only Hui Cao (huica)

Monday, 23 February

Cannot get Snort listen on a second network interface (creating a gateway) Henry Collins
Increase detection rate reniykec
Re: Cannot get Snort listen on a second network interface (creating a gateway) Al Lewis (allewi)
Re: Increase detection rate Al Lewis (allewi)
Re: Snort unable to drop packets in inline mode Al Lewis (allewi)
Re: Cannot get Snort listen on a second network interface (creating a gateway) Henry Collins
Re: Cannot get Snort listen on a second network interface (creating a gateway) Al Lewis (allewi)
Re: Cannot get Snort listen on a second network interface (creating a gateway) Henry Collins
preprocessors rules Dan Roberts
Re: preprocessors rules Al Lewis (allewi)
Re: Pulledpork: please verify that you have recently updated your root certificates! Joel Esler (jesler)
real-time alerting and rule to monitor only specific traffic Lena Okanovic
Re: real-time alerting and rule to monitor only specific traffic Al Lewis (allewi)
False positives on mysql traffic James Dickenson

Wednesday, 25 February

Re: Snort unable to drop packets in inline mode Rishabh Shah
Re: False positives on mysql traffic Joel Esler (jesler)
Re: Snort unable to drop packets in inline mode Al Lewis (allewi)
Sourcefire Intrusion Agent Weir, Jason
Re: Snort unable to drop packets in inline mode Rishabh Shah
Sourcefire VRT Certified Snort Rules Update 2015-02-24 Research
Re: Sourcefire Intrusion Agent Mark W. Jeanmougin
Snort react should return HTTP 302 instead of HTTP 403 Rishabh Shah

Thursday, 26 February

Snort table is NIL error Tim Tielens
Sourcefire VRT Certified Snort Rules Update 2015-02-26 Research
Startup error post-package install Research
Re: Startup error post-package install James Lay
Re: Startup error post-package install Research
Re: Startup error post-package install James Lay
Re: real-time alerting and rule to monitor only specific traffic Lena Okanovic
Re: real-time alerting and rule to monitor only specific traffic Y M
Re: Startup error post-package install Y M
Re: Startup error post-package install Research
Re: Startup error post-package install James Lay
Re: Startup error post-package install Research

Friday, 27 February

Generator ID map file location changed ? Research
Re: Startup error post-package install Joel Esler (jesler)
Re: Sourcefire Intrusion Agent Joel Esler (jesler)

Saturday, 28 February

Re: Startup error post-package install Research
Frag3 target default setting Research
Re: Startup error post-package install Joel Esler (jesler)
Re: Frag3 target default setting Joel Esler (jesler)
Re: Frag3 target default setting Research
Use of iis_unicode_map in HTTP Inspect on Linux IDS host Research
Re: Use of iis_unicode_map in HTTP Inspect on Linux IDS host Joel Esler (jesler)
Re: Use of iis_unicode_map in HTTP Inspect on Linux IDS host Research
Re: Use of iis_unicode_map in HTTP Inspect on Linux IDS host Joel Esler (jesler)
Re: Use of iis_unicode_map in HTTP Inspect on Linux IDS host Research

Sunday, 01 March

http_inspect_server syntax error ? Research
Re: Snort table is NIL error Costas Kleopa (ckleopa)
Re: http_inspect_server syntax error ? Y M
Re: Generator ID map file location changed ? Y M
Re: http_inspect_server syntax error ? Research
Re: Generator ID map file location changed ? Research

Monday, 02 March

Re: Snort react should return HTTP 302 instead of HTTP 403 Rishabh Shah
Re: Snort react should return HTTP 302 instead of HTTP 403 Russ
Snort++ Build 140 Available Now Snort Releases
Snort++ Build 140 Available Now Snort Releases
does alertAdd() free pointer after logging? Mohiuddin Ebna Kawsar
Semantics of ipvar HOME_NET Research
Re: Semantics of ipvar HOME_NET Research
ShellShock Signatures Colin Edwards

Tuesday, 03 March

Unclear on active response MAC address Research
Re: Snort react should return HTTP 302 instead of HTTP 403 Rishabh Shah
Re: Unclear on active response MAC address Al Lewis (allewi)
Re: Unclear on active response MAC address Research
Re: ShellShock Signatures s0ups .
Depth vs. offset in rules Research
Re: Depth vs. offset in rules Joel Esler (jesler)
Re: ShellShock Signatures Joel Esler (jesler)
Re: Depth vs. offset in rules Research
Red Hat Enterprise Linux 6.5 Farnsworth, Robert
Looking for utility Mike S
Re: Red Hat Enterprise Linux 6.5 Jeremy Hoel
Re: does alertAdd() free pointer after logging? Ed Borgoyn (eborgoyn)
Negative offset? L0rd Ch0de1m0rt
Re: does alertAdd() free pointer after logging? Matthias Wübbeling
Sourcefire VRT Certified Snort Rules Update 2015-03-03 Research
Re: does alertAdd() free pointer after logging? Steve Sturges (ststurge)

Wednesday, 04 March

(http_inspect) UNKNOWN METHOD error on squid Terry John
Re: (http_inspect) UNKNOWN METHOD error on squid Al Lewis (allewi)
Re: (http_inspect) UNKNOWN METHOD error on squid Terry John
Re: (http_inspect) UNKNOWN METHOD error on squid Al Lewis (allewi)
Re: (http_inspect) UNKNOWN METHOD error on squid James Lay
Re: Red Hat Enterprise Linux 6.5 Terry John
Re: Red Hat Enterprise Linux 6.5 Al Lewis (allewi)
Re: (http_inspect) UNKNOWN METHOD error on squid Terry John
Re: CVE-2014-8104 Lukas Matt

Thursday, 05 March

need assistance - no so rules with pulled pork Rata Pelua
Fwd: no .so rules with pulledpork Rata Pelua
Re: need assistance - no so rules with pulled pork Al Lewis (allewi)
Re: need assistance - no so rules with pulled pork Joel Esler (jesler)
Re: ShellShock Signatures Colin Edwards
Re: ShellShock Signatures Joel Esler (jesler)
Problems using flow quantifier Research
Re: Problems using flow quantifier lists () packetmail net
Re: Problems using flow quantifier Research
Re: Problems using flow quantifier lists () packetmail net
Sourcefire VRT Certified Snort Rules Update 2015-03-05 Research
Re: Problems using flow quantifier Joel Esler (jesler)
Re: Problems using flow quantifier lists () packetmail net
Re: Problems using flow quantifier Research
Re: Problems using flow quantifier Joel Esler (jesler)
Re: Snort-users Digest, Vol 106, Issue 16 Anthony Gallina

Friday, 06 March

Is ACID related to the snort's mysql support?‏ Archer Yang
Snort, barnyard2, snorby issue Florian Knorn
Re: Is ACID related to the snort's mysql support?‏ Joel Esler (jesler)
Re: Snort, barnyard2, snorby issue Ward Sladek
Re: [Snort-users] Is ACID related to the snort's mysql support?‏ Shirkdog
Re: Snort, barnyard2, snorby issue Juan Jesus Prieto
Re: [Snort-users] Is ACID related to the snort's mysql support?‏ Michael Steele
Re: [Snort-users] Is ACID related to the snort's mysql support?‏ Michael Steele
Re: [Snort-users] Is ACID related to the snort's mysql support?‏ Jeremy Hoel
Re: Depth vs. offset in rules Joel Esler (jesler)
Re: Snort, barnyard2, snorby issue Joel Esler (jesler)
Re: Negative offset? Joel Esler (jesler)
Re: Snort, barnyard2, snorby issue Eugenio Perez

Saturday, 07 March

Re: CVE-2014-8104 Joel Esler (jesler)

Sunday, 08 March

Fwd: hybrid IDS using snort Roshan Srivastava

Monday, 09 March

Re: Fwd: hybrid IDS using snort Al Lewis (allewi)
Which solution for blocking attacks ? Robert
取消订阅 刘江波
Snort silently dying... Carlos G Mendioroz
Re: Snort silently dying... Joel Esler (jesler)
(no subject) Andrew Shagayev

Tuesday, 10 March

Re: Fwd: hybrid IDS using snort Al Lewis (allewi)
CVE-2015-0204 kestutis.malakauskas
Re: CVE-2015-0204 Y M
Re: CVE-2015-0204 kestutis.malakauskas
Re: CVE-2015-0204 snort
Re: CVE-2015-0204 Joel Esler (jesler)
Re: CVE-2015-0204 kestutis.malakauskas
Callbeck Fabio Machado Sanches
Re: Etpro pulled pork question James Lay
Re: (no subject) Joel Esler (jesler)
Sourcefire VRT Certified Snort Rules Update 2015-03-10 Research
Unified2 with Barnyard2 + Postgresql Andrew Shagayev
Re: Snort silently dying... Carlos G Mendioroz

Wednesday, 11 March

SMTP Preprocessor : X-ANONYMOUSTLS command Dan Roberts
SIEM Sharif Uddin
File extraction during http/ftp transaction Rishabh Shah
Re: File extraction during http/ftp transaction Joel Esler (jesler)
Re: SMTP Preprocessor : X-ANONYMOUSTLS command Al Lewis (allewi)
Re: File extraction during http/ftp transaction Rishabh Shah
Re: File extraction during http/ftp transaction Hui cao
Re: File extraction during http/ftp transaction Rishabh Shah
Re: File extraction during http/ftp transaction Hui cao
Re: File extraction during http/ftp transaction Rishabh Shah
Re: File extraction during http/ftp transaction Hui cao
Re: File extraction during http/ftp transaction Hui cao
Re: File extraction during http/ftp transaction Rishabh Shah
Re: File extraction during http/ftp transaction Joel Esler (jesler)
Snort Sensors do not appear to be detecting what they should Jacobi, Michael W CIV NSWCCD Philadelphia, 10432
gen-msg.map is missing! What to do? Where to get it? Andrew Shagayev
Re: gen-msg.map is missing! What to do? Where to get it? Y M
Re: Snort Sensors do not appear to be detecting what they should Y M
Re: File extraction during http/ftp transaction Y M
Re: gen-msg.map is missing! What to do? Where to get it? Andrew Shagayev
Re: gen-msg.map is missing! What to do? Where to get it? Y M
Re: Snort silently dying... Y M
Re: Snort silently dying... Carlos G Mendioroz
Re: gen-msg.map is missing! What to do? Where to get it? Y M
Re: Snort silently dying... Y M
How to resolve flowbit dependancies using Pulled Pork? Andrew Shagayev
Re: Snort silently dying... Carlos G Mendioroz
Pulled pork: A 500 error - root certificates Andrew Shagayev

Thursday, 12 March

Getting alerts for every file Snort detects and File Services preprocessor Pablo Cantos Polaino
Re: SMTP Preprocessor : X-ANONYMOUSTLS command stephane.nasdrovisky
Sourcefire VRT Certified Snort Rules Update 2015-03-12 Research
Trouble with HTTP status message rule Research
SOLVED - Trouble with HTTP status message rule Research
Re: Trouble with HTTP status message rule lists () packetmail net
Re: Trouble with HTTP status message rule Rodrigo Montoro(Sp0oKeR)
Snort 2.9.7.2 Now Available Snort Releases
Re: Fwd: hybrid IDS using snort Bill Reimer
Snort 2.9.7.2 Now Available Snort Releases
Re: SOLVED - Trouble with HTTP status message rule Joel Esler (jesler)
Re: How to resolve flowbit dependancies using Pulled Pork? Joel Esler (jesler)
Re: SOLVED - Trouble with HTTP status message rule Research

Friday, 13 March

snort not logging anything in log file Sharif Uddin
Rules Fabio Machado Sanches
Re: Rules Al Lewis (allewi)
Suggestion for snort.conf Bill Parker

Saturday, 14 March

Need help with Signature - OS-WINDOWS Multiple Products excessive HTTP 304 Not Modified responses exploit attempt Irish Settingg

Sunday, 15 March

how to run pulledpork ignoring trust certificates? Andrew Shagayev
Re: how to run pulledpork ignoring trust certificates? Shirkdog
Snort 2.9.7.2 Ethan Hunt

Monday, 16 March

FP on 31977? Weir, Jason
Re: Snort 2.9.7.2 Stephen Gantz
Re: FP on 31977? Dave Killion
Suggestion on Shared Objects/Engines/etc Bill Parker
Re: FP on 31977? Weir, Jason
Re: Snort-sigs Digest, Vol 106, Issue 20 John York
I could use help getting my snort pulled pork barnyard2 BASE running Anthony Gallina
Re: I could use help getting my snort pulled pork barnyard2 BASE running Michael Steele

Tuesday, 17 March

Getting alerts for every file Snort detects and File Services preprocessor Pablo Cantos Polaino
Sourcefire VRT Certified Snort Rules Update 2015-03-17 Research
pulled pork - snort dynamic rules on mac OS X Andrew Shagayev

Wednesday, 18 March

Re: Snort-users Digest, Vol 106, Issue 43 Anthony Gallina
Snort not logging to /var/log/snort Mark Sellers
Re: Snort not logging to /var/log/snort Al Lewis (allewi)
Question: Snort-Alerts do not fire when traffic goes thru proxy Claus Regelmann
Question: Snort-Alerts do not fire when goes thru proxy Claus Regelmann

Thursday, 19 March

Sourcefire VRT Certified Snort Rules Update 2015-03-19 Research
commencing packet processing (pid=26029) ?? Farnsworth, Robert
Re: commencing packet processing (pid=26029) ?? Al Lewis (allewi)
Re: commencing packet processing (pid=26029) ?? Al Lewis (allewi)
Re: commencing packet processing (pid=26029) ?? Farnsworth, Robert
Re: commencing packet processing (pid=26029) ?? Al Lewis (allewi)
Re: commencing packet processing (pid=26029) ?? Farnsworth, Robert
FindPOS sig James Lay
Possible memory leak in service_ssl.c for snort-2.9.7.x and Snort++? Bill Parker
Re: commencing packet processing (pid=26029) ?? Stephen Gantz

Friday, 20 March

Need an efficient way to generate rules for URL Filtering Rishabh Shah
Re: Possible memory leak in service_ssl.c for snort-2.9.7.x and Snort++? Costas Kleopa (ckleopa)
Re: Need help with Signature - OS-WINDOWS Multiple Products excessive HTTP 304 Not Modified responses exploit attempt Irish Settingg
Re: Need help with Signature - OS-WINDOWS Multiple Products excessive HTTP 304 Not Modified responses exploit attempt James Lay
ET POLICY Vulnerable Java Version 1.8.x Detected Jonathon Elwood

Saturday, 21 March

Re: Need an efficient way to generate rules for URL Filtering Rodgers, Anthony (DTMB)
Re: Snort-users Digest, Vol 106, Issue 55 Jerry Jarreau
Re: Need an efficient way to generate rules for URL Filtering James Lay
Re: Need an efficient way to generate rules for URL Filtering Jack Pepper
Pulledpork and Snort warnings Andrew Shagayev
Re: Need an efficient way to generate rules for URL Filtering Rishabh Shah

Sunday, 22 March

Is it possible to extract URIs and store in a file? Rishabh Shah
Re: Pulledpork and Snort warnings Shirkdog
Re: Pulledpork and Snort warnings James Lay
Re: ET POLICY Vulnerable Java Version 1.8.x Detected Joel Esler (jesler)
Re: Pulledpork and Snort warnings Andrew Shagayev
Re: ET POLICY Vulnerable Java Version 1.8.x Detected Will Metcalf
Snort: setup SO rules question. Andrew Shagayev

Monday, 23 March

More about Outstanding packets C.L. Martinez
Snort++: enum "RuleOptType" Sancho Panza
Re: Snort++: enum "RuleOptType" Russ
Snort rules adonis okpidi
Re: Snort rules Al Lewis (allewi)
Re: More about Outstanding packets Al Lewis (allewi)
Re: More about Outstanding packets Carter Waxman (cwaxman)
Re: Etpro pulled pork question James Lay
Re: More about Outstanding packets C.L. Martinez
Re: Snort rules Jamie Riden
snort not logging anything in log file Sharif Uddin
Re: how to run pulledpork ignoring trust certificates? Shirkdog
Snort 2.9.7.2 Ethan Hunt
Re: Snort-users Digest, Vol 106, Issue 43 Anthony Gallina
Re: More about Outstanding packets C.L. Martinez
Question: Snort-Alerts do not fire when traffic goesthru proxy Claus Regelmann
Sending syslog alerts from Snort on ArchLinux on RPI b+ David Futsi
Re: Sending syslog alerts from Snort on ArchLinux on RPI b+ Y M
Re: Pulledpork and Snort warnings Y M
Re: Is it possible to extract URIs and store in a file? waldo kitty
snort 2972 - not working, need help Eugene Grama

Tuesday, 24 March

Re: snort 2972 - not working, need help Al Lewis (allewi)
Re: Snort rules Jamie Riden
Sourcefire VRT Certified Snort Rules Update 2015-03-24 Research

Wednesday, 25 March

snort-windows webserver-ec2 Eugene Grama
Re: snort-windows webserver-ec2 Al Lewis (allewi)
unified2 extra data - howto Michal Keníž
OpenAppID Michael Brown
Re: OpenAppID Al Lewis (allewi)

Thursday, 26 March

Re: unified2 extra data - howto Pablo Cantos Polaino
Bad -M option (or manual) elof
Snort-3.0: WARNING: active responses disabled since DAQ can't inject packets. Yuhui Lin
Re: Snort-3.0: WARNING: active responses disabled since DAQ can't inject packets. Al Lewis (allewi)
Re: Snort-3.0: WARNING: active responses disabled since DAQ can't inject packets. Russ
Sourcefire VRT Certified Snort Rules Update 2015-03-26 Research
Thresholding issues French, Jared
Re: Thresholding issues James Lay

Friday, 27 March

React option doesn't work Robert Lasota
React option doesn't work Robert Lasota
Few strange problems with Snort and Stream5 preprocessor Arun Koshal
Re: SIEM Da Beave
(http_inspect) UNKNOWN METHOD for SSL over http proxy Sss kkk
Portsweep and ICMP Sweep Alerts Omar Osta
preprocessor stream5_global prune_log_max 0 elof
Re: preprocessor stream5_global prune_log_max 0 elof
Re: React option doesn't work Al Lewis (allewi)
Re: (http_inspect) UNKNOWN METHOD for SSL over http proxy Tawanda Purazi
Odp: RE: React option doesn't work Robert Lasota
Re: (http_inspect) UNKNOWN METHOD for SSL over http proxy Al Lewis (allewi)
Re: Odp: RE: React option doesn't work Carter Waxman (cwaxman)
Re: (http_inspect) UNKNOWN METHOD for SSL over http proxy Sss kkk
Re: (http_inspect) UNKNOWN METHOD for SSL over http proxy Al Lewis (allewi)
Re: Bad -M option (or manual) Victor Roemer
Re: Question: Snort-Alerts do not fire when traffic goesthru proxy Victor Roemer
Re: preprocessor stream5_global prune_log_max 0 Victor Roemer
Odp: Re: Odp: RE: React option doesn't work Robert Lasota
Re: Odp: Re: Odp: RE: React option doesn't work Victor Roemer
Odp: Re: Odp: Re: Odp: RE: React option doesn't work Robert Lasota
Re: Odp: Re: Odp: RE: React option doesn't work Carter Waxman (cwaxman)
Re: Getting alerts for every file Snort detects and File Services preprocessor Victor Roemer
Odp: Re: Odp: Re: Odp: RE: React option doesn't work Robert Lasota
Re: Getting alerts for every file Snort detects and File Services preprocessor Victor Roemer
Re: Getting alerts for every file Snort detects and File Services preprocessor Jaime Nebrera
Re: Odp: Re: Odp: Re: Odp: RE: React option doesn't work Carter Waxman (cwaxman)
Re: Getting alerts for every file Snort detects and File Services preprocessor Jaime Nebrera
Stream5 issue Arun Koshal

Saturday, 28 March

Odp: Re: Odp: Re: Odp: Re: Odp: RE: React option doesn't work Robert Lasota
Re: Stream5 issue Emiliano Fausto

Sunday, 29 March

Fwd: snort database problem Dani Av

Monday, 30 March

Re: Stream5 issue Arun Koshal
Re: Getting alerts for every file Snort detects and File Services preprocessor Pablo Cantos Polaino
Snort output problem ?? mohamed elqaissy
snort and dhcp new devices on network Sharif Uddin
Features of Snort Nick de Bruijn
Features Snort Nick de Bruijn
Re: Features Snort Kumarswamy H N (kumhn)
Re: Snort output problem ?? Kumarswamy H N (kumhn)
Re: snort and dhcp new devices on network Sharif Uddin
Re: snort and dhcp new devices on network Sharif Uddin
Re: Stream5 issue Emiliano Fausto
Re: React option doesn't work Joel Esler (jesler)
Re: React option doesn't work Carter Waxman (cwaxman)
Re: Getting alerts for every file Snort detects and File Services preprocessor Victor Roemer
Snort Malicious Traffic Redirection to other IP mehrdad hajizadeh
Re: Getting error when try to make the file Yogesh C U

Tuesday, 31 March

snort.stats key-value mapping Karolis
Re: Stream5 issue Arun Koshal
Re: Getting alerts for every file Snort detects and File Services preprocessor Pablo Cantos Polaino
Resetting Snort without reloading everything Mike Cox
Re: Resetting Snort without reloading everything Hui cao
Re: Snort-devel Digest, Vol 104, Issue 18 Muhammad Ridwan Zalbina
Re: Snort-devel Digest, Vol 104, Issue 18 Al Lewis (allewi)
Snort++ Build 144 Available Now Snort Releases
Snort++ Build 144 Available Now Snort Releases
Re: Snort Malicious Traffic Redirection to other IP Joel Esler (jesler)
ERROR: Can't start DAQ Dan Roberts
Re: ERROR: Can't start DAQ Al Lewis (allewi)
Re: Getting alerts for every file Snort detects and File Services preprocessor Victor Roemer
Re: ERROR: Can't start DAQ Al Lewis (allewi)
Sourcefire VRT Certified Snort Rules Update 2015-03-31 Research

Previous period

Next period