Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

482 messages starting Apr 01 16 and ending Jun 30 16
Date index | Thread index | Author index

• Re: Fwd: [Snort-devel] Snort 2.9.8.2 Now Available Joel Esler (jesler) (Apr 01)
  • Re: Fwd: [Snort-devel] Snort 2.9.8.2 Now Available Balasubramaniam Natarajan (Apr 01)
• Re: help - React keyword use to display message on web browser Al Lewis (allewi) (Apr 01)
• Re: MALWARE-CNC TRUFFLEHUNTER SFVRT-1020 attack attempt" rule being fired Jeff H (Apr 01)
  • Re: MALWARE-CNC TRUFFLEHUNTER SFVRT-1020 attack attempt" rule being fired Joel Esler (jesler) (Apr 01)
    • Re: MALWARE-CNC TRUFFLEHUNTER SFVRT-1020 attack attempt" rule being fired Jeff H (Apr 07)
• Offer a new sig for detecting possible Typo Squatting on .om TLD rmkml (Apr 03)
• kill the rats Daniel Graf (Apr 03)
  • Re: kill the rats wkitty42 (Apr 03)
• Getting error Unprocessable Entity Anshuman Anil Deshmukh (Apr 04)
  • Re: Getting error Unprocessable Entity Y M (Apr 04)
    • Re: Getting error Unprocessable Entity Anshuman Anil Deshmukh (Apr 04)
      • Re: Getting error Unprocessable Entity Y M (Apr 04)
      • Re: Getting error Unprocessable Entity Joel Esler (jesler) (Apr 04)
      • Re: Getting error Unprocessable Entity Y M (Apr 04)
      • Re: Getting error Unprocessable Entity Anshuman Anil Deshmukh (Apr 04)
• Open App Id valentin . giraud (Apr 04)
  • Fwd: Open App Id valentin . giraud (Apr 04)
• Pointers required for the Snort Preprocessor Code portscan.c rohan dora (Apr 04)
• Problem with session tagging - multiple alerts in session Amir Kravitz (Apr 05)
  • <Possible follow-ups>
  • Problem with session tagging - multiple alerts in session Amir Kravitz (Apr 05)
    • Re: Problem with session tagging - multiple alerts in session Al Lewis (allewi) (Apr 06)
      • Re: Problem with session tagging - multiple alerts in session Amir Kravitz (Apr 10)
      • Re: Problem with session tagging - multiple alerts in session Al Lewis (allewi) (Apr 11)
• Snort Subscriber Rules Update 2016-04-05 Research (Apr 05)
• snort react action free (Apr 06)
  • Re: snort react action Al Lewis (allewi) (Apr 06)
    • Re: snort react action free (Apr 06)
      • Re: snort react action free (Apr 06)
• File extract troubleshot valentin . giraud (Apr 06)
  • Re: File extract troubleshot Hui Cao (huica) (Apr 06)
• Snort Blog: Snort Community Ruleset winner for March, 2016 Joel Esler (jesler) (Apr 06)
• Content Negation Gurgen Hakobyan (Apr 06)
• Snort Subscriber Rules Update 2016-04-07 Research (Apr 07)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2016-04-07 Research (Apr 07)
• Stream5 error Dave Corsello (Apr 07)
  • Re: Stream5 error Al Lewis (allewi) (Apr 07)
    • Re: Stream5 error Al Lewis (allewi) (Apr 07)
      • Re: Stream5 error Al Lewis (allewi) (Apr 07)
  • <Possible follow-ups>
  • Fwd: Re: Stream5 error Dave Corsello (Apr 08)
    • Re: Fwd: Re: Stream5 error Cloherty, Sean E (Apr 11)
      • Re: Fwd: Re: Stream5 error Al Lewis (allewi) (Apr 11)
• Signature Database Babu S (Apr 07)
  • Re: Signature Database wkitty42 (Apr 08)
• snort.conf differences in Snort 2.9.8.2 Y M (Apr 08)
  • Re: snort.conf differences in Snort 2.9.8.2 Joel Esler (jesler) (Apr 08)
    • Re: snort.conf differences in Snort 2.9.8.2 Y M (Apr 08)
• barnyard failing to start upon pulled pork update wgm-it (Apr 08)
  • Re: barnyard failing to start upon pulled pork update wkitty42 (Apr 08)
  • <Possible follow-ups>
  • barnyard failing to start upon pulled pork update WGM IT (May 17)
    • Re: barnyard failing to start upon pulled pork update Michael Steele (May 17)
• snort not alerting on same ip ssh attack after restart John Devine (Apr 08)
  • Re: snort not alerting on same ip ssh attack after restart wkitty42 (Apr 08)
  • <Possible follow-ups>
  • Re: snort not alerting on same ip ssh attack after restart John Devine (Apr 08)
  • Re: snort not alerting on same ip ssh attack after restart John Devine (Apr 08)
    • Re: snort not alerting on same ip ssh attack after restart wkitty42 (Apr 08)
• Re: missing alerts: Snort does not inspect payload from the machine it's running on? Claus Regelmann (Apr 08)
  • Re: missing alerts: Snort does not inspect payload from the machine it's running on? Y M (Apr 08)
    • Re: missing alerts: Snort does not inspect payload from the machine it's running on? Claus Regelmann (Apr 08)
      • Re: missing alerts: Snort does not inspect payload from the machine it's running on? Claus Regelmann (Apr 11)
      • Re: missing alerts: Snort does not inspect payload from the machine it's running on? Y M (Apr 12)
• sharing information about my public collection of 696 SNORT Sigs Lenny Hansson (Apr 08)
  • Re: sharing information about my public collection of 696 SNORT Sigs Joel Esler (jesler) (Apr 12)
• Snort Subscriber Rules Update 2016-04-08 Research (Apr 08)
• DC related SNORT sig groups Elliot Anderson (Apr 11)
• SSL VPN Detection Kotaro Takada (Apr 11)
• Offer a new sig for detecting JS_JITON Malware rmkml (Apr 11)
  • Re: Offer a new sig for detecting JS_JITON Malware Joshua Williams (Apr 11)
• Snort with PF_RING - Compile question Chris Chiaverini (Apr 11)
  • Re: Snort with PF_RING - Compile question Balasubramaniam Natarajan (Apr 12)
    • Re: Snort with PF_RING - Compile question Chris Chiaverini (Apr 12)
      • Re: Snort with PF_RING - Compile question Eugenio Pérez (Apr 18)
• Re: RELRO security in Snort-2.9.x Shawn (Apr 12)
  • Re: RELRO security in Snort-2.9.x Joshua Kinard (Apr 13)
• Does snort 2.9.8 support HTTP2? Tony Zhang (Apr 12)
  • Question about Snort 2.9.9 and and http2 Tony Zhang (Apr 12)
    • Re: [Snort-users] Question about Snort 2.9.9 and and http2 Joel Esler (jesler) (Apr 13)
      • Re: [Snort-users] Question about Snort 2.9.9 and and http2 Joshua Kinard (Apr 13)
      • Re: [Snort-users] Question about Snort 2.9.9 and and http2 Joel Esler (jesler) (Apr 13)
      • Re: [Snort-users] Question about Snort 2.9.9 and and http2 Joshua Kinard (Apr 13)
  • <Possible follow-ups>
  • Re: Does snort 2.9.8 support HTTP2? Shefali Prabhu (shefapra) (Apr 12)
• Snort Subscriber Rules Update 2016-04-12 Research (Apr 12)
• Assistance Request Eric Martin (Apr 12)
  • Re: Assistance Request Al Lewis (allewi) (Apr 13)
    • Re: Assistance Request Leo Nespoli (Apr 13)
      • Re: Assistance Request Al Lewis (allewi) (Apr 13)
• Snort error: Cannot decode data link type 105 Leo Nespoli (Apr 13)
  • Re: Snort error: Cannot decode data link type 105 Al Lewis (allewi) (Apr 13)
    • Re: Snort error: Cannot decode data link type 105 Leo Nespoli (Apr 13)
• [HITB-Announce] HITBGSEC CFP Closes in 2 Weeks! Hafez Kamal (Apr 13)
• Offer a new sig for detecting possible Malicious RTF file rmkml (Apr 13)
  • Re: Offer a new sig for detecting possible Malicious RTF file Matthew Mickel (Apr 21)
• Regarding Snort and HTTP2 James McLaughlin (Apr 14)
  • Re: Regarding Snort and HTTP2 Hui Cao (huica) (Apr 14)
• Snort's "sfhashfcn" function and parameters James McLaughlin (Apr 14)
• Snort Subscriber Rules Update 2016-04-14 Research (Apr 14)
• Pullpork, so rules, and upgrades James Lay (Apr 14)
  • Re: Pullpork, so rules, and upgrades Shirkdog (Apr 14)
    • Re: Pullpork, so rules, and upgrades James Lay (Apr 14)
• snort++ (ver. 3) roadmap/release date SiNA (Apr 15)
  • Re: snort++ (ver. 3) roadmap/release date Russ (Apr 18)
• Alert aggregation Gurgen Hakobyan (Apr 18)
  • Re: Alert aggregation Joel Esler (jesler) (Apr 18)
    • Re: Alert aggregation Russ (Apr 18)
• Nap Runtime Policy Jon Larson (Apr 18)
  • <Possible follow-ups>
  • Re: Nap Runtime Policy James McLaughlin (Apr 19)
• Memory leak -- StreamPolicyInitTcp Jon Larson (Apr 18)
  • Re: Memory leak -- StreamPolicyInitTcp Gaurav Nagare (gnagare) (Apr 19)
    • Re: Memory leak -- StreamPolicyInitTcp Jon Larson (Apr 19)
• Snort Subscriber Rules Update 2016-04-19 Research (Apr 19)
• Dropping Packets in Firefox but not in Internet Explorer IT-Support (on-collect solutions AG) (Apr 20)
• Snort Subscriber Rules Update 2016-04-21 Research (Apr 21)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2016-04-21 Research (Apr 21)
• Bug responsible for memory leak Jon Larson (Apr 21)
  • Re: Bug responsible for memory leak Gaurav Nagare (gnagare) (Apr 22)
• c0c0n 2016 | The cy0ps c0n - Call For Papers & Call For Workshops c0c0n 2016 - The CyOps Conference (Apr 21)
• Snort is unable to start ARUN LAL (Apr 22)
  • Re: Snort is unable to start Russ (Apr 22)
    • Re: Snort is unable to start ARUN LAL (Apr 22)
• Re: Snort-users Digest, Vol 119, Issue 29 JONES BRANTUO (Apr 23)
• Did SNORT Arp Spoofing Chris Ditze-Stephan (Apr 23)
• Snort Discards Packets.What does that mean? Dim Mar (Apr 24)
  • Re: Snort Discards Packets.What does that mean? rmkml (Apr 24)
• Re: Did SNORT Arp Spoofing (ps) Chris Ditze-Stephan (Apr 24)
• Snort does not drop packets in inline mode in FreeBSD mali dorn (Apr 24)
• Snort crashes Leo Nespoli (Apr 25)
  • Re: Snort crashes Joel Esler (jesler) (Apr 25)
    • Re: Snort crashes Leo Nespoli (Apr 25)
      • Re: Snort crashes Al Lewis (allewi) (Apr 25)
    • Re: Snort crashes Leo Nespoli (Apr 27)
      • Re: Snort crashes Al Lewis (allewi) (Apr 27)
• config file Chris Sandford (Apr 25)
  • Re: config file wkitty42 (Apr 25)
• Bug in spp_session.c/initSessionCache? (assigning value to cleanup_sessions) James McLaughlin (Apr 25)
  • Re: Bug in spp_session.c/initSessionCache? (assigning value to cleanup_sessions) Gaurav Nagare (gnagare) (May 01)
• Event_filters don't work with in-rule threshold filters. fatema bannatwala (Apr 25)
  • Re: Event_filters don't work with in-rule threshold filters. wkitty42 (Apr 25)
  • Re: Event_filters don't work with in-rule threshold filters. fatema bannatwala (Apr 25)
    • Re: Event_filters don't work with in-rule threshold filters. Y M (Apr 25)
      • Re: Event_filters don't work with in-rule threshold filters. wkitty42 (Apr 25)
• Snort and Snorby Reports Lawrence S. Slifkin (Apr 26)
  • Fwd: Snort and Snorby Reports Art C. Chikilin (Apr 26)
    • Re: Snort and Snorby Reports Joel Esler (jesler) (Apr 27)
• Local.Rules rule misfiring Clint Conner (Apr 26)
  • Re: Local.Rules rule misfiring James Lay (Apr 26)
  • Re: Local.Rules rule misfiring Rodgers, Anthony (DTMB) (Apr 29)
    • Re: Local.Rules rule misfiring Clint Conner (Apr 29)
• Infosec Institute series James Lay (Apr 26)
• Snort Subscriber Rules Update 2016-04-26 Research (Apr 26)
• RHEL 6.7 dnet library not found - but is there Ehardt, Laurie J (IS) (Apr 27)
  • Re: RHEL 6.7 dnet library not found - but is there Noah Dietrich (Apr 28)
• Snort Subscriber Rules Update 2016-04-28 Research (Apr 28)
• Help Carlos Alberto Llano Rodriguez (Apr 28)
  • <Possible follow-ups>
  • Help Carlos Alberto Llano Rodriguez (Apr 28)
• Snort SID Help 1:3813 Wilson Mesa (May 01)
  • Re: Snort SID Help 1:3813 rmkml (May 01)
• SSL Inspection Shy It (May 02)
  • Re: SSL Inspection Kumarswamy H N (kumhn) (May 02)
• Snort Subscriber Rules Update 2016-05-02 Research (May 02)
• Snort++ Build 197 Available Now Snort Releases (May 03)
  • <Possible follow-ups>
  • Snort++ Build 197 Available Now Snort Releases (May 03)
• snort honeytoken config Samuel Kidman (May 03)
• RE : snort honeytoken config rmkml (May 03)
  • Re: RE : snort honeytoken config Samuel Kidman (May 04)
    • Re: RE : snort honeytoken config Al Lewis (allewi) (May 04)
• Barnyard not using gen-msg.map Jon P (May 04)
  • Re: Barnyard not using gen-msg.map Y M (May 04)
    • Re: Barnyard not using gen-msg.map Jon P (May 04)
• RE : RE: RE : snort honeytoken config rmkml (May 04)
  • FW: RE : RE: RE : snort honeytoken config Samuel Kidman (May 12)
• Threshold.conf best practices Jon Price (May 04)
• Fwd: Help: Snort giving alerts on pcap but not on live traffic. Hanan Liaqat Bhatti (May 04)
  • Re: Fwd: Help: Snort giving alerts on pcap but not on live traffic. Gaurav Nagare (gnagare) (May 05)
• Snort Subscriber Rules Update 2016-05-05 Research (May 05)
• installation problem Ayushi Chahal (May 05)
  • Re: installation problem Al Lewis (allewi) (May 05)
• No timestamp Liviu Costea (May 05)
• how to block outgoing hacking scans? lope (May 05)
• snort dns Preprocessor rohan dora (May 05)
  • Re: snort dns Preprocessor Seshaiah Erugu (serugu) (May 05)
    • Re: snort dns Preprocessor rohan dora (May 06)
      • Re: snort dns Preprocessor Seshaiah Erugu (serugu) (May 07)
      • Re: snort dns Preprocessor rohan dora (May 07)
      • Re: snort dns Preprocessor Seshaiah Erugu (serugu) (May 09)
      • Re: snort dns Preprocessor rohan dora (May 10)
• Snort NIDS configuration problems Akhil Koul (May 08)
  • Re: Snort NIDS configuration problems wkitty42 (May 08)
• Inline config won't pass DHCP Glenn Fowler (May 08)
  • Re: Inline config won't pass DHCP Al Lewis (allewi) (May 08)
    • Re: Inline config won't pass DHCP Glenn Fowler (May 09)
• Snort Version 3.0.0-a4 doesn’t work in inline mode. Hamid Rezaei (May 08)
• Snort Subscriber Rules Update 2016-05-10 Research (May 10)
• Help - How to isolate specific device communication connected on wlan0 interface with same subnet. Amul Patel (May 10)
• Barnyard2 hangs when started with MySQL WGM IT (May 11)
  • <Possible follow-ups>
  • Barnyard2 hangs when started with MySQL WGM IT (May 11)
• Snort Subscriber Rules Update 2016-05-11 Research (May 11)
• Interfacing Snort with other apps Akhil Koul (May 11)
  • Re: Interfacing Snort with other apps Russ (May 16)
• Too much of snort events Oleg Makarov (May 12)
  • Re: Too much of snort events Al Lewis (allewi) (May 12)
    • Re: Too much of snort events Oleg Makarov (May 13)
• snort honeytoken config Samuel Kidman (May 12)
• UDP detection when no payload is pressent i UDP packets problem Lenny Hansson (May 13)
  • Re: UDP detection when no payload is pressent i UDP packets problem Al Lewis (allewi) (May 14)
• Snort3 generating multiple alert files João Soares (May 15)
  • Re: Snort3 generating multiple alert files Russ (May 16)
    • Re: Snort3 generating multiple alert files João Soares (May 16)
      • Re: Snort3 generating multiple alert files Russ (May 16)
      • Re: Snort3 generating multiple alert files João Soares (May 16)
      • Re: Snort3 generating multiple alert files Russ (May 16)
      • Re: Snort3 generating multiple alert files João Soares (May 16)
      • Re: Snort3 generating multiple alert files Ronald Hill (May 17)
      • Re: Snort3 generating multiple alert files Al Lewis (allewi) (May 17)
      • Re: Snort3 generating multiple alert files Russ (May 17)
      • Re: Snort3 generating multiple alert files Noah Dietrich (May 18)
• Subscription Rules Omar Osta (May 16)
  • Re: Subscription Rules Joel Esler (jesler) (May 16)
    • Re: Subscription Rules Omar Osta (May 16)
      • Re: Subscription Rules Joel Esler (jesler) (May 16)
      • Re: Subscription Rules Omar Osta (May 17)
• Sleepy UA James Lay (May 17)
• Snort rules Commented Asad, Hafiz ul (May 17)
  • Re: Snort rules Commented João Soares (May 17)
    • Re: Snort rules Commented Asad, Hafiz ul (May 17)
    • Re: Snort rules Commented Asad, Hafiz ul (May 17)
      • Re: Snort rules Commented Joel Esler (jesler) (May 17)
• Snort Subscriber Rules Update 2016-05-17 Research (May 17)
• Rule Submissions Stanwyck, Carraig - ASOC - Kansas City, MO (May 18)
• Installcore Downloads and Aggresive Adware Popups (catches numerous variants) Stanwyck, Carraig - ASOC - Kansas City, MO (May 19)
• Which parameters to pass in addPreproc func? Jan Hermes (May 19)
  • <Possible follow-ups>
  • Re: Which parameters to pass in addPreproc func? Ed Borgoyn (eborgoyn) (May 19)
    • Re: Which parameters to pass in addPreproc func? Jan Hermes (May 19)
• Snort not detecting rule and nothing being written to log or U2(Binary) Files Arkam Uzair (May 19)
  • Message not available
    • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Arkam Uzair (May 19)
      • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Jason (May 19)
      • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Al Lewis (allewi) (May 20)
      • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Arkam Uzair (May 21)
      • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Al Lewis (allewi) (May 22)
      • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files Arkam Uzair (May 21)
  • Re: Snort not detecting rule and nothing being written to log or U2(Binary) Files James Lay (May 19)
• Snort Subscriber Rules Update 2016-05-19 Research (May 19)
• Signature numbering significance Gardner, Warren (IHG) (May 19)
  • Re: Signature numbering significance Y M (May 19)
• Unable to process the IP address Chris Sandford (May 20)
  • Re: Unable to process the IP address Al Lewis (allewi) (May 20)
    • Re: Unable to process the IP address Chris Sandford (May 20)
• Testing community rules Scott Ellis (May 23)
• Snort Subscriber Rules Update 2016-05-24 Research (May 24)
• About Snort rules between registered and subscribed version NWeights NWeights (May 24)
• FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
  • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Al Lewis (allewi) (May 25)
    • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Al Lewis (allewi) (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Matthew White (May 25)
      • Re: FATAL ERROR - Preproc Rule Help - rule duplicates Al Lewis (allewi) (May 25)
• FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. Matthew White (May 25)
  • Re: FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. Matthew White (May 25)
  • Re: FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. Joel Esler (jesler) (May 25)
    • Re: FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. Matthew White (May 26)
      • Re: FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. Shirkdog (May 26)
      • Re: FATAL ERROR - FATAL ERROR: Unknown rule option: 'disable'. James Lay (May 26)
• Activate and dynamic rules Nicolas Matovelle Trigo (May 26)
  • Re: Activate and dynamic rules wkitty42 (May 26)
  • Re: Activate and dynamic rules Al Lewis (allewi) (May 26)
• Questions regarding Snort subscription plans justin hyland (May 26)
  • Re: Questions regarding Snort subscription plans Al Lewis (allewi) (May 26)
• Snort Subscriber Rules Update 2016-05-26 Research (May 26)
• Having a problem getting Snort rules implemented justin hyland (May 26)
  • Re: Having a problem getting Snort rules implemented Al Lewis (allewi) (May 26)
  • Re: Having a problem getting Snort rules implemented Stephen Gantz (May 26)
• Snort Capabilities Kyle Cummings (May 26)
  • Re: Snort Capabilities wkitty42 (May 26)
• need help in understanding a piece of code in snort 2.9.7.3 Vicky Singh (May 27)
• Snort installation on openstack Velusami, Selvi (May 27)
  • Re: Snort installation on openstack Al Lewis (allewi) (May 27)
    • Re: Snort installation on openstack Velusami, Selvi (May 27)
      • Re: Snort installation on openstack wkitty42 (May 27)
      • Re: Snort installation on openstack Velusami, Selvi (May 27)
      • Re: Snort installation on openstack wkitty42 (May 27)
      • Re: Snort installation on openstack Velusami, Selvi (May 27)
      • Re: Snort installation on openstack Al Lewis (allewi) (May 27)
      • Re: Snort installation on openstack Velusami, Selvi (May 27)
  • Re: Snort installation on openstack Diego Parrilla Santamaría (May 27)
    • Re: Snort installation on openstack Velusami, Selvi (May 27)
      • Re: Snort installation on openstack Diego Parrilla Santamaría (May 27)
      • Re: Snort installation on openstack Velusami, Selvi (May 27)
      • Re: Snort installation on openstack Velusami, Selvi (May 31)
  • <Possible follow-ups>
  • Snort installation on openstack Velusami, Selvi (May 27)
• Snort dynamic preprocessors compilation issues Akhil Koul (May 28)
• Preprocessor example issues Akhil Koul (May 29)
• Snort sfpreprocessor question Leo Nespoli (May 30)
  • Re: Snort sfpreprocessor question Al Lewis (allewi) (May 30)
    • Re: Snort sfpreprocessor question Leo Nespoli (Jun 03)
      • Re: Snort sfpreprocessor question Al Lewis (allewi) (May 31)
      • Re: Snort sfpreprocessor question Leo Nespoli (May 31)
      • Re: Snort sfpreprocessor question Al Lewis (allewi) (May 31)
• Offer a new sig for detecting possible wpad Name Collision rmkml (May 30)
  • Re: Offer a new sig for detecting possible wpad Name Collision Joshua Williams (May 31)
• Snort vs Snort++ Akhil Koul (May 30)
  • Re: Snort vs Snort++ ِABDUL ALEANAZI (May 30)
  • Re: Snort vs Snort++ Russ (Jun 01)
• CVE information Dan Roberts (May 30)
  • Re: CVE information Joel Esler (jesler) (May 31)
    • Re: CVE information wkitty42 (May 31)
• Extract HTTP data Akhil Koul (May 31)
• Snort Subscriber Rules Update 2016-05-31 Research (May 31)
• FILE-OTHER TRUFFLEHUNTER TALOS-CAN-0149 attack attempt Claus Regelmann (May 31)
  • Re: FILE-OTHER TRUFFLEHUNTER TALOS-CAN-0149 attack attempt Joel Esler (jesler) (Jun 01)
• GUI Chris Sandford (Jun 01)
  • Re: GUI Michael Steele (Jun 01)
  • Message not available
    • Re: GUI Chris Sandford (Jun 02)
      • Re: GUI Davison, Charles Robert (Jun 02)
• Snort Subscriber Rules Update 2016-06-02 Research (Jun 02)
• How to make my preprocessor being called before the stream5_global (aka spp_session)? Jan Hermes (Jun 03)
• FastPOS sig James Lay (Jun 03)
  • Re: [Emerging-Sigs] FastPOS sig Jason Williams (Jun 06)
• Thresholds Jon Price (Jun 03)
  • Re: Thresholds Al Lewis (allewi) (Jun 04)
    • Re: Thresholds Jon Price (Jun 10)
• Filter HTTP fields Akhil Koul (Jun 05)
• Alert on Max connections per IP Argcyborg (Jun 05)
  • Re: Alert on Max connections per IP wkitty42 (Jun 05)
    • Re: Alert on Max connections per IP Argcyborg (Jun 06)
      • Re: Alert on Max connections per IP wkitty42 (Jun 07)
      • Re: Alert on Max connections per IP Argcyborg (Jun 08)
      • Re: Alert on Max connections per IP wkitty42 (Jun 08)
• snort3-x509-reputation-plugin released in github Juliusz Brzostek (Jun 06)
  • <Possible follow-ups>
  • snort3-x509-reputation-plugin released in github Juliusz Brzostek (Jun 06)
    • Re: snort3-x509-reputation-plugin released in github Joel Esler (jesler) (Jun 06)
• Data leak prevention Luc Maignan (Jun 06)
  • Re: Data leak prevention Al Lewis (allewi) (Jun 06)
    • Re: Data leak prevention wkitty42 (Jun 06)
• Error after using snort2lua to ET_Open ruleset for Snort2.9.0 ?????? (Jun 06)
  • Re: Error after using snort2lua to ET_Open ruleset for Snort2.9.0 Al Lewis (allewi) (Jun 06)
• Re: Alert on Max connections per IP Al Lewis (allewi) (Jun 06)
  • Re: Alert on Max connections per IP Argcyborg (Jun 06)
    • Re: Alert on Max connections per IP Russ (Jun 06)
• Snort Subscriber Rules Update 2016-06-07 Research (Jun 07)
• Hyperscan pattern matcher integration for Snort 2.9.8.2 Viiret, Justin (Jun 08)
  • Re: Hyperscan pattern matcher integration for Snort 2.9.8.2 Vladimir Kunschikov (Jun 10)
    • Re: Hyperscan pattern matcher integration for Snort 2.9.8.2 Viiret, Justin (Jun 13)
• Snort++ installation error Akhil Koul (Jun 09)
  • Re: Snort++ installation error Al Lewis (allewi) (Jun 09)
• Snort Subscriber Rules Update 2016-06-09 Research (Jun 09)
• Frag3 and Stream5 Packet Reassembly for Both Windows and Linux Dave Spatz (Jun 10)
• Snort configuration Velusami, Selvi (Jun 10)
  • Re: Snort configuration Al Lewis (allewi) (Jun 11)
• Snort- RHEL compatibility Matrix Pratibha Rajan (Jun 10)
  • Re: Snort- RHEL compatibility Matrix Al Lewis (allewi) (Jun 11)
• Extract HTTP data from snort Akhil Koul (Jun 10)
• Include details of payload in log message? Toby Riddell (Jun 12)
  • Re: Include details of payload in log message? wkitty42 (Jun 12)
    • Re: Include details of payload in log message? Toby Riddell (Jun 12)
• InstallFast Malware/Adware Variants Stanwyck, Carraig - ASOC - Kansas City, MO (Jun 13)
  • Re: [Emerging-Sigs] InstallFast Malware/Adware Variants Will Metcalf (Jun 13)
• Need help regarding snort-3.0.0-a4 support on Fedora Core 6 Deepthi Bajaj (Jun 14)
  • Re: Need help regarding snort-3.0.0-a4 support on Fedora Core 6 Al Lewis (allewi) (Jun 14)
• How to determine that the Snort is ready to capture the traffic? Andrei_1980 (Jun 14)
  • Re: How to determine that the Snort is ready to capture the traffic? Balasubramaniam Natarajan (Jun 14)
  • Re: How to determine that the Snort is ready to capture the traffic? wkitty42 (Jun 14)
    • Re: How to determine that the Snort is ready to capture the traffic? Balasubramaniam Natarajan (Jun 14)
    • Re: How to determine that the Snort is ready to capture the traffic? Andrei_1980 (Jun 14)
  • Re: How to determine that the Snort is ready to capture the traffic? Joel Esler (jesler) (Jun 14)
    • Re: How to determine that the Snort is ready to capture the traffic? Andrey Kiryukhin (Jun 15)
• Snort rules Dan Roberts (Jun 14)
  • Re: Snort rules Y M (Jun 14)
    • Message not available
      • Re: Snort rules Y M (Jun 14)
      • Re: Snort rules Joel Esler (jesler) (Jun 14)
• data_log inspector Akhil Koul (Jun 14)
  • Re: data_log inspector Russ (Jun 14)
• Looking for Archived Snort Community Rules Jose David Mireles (Jun 14)
  • Re: Looking for Archived Snort Community Rules Y M (Jun 14)
    • Re: Looking for Archived Snort Community Rules Joel Esler (jesler) (Jun 14)
• Snort Subscriber Rules Update 2016-06-14 Research (Jun 14)
• Snort down ARUN LAL (Jun 15)
  • Re: Snort down James Lay (Jun 15)
    • Re: Snort down ARUN LAL (Jun 15)
      • Re: Snort down James Lay (Jun 15)
  • Re: [Snort-sigs] Snort down wkitty42 (Jun 15)
    • Re: [Snort-sigs] Snort down James Lay (Jun 15)
• Snort IPS - slow file transfer problem Anton Bezkrovny (Jun 15)
  • Re: Snort IPS - slow file transfer problem wkitty42 (Jun 15)
    • Re: Snort IPS - slow file transfer problem Anton Bezkrovny (Jun 16)
• [PATCH] DPDK DAQ Module Tiwei Bie (Jun 15)
  • Re: [PATCH] DPDK DAQ Module Ed Borgoyn (eborgoyn) (Jun 16)
    • Re: [PATCH] DPDK DAQ Module Maxim Uvarov (Jun 16)
      • Re: [PATCH] DPDK DAQ Module Tiwei Bie (Jun 16)
      • Re: [PATCH] DPDK DAQ Module Tiwei Bie (Jun 16)
      • Re: [PATCH] DPDK DAQ Module Maxim Uvarov (Jun 16)
      • Re: [PATCH] DPDK DAQ Module Tiwei Bie (Jun 16)
      • Re: [PATCH] DPDK DAQ Module Michael Altizer (Jun 17)
• rule over tcp stream Shoufu Luo (Jun 16)
• Snort, VM or physical server ? Nicolas Lepolard (Jun 16)
  • Re: Snort, VM or physical server ? wkitty42 (Jun 16)
  • Re: Snort, VM or physical server ? Rhoades.Jon (Jun 16)
  • Re: Snort, VM or physical server ? Ryan Martin (Jun 16)
• Snort Subscriber Rules Update 2016-06-16 Research (Jun 16)
• Need help on Snort. Arun Saini (Jun 18)
• Fwd: data_log output Sunil Koul (Jun 19)
  • Re: Fwd: data_log output Russ (Jun 19)
  • <Possible follow-ups>
  • data_log output Sunil Koul (Jun 19)
• HTTP Response GZIP Decompression Failed Dan Roberts (Jun 20)
• Offer a new sig for detecting Netgear Authentication bypass rmkml (Jun 20)
• [HITB-Announce] HITB2016AMS Videos & GSEC Singapore Voting Hafez Kamal (Jun 20)
• Snort Subscriber Rules Update 2016-06-21 Research (Jun 21)
• Setup OK but running fails. Robert (Jun 21)
  • Re: Setup OK but running fails. Al Lewis (allewi) (Jun 21)
• snort problems BOCAL CALBO (Jun 22)
  • Re: snort problems Al Lewis (allewi) (Jun 22)
• Snort 2.9.8.3 Now Available Snort Releases (Jun 22)
  • <Possible follow-ups>
  • Snort 2.9.8.3 Now Available Snort Releases (Jun 22)
• Snort BASE compatibility Pratibha Rajan (Jun 22)
  • Re: Snort BASE compatibility Joel Esler (jesler) (Jun 22)
• Snort My SQL DB Arun Saini (Jun 22)
  • Re: Snort My SQL DB Joel Esler (jesler) (Jun 22)
    • Message not available
      • Fwd: Snort My SQL DB Arun Saini (Jun 23)
      • Re: Snort My SQL DB Joel Esler (jesler) (Jun 23)
      • Re: Snort My SQL DB Arun Saini (Jun 23)
      • Re: Snort My SQL DB Arun Saini (Jun 23)
      • Re: Snort My SQL DB wkitty42 (Jun 24)
• Razorback Rich Lee (Jun 23)
  • Re: Razorback Joel Esler (jesler) (Jun 23)
    • Re: Razorback Rich Lee (Jun 23)
      • Re: Razorback Joel Esler (jesler) (Jun 23)
      • Re: Razorback Rich Lee (Jun 23)
• snort 2.9.8.3 does optimzation off in configure.in, its giving errorr while compiling Nilesh Varmora (Jun 23)
• BROWSER-PLUGINS McAffee Virtual Technician rules Omar Osta (Jun 23)
  • Re: BROWSER-PLUGINS McAffee Virtual Technician rules Joel Esler (jesler) (Jun 23)
• Snort Subscriber Rules Update 2016-06-23 Research (Jun 23)
• Snort++ Build 201 Available Now Snort Releases (Jun 23)
  • <Possible follow-ups>
  • Snort++ Build 201 Available Now Snort Releases (Jun 23)
• SnortEventqAddBypass ? Pierre (Jun 24)
• why UDP disc acquire? Andrey Kiryukhin (Jun 24)
  • Re: why UDP disc acquire? Al Lewis (allewi) (Jun 24)
    • Re: why UDP disc acquire? Andrey Kiryukhin (Jun 24)
      • Re: why UDP disc acquire? Al Lewis (allewi) (Jun 24)
      • Re: why UDP disc acquire? Andrey Kiryukhin (Jun 25)
      • Re: why UDP disc acquire? wkitty42 (Jun 25)
      • Re: why UDP disc acquire? Andrey Kiryukhin (Jun 25)
      • Re: why UDP disc acquire? Al Lewis (allewi) (Jun 25)
      • Re: why UDP disc acquire? Al Lewis (allewi) (Jun 25)
• u2 format differences from 2.9.8.0 to 2.9.8.2 Avery Rozar (Jun 25)
  • Re: u2 format differences from 2.9.8.0 to 2.9.8.2 Y M (Jun 25)
    • Re: u2 format differences from 2.9.8.0 to 2.9.8.2 Avery Rozar (Jun 25)
      • Re: u2 format differences from 2.9.8.0 to 2.9.8.2 Avery Rozar (Jun 25)
• Marking reassembled TCP segments Amir Goldman (Jun 26)
• TCP stream processing performance Kevin Wang (Jun 27)
  • Re: TCP stream processing performance Victor Roemer (Jun 27)
    • Re: TCP stream processing performance Kevin Wang (Jun 28)
  • <Possible follow-ups>
  • Re: TCP stream processing performance Al Lewis (allewi) (Jun 27)
• Publishing http attributes Akhil Koul (Jun 28)
  • Re: Publishing http attributes Seshaiah Erugu (serugu) (Jun 28)
  • Re: Publishing http attributes Russ (Jun 28)
• pulledpork James (Jun 28)
  • Re: pulledpork Shirkdog (Jun 28)
• Error Ikenna Chiadikaobi (Jun 28)
  • Re: Error Al Lewis (allewi) (Jun 28)
    • Message not available
      • Re: Error Al Lewis (allewi) (Jun 28)
• Snort Subscriber Rules Update 2016-06-28 Research (Jun 28)
• Preprocessor's process function not called due to wrong pp_enabled masks Matthias Wübbeling (Jun 28)
• Pulledpork modifyingsid error Rahul Bhonsale (Jun 29)
  • Re: Pulledpork modifyingsid error Shirkdog (Jun 29)
• Centralized reporting server and Sensors - Possible mis-match Pratibha Rajan (Jun 29)
  • Centralized reporting server and Sensors - Possible mis-match Pratibha Rajan (Jun 29)
• PCRE in snort Fincham, Greg L. CTN2 (Jun 30)
  • Re: PCRE in snort Joel Esler (jesler) (Jun 30)
    • Re: PCRE in snort lists (Jun 30)
• Snort Subscriber Rules Update 2016-06-30 Research (Jun 30)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2016-06-30 Research (Jun 30)
• Offset Fincham, Greg L. CTN2 (Jun 30)
  • <Possible follow-ups>
  • Re: Offset Al Lewis (allewi) (Jun 30)
• Urgent Pointer Pittigher, Raymond (Jun 30)
  • Re: Urgent Pointer Y M (Jun 30)
  • <Possible follow-ups>
  • Re: Urgent Pointer Al Lewis (allewi) (Jun 30)
    • Re: Urgent Pointer Pittigher, Raymond (Jun 30)
      • Re: Urgent Pointer Al Lewis (allewi) (Jun 30)
      • Re: Urgent Pointer Pittigher, Raymond (Jun 30)
      • Re: Urgent Pointer Geoffrey Serrao (Jun 30)
      • Re: Urgent Pointer Pittigher, Raymond (Jun 30)

Previous period

Next period