Snort: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

773 messages starting Jan 01 17 and ending Mar 31 17
Date index | Thread index | Author index

• Ask : preprocessor perfmonitor yudhi ardiyanto (Jan 01)
  • Re: Ask : preprocessor perfmonitor Bryan Keith (Jan 01)
• Re: Request access to snort-users mailing list Joel Esler (jesler) (Jan 01)
• WSUS Vito Reiter (Jan 02)
• Windows snort in amazon aws Vinson, John (Jan 03)
• Re: 1337 Bot and TCP options detection joshua burgess (Jan 03)
  • Re: 1337 Bot and TCP options detection FOULDE Damien (Jan 06)
• Re: Proposed Rules for Acunetix Scanner Joshua Williams (Jan 03)
  • Re: Proposed Rules for Acunetix Scanner lists (Jan 03)
  • <Possible follow-ups>
  • Re: Proposed Rules for Acunetix Scanner lists (Jan 06)
    • Re: Proposed Rules for Acunetix Scanner Joel Esler (jesler) (Jan 08)
      • Re: Proposed Rules for Acunetix Scanner Joshua Williams (Jan 10)
• Snort Subscriber Rules Update 2017-01-03 Research (Jan 03)
• (no subject) box fax (Jan 04)
  • <Possible follow-ups>
  • (no subject) box fax (Jan 04)
  • (no subject) Shane Ishmael (Jan 13)
  • (no subject) abdelkrim boualam (Jan 31)
    • Re: (no subject) Joel Esler (jesler) (Jan 31)
    • Re: (no subject) wkitty42 (Jan 31)
  • (no subject) Omar Johnatan Lopez Carrillo (Jan 31)
    • Re: (no subject) Carter Waxman (cwaxman) (Feb 01)
  • (no subject) Omar Johnatan Lopez Carrillo (Feb 01)
  • (no subject) Andre s (Feb 01)
  • (no subject) Omar Johnatan Lopez Carrillo (Feb 03)
    • Re: (no subject) Marcin Dulak (Feb 03)
  • (no subject) Johnny Green (Feb 08)
    • Re: (no subject) Scott Tolbert (Feb 08)
      • Re: (no subject) Al Lewis (allewi) (Feb 08)
    • Re: (no subject) Al Lewis (allewi) (Feb 08)
      • Re: (no subject) wkitty42 (Feb 09)
      • Re: (no subject) Russ (Feb 09)
      • Re: (no subject) wkitty42 (Feb 09)
    • Re: (no subject) Joel Esler (jesler) (Feb 09)
  • (no subject) Андо Никоян (Feb 10)
  • (no subject) 조규리 (Feb 21)
    • Re: (no subject) Al Lewis (allewi) (Feb 22)
• Re: converting unified2 to pcap: 'ethertype Unknown' Marcin Dulak (Jan 04)
• Re: LDAPv3 with simple authentication FOULDE Damien (Jan 04)
  • Re: LDAPv3 with simple authentication FOULDE Damien (Jan 25)
    • Message not available
      • Re: LDAPv3 with simple authentication FOULDE Damien (Jan 31)
      • Re: LDAPv3 with simple authentication Joel Esler (jesler) (Jan 31)
      • Re: LDAPv3 with simple authentication FOULDE Damien (Feb 01)
• snort3.0 doesn't log the triggering packet of an alert Maxim (Jan 05)
  • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Al Lewis (allewi) (Jan 05)
    • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Maxim (Jan 05)
• Blocking based on snort alerts. fatema bannatwala (Jan 05)
• Snort Subscriber Rules Update 2017-01-05 Research (Jan 05)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2017-01-05 Research (Jan 05)
• Variables Michael Brown (Jan 05)
• Network tap suggestions Luke Ager (Jan 06)
  • Re: Network tap suggestions Doug Burks (Jan 06)
    • Re: Network tap suggestions Luke Ager (Jan 06)
      • Re: Network tap suggestions Bryce Dickey (Jan 06)
      • Re: Network tap suggestions Jim Campbell (Jan 06)
• Re: Snort-users Digest, Vol 128, Issue 4 Franco Esmores (Jan 06)
• Snort handling multiple Pcap files Asad, Hafiz ul (Jan 06)
  • <Possible follow-ups>
  • Re: Snort handling multiple Pcap files Al Lewis (allewi) (Jan 06)
    • Re: Snort handling multiple Pcap files Asad, Hafiz ul (Jan 12)
• Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Al Lewis (allewi) (Jan 06)
  • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Maxim (Jan 08)
    • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Maxim (Jan 08)
      • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Russ (Jan 09)
      • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert João Soares (Jan 09)
      • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Maxim (Jan 10)
      • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert João Soares (Jan 11)
      • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert João Soares (Jan 11)
  • <Possible follow-ups>
  • Re: [SUSPECTED SPAM] snort3.0 doesn't log the triggering packet of an alert Al Lewis (allewi) (Jan 09)
• Compilation Errors with Snort 3 a4 223: issues with DAQ (DAQ not declared in this scope) Noah Dietrich (Jan 07)
  • Re: Compilation Errors with Snort 3 a4 223: issues with DAQ (DAQ not declared in this scope) Al Lewis (allewi) (Jan 07)
    • Re: Compilation Errors with Snort 3 a4 223: issues with DAQ (DAQ not declared in this scope) Noah Dietrich (Jan 07)
• Quick sizing question Lee Brown (Jan 07)
• Freelance packet analysis Dave Porcello (Jan 07)
  • Re: Freelance packet analysis Joel Esler (jesler) (Jan 08)
• help with flow:established Felix Erlacher (Jan 09)
  • Re: help with flow:established Al Lewis (allewi) (Jan 09)
    • Re: help with flow:established Felix Erlacher (Jan 09)
• PulledPork Stopped Working Keith Pachulski (Jan 09)
  • Re: PulledPork Stopped Working Joel Esler (jesler) (Jan 09)
• Could anyone share the performance data of Snort3.0 IDS Sunyi LIu (Jan 10)
  • 答复: Could anyone share the performance data of Snort3.0 IDS Nacht Z (Jan 10)
    • Re: 答复: Could anyone share the performance data of Snort3.0 IDS Russ (Jan 11)
      • Re: 答复: Could anyone share the performance data of Snort3.0 IDS Sunyi LIu (Jan 12)
• Barnyard issue: Multiple entries in database for a single signature. fatema bannatwala (Jan 10)
  • Re: Barnyard issue: Multiple entries in database for a single signature. fatema bannatwala (Jan 10)
    • Re: Barnyard issue: Multiple entries in database for a single signature. fatema bannatwala (Jan 17)
• Snort Subscriber Rules Update 2017-01-10 Research (Jan 10)
• Barnyard2 issue: can't extract timestamp extention from 'snort.u2.1484091351'using base 'snort.u2.1484091351' changliu (Jan 10)
• No Alerts on snorby-barnyard2 Paraskevas Lampadas (Jan 11)
• Snort Rule 40755 and Shockwave Flash detection Jonathan A. Yee (Jan 11)
  • Re: Snort Rule 40755 and Shockwave Flash detection Al Lewis (allewi) (Jan 11)
    • Re: Snort Rule 40755 and Shockwave Flash detection Joel Esler (jesler) (Jan 11)
• [SNORT3.0]: how to compile snort3.0 to enable hyperscan? Maxim (Jan 11)
  • Re: [SUSPECTED SPAM] [SNORT3.0]: how to compile snort3.0 to enable hyperscan? Al Lewis (allewi) (Jan 12)
    • Re: [SUSPECTED SPAM] [SNORT3.0]: how to compile snort3.0 to enable hyperscan? Noah Dietrich (Jan 12)
• snort 2.9.9.0 error Mojtaba Haghighipour (Jan 11)
  • Re: snort 2.9.9.0 error Jim Campbell (Jan 12)
    • Re: snort 2.9.9.0 error Ed Borgoyn (eborgoyn) (Jan 12)
      • Re: snort 2.9.9.0 error Michael Steele (Jan 12)
      • Re: snort 2.9.9.0 error Mojtaba Haghighipour (Jan 13)
      • Re: snort 2.9.9.0 error Kumarswamy H N (kumhn) (Jan 13)
      • Re: snort 2.9.9.0 error Michael Steele (Jan 13)
      • Re: snort 2.9.9.0 error Mojtaba Haghighipour (Jan 13)
      • Re: snort 2.9.9.0 error Ed Borgoyn (eborgoyn) (Jan 13)
      • Re: snort 2.9.9.0 error wkitty42 (Jan 13)
• Snort Subscriber Rules Update 2017-01-12 Research (Jan 12)
• Oinkcode useage Jeffrey Briggs (Jan 13)
  • Re: Oinkcode useage Joel Esler (jesler) (Jan 13)
• Snort takes prohibitively huge time for multiple pcap files Asad, Hafiz ul (Jan 13)
  • Re: Snort takes prohibitively huge time for multiple pcap files Bhargava Jandhyala (bjandhya) (Jan 14)
    • Re: Snort takes prohibitively huge time for multiple pcap files Asad, Hafiz ul (Jan 16)
      • Re: Snort takes prohibitively huge time for multiple pcap files Bhargava Jandhyala (bjandhya) (Jan 19)
      • Re: Snort takes prohibitively huge time for multiple pcap files Bhargava Jandhyala (bjandhya) (Jan 19)
      • Re: Snort takes prohibitively huge time for multiple pcap files Asad, Hafiz ul (Jan 19)
• Snort Upgrade N. V. R. K. RAJU (Jan 13)
  • <Possible follow-ups>
  • Re: Snort Upgrade N. V. R. K. RAJU (Jan 16)
  • Re: Snort Upgrade Neelakantam, Raju (Jan 16)
  • Re: Snort Upgrade Neelakantam, Raju (Jan 16)
    • Re: Snort Upgrade James Lay (Jan 16)
• detection_filter not working Anna Kowalska (Jan 14)
  • Re: detection_filter not working Joel Esler (jesler) (Jan 14)
  • Message not available
    • Re: detection_filter not working Anna Kowalska (Jan 19)
      • Re: detection_filter not working Russ (Jan 19)
      • Re: detection_filter not working Al Lewis (allewi) (Jan 19)
      • Re: detection_filter not working Thu Hà Hoàng (Jan 19)
      • Re: detection_filter not working Joel Esler (jesler) (Jan 19)
      • Re: detection_filter not working Al Lewis (allewi) (Jan 22)
      • Re: detection_filter not working Anna Kowalska (Jan 23)
  • <Possible follow-ups>
  • Re: detection_filter not working fatema bannatwala (Jan 17)
• Question regarding Barnyard2 Bob Baller (Jan 14)
  • Re: Question regarding Barnyard2 Y M (Jan 15)
    • Re: Question regarding Barnyard2 Bob Baller (Jan 15)
      • Re: Question regarding Barnyard2 Noah Dietrich (Jan 15)
      • Re: Question regarding Barnyard2 Bob Baller (Jan 16)
  • <Possible follow-ups>
  • Re: Question regarding Barnyard2 Dheeraj Gupta (Jan 15)
• Hello Julio Hernández Pacheco (Jan 15)
  • Re: Hello Michael Sadler (Jan 15)
  • Re: Hello wkitty42 (Jan 15)
• Can anyone share some performance data with Sucricata? Can it handle 10Gb traffic per second? Maxim (Jan 16)
  • Re: Can anyone share some performance data with Sucricata? Can it handle 10Gb traffic per second? Joel Esler (jesler) (Jan 16)
• Trouble in the Barnyard Bob Baller (Jan 16)
  • Re: Trouble in the Barnyard Noah Dietrich (Jan 16)
    • Re: Trouble in the Barnyard Bob Baller (Jan 16)
      • Re: Trouble in the Barnyard James Lay (Jan 16)
      • Re: Trouble in the Barnyard Bob Baller (Jan 16)
      • Re: Trouble in the Barnyard James Lay (Jan 16)
      • Re: Trouble in the Barnyard Bob Baller (Jan 17)
      • Re: Trouble in the Barnyard Y M (Jan 17)
      • Re: Trouble in the Barnyard Bob Baller (Jan 18)
      • Re: Trouble in the Barnyard Bob Baller (Jan 18)
• CSV output plugins for barnyard2 and snort Sean Cruikshank (Jan 16)
• Snort Error Paraskevas Lampadas (Jan 17)
  • Re: Snort Error wkitty42 (Jan 17)
    • Re: Snort Error Paraskevas Lampadas (Jan 18)
      • Re: Snort Error Paraskevas Lampadas (Jan 18)
      • Re: Snort Error Al Lewis (allewi) (Jan 18)
      • Re: Snort Error Paraskevas Lampadas (Jan 18)
      • Re: Snort Error Al Lewis (allewi) (Jan 18)
      • Re: Snort Error Paraskevas Lampadas (Jan 18)
      • Re: Snort Error Al Lewis (allewi) (Jan 18)
      • Re: Snort Error Paraskevas Lampadas (Jan 18)
      • Re: Snort Error Al Lewis (allewi) (Jan 18)
      • Re: Snort Error Paraskevas Lampadas (Jan 18)
• Snort Subscriber Rules Update 2017-01-17 Research (Jan 17)
• Barnyard2 installation - unable to find mysqlclient library. RAJIV KUMAR UTSAV (Jan 18)
  • Re: Barnyard2 installation - unable to find mysqlclient library. Noah Dietrich (Jan 18)
• Re: Snort-users Digest, Vol 128, Issue 41 Eric Boettner (Jan 18)
• Snorby Andre Savoie (Jan 18)
  • Re: Snorby Paraskevas Lampadas (Jan 19)
• Snort Subscriber Rules Update 2017-01-19 Research (Jan 19)
• Re: Snort-users Digest, Vol 128, Issue 46 Anna Kowalska (Jan 19)
• Alerts in alert_fast arrive out-of-order? Marcin Dulak (Jan 19)
  • Re: Alerts in alert_fast arrive out-of-order? Marcin Dulak (Jan 23)
• Inline Installation Problem Michael David (Jan 20)
  • Re: Inline Installation Problem James Lay (Jan 20)
  • Re: Inline Installation Problem Y M (Jan 20)
• SIDs 41338 and 41340 - FILE-IMAGE Adobe Acrobat Pro malformed JPEG APP1 segment out of bounds memory access attempt Charlie Dyer (Jan 20)
  • Re: SIDs 41338 and 41340 - FILE-IMAGE Adobe Acrobat Pro malformed JPEG APP1 segment out of bounds memory access attempt Nick Randolph (Jan 20)
  • Re: SIDs 41338 and 41340 - FILE-IMAGE Adobe Acrobat Pro malformed JPEG APP1 segment out of bounds memory access attempt Al Lewis (allewi) (Jan 20)
    • Re: SIDs 41338 and 41340 - FILE-IMAGE Adobe Acrobat Pro malformed JPEG APP1 segment out of bounds memory access attempt Charlie Dyer (Jan 20)
      • Re: SIDs 41338 and 41340 - FILE-IMAGE Adobe Acrobat Pro malformed JPEG APP1 segment out of bounds memory access attempt Nick Randolph (Jan 23)
• Snort Subscriber Rules Update 2017-01-20 Research (Jan 20)
• MS RDP on non-standard port James Lay (Jan 22)
  • Re: [Emerging-Sigs] MS RDP on non-standard port Sergey Malinkin (Jan 23)
  • Re: MS RDP on non-standard port Joshua Williams (Jan 23)
  • Re: [Emerging-Sigs] MS RDP on non-standard port Will Metcalf (Jan 23)
• Pulled Pork 0.7.2 Policies not working Michael Steele (Jan 22)
  • Re: Pulled Pork 0.7.2 Policies not working Joel Esler (jesler) (Jan 23)
  • <Possible follow-ups>
  • Pulled Pork 0.7.2 Policies not working Michael Steele (Jan 22)
• Installation: Charles E. Black (Jan 22)
  • Re: Installation: Luke Ager (Jan 22)
    • Re: Installation: Luke Ager (Jan 22)
      • Re: Installation: Luke Ager (Jan 22)
      • New comment - [#21068] Re: Installation: HELPDESK (Jan 22)
      • New comment - [#21068] Re: Installation: HELPDESK (Jan 22)
• manage logs in snort samuel desseaux (Jan 23)
  • Re: manage logs in snort Joel Esler (jesler) (Jan 23)
• Detecting DDoS attacks with Snort Ana Serrano Mamolar (Jan 23)
  • Re: Detecting DDoS attacks with Snort Joel Esler (jesler) (Jan 23)
    • Re: Detecting DDoS attacks with Snort Ana Serrano Mamolar (Jan 23)
      • Re: Detecting DDoS attacks with Snort Joel Esler (jesler) (Jan 23)
      • Re: Detecting DDoS attacks with Snort Ana Serrano Mamolar (Jan 23)
      • Re: Detecting DDoS attacks with Snort Joel Esler (jesler) (Jan 23)
      • Re: Detecting DDoS attacks with Snort Ana Serrano Mamolar (Jan 23)
      • Re: Detecting DDoS attacks with Snort Joel Esler (jesler) (Jan 23)
      • Re: Detecting DDoS attacks with Snort Ana Serrano Mamolar (Jan 23)
• Subscription stop 이강수 (Jan 23)
  • Re: Subscription stop Cynthia Leonard (cyleonar) (Jan 23)
• I want to unsubscribe RAJIV KUMAR UTSAV (Jan 23)
  • Re: I want to unsubscribe Al Lewis (allewi) (Jan 23)
• Installing Snort, Barnyard & PulledPork in one go RAJIV KUMAR UTSAV (Jan 24)
  • Re: Installing Snort, Barnyard & PulledPork in one go Joel Esler (jesler) (Jan 24)
• Monitor Authentication Chris Sandford (Jan 24)
  • Message not available
    • Re: Monitor Authentication Chris Sandford (Jan 25)
  • <Possible follow-ups>
  • Re: Monitor Authentication Al Lewis (allewi) (Jan 24)
• Snort++ Escaping characters in signature content secres (Jan 24)
  • Re: Snort++ Escaping characters in signature content Russ (Jan 24)
  • <Possible follow-ups>
  • Snort++ Escaping characters in signature content secres (Jan 24)
• SNORT sig to cover the latest Chrome\FF Webex Vulnerability joshua burgess (Jan 24)
  • Re: SNORT sig to cover the latest Chrome\FF Webex Vulnerability Patrick Mullen (Jan 25)
• Snort Subscriber Rules Update 2017-01-24 Research (Jan 24)
• inconsistency docu vs. snort.conf Felix Erlacher (Jan 25)
  • Re: inconsistency docu vs. snort.conf Marcin Dulak (Jan 25)
  • Re: inconsistency docu vs. snort.conf Joel Esler (jesler) (Jan 25)
    • Re: inconsistency docu vs. snort.conf Marcin Dulak (Jan 25)
• Length encoded protocol / LDAP and BER FOULDE Damien (Jan 25)
  • Re: Length encoded protocol / LDAP and BER FOULDE Damien (Feb 11)
    • Re: Length encoded protocol / LDAP and BER Joel Esler (jesler) (Feb 11)
  • Re: Length encoded protocol / LDAP and BER Russ (Feb 13)
    • Re: Length encoded protocol / LDAP and BER FOULDE Damien (Feb 13)
• New sig for detecting audit SVG Files contains JavaScript (possible Malicious) rmkml (Jan 25)
  • Re: New sig for detecting audit SVG Files contains JavaScript (possible Malicious) Joshua Williams (Jan 25)
• Logs Snort to attack map Diego Brum (Jan 26)
  • Re: Logs Snort to attack map Daniel (Jan 26)
• Snort Subscriber Rules Update 2017-01-26 Research (Jan 26)
• Dont discard truncated packets Felix Erlacher (Jan 26)
  • Re: Dont discard truncated packets Felix Erlacher (Jan 27)
• ec32ea097afc715ebe491efe6153affaeb59f754 Kamel Benrais (Jan 27)
• Snort logs to MySQL Abdullah AL-Mutairy (Jan 27)
  • Re: Snort logs to MySQL Al Lewis (allewi) (Jan 27)
  • Re: Snort logs to MySQL wkitty42 (Jan 28)
    • Re: Snort logs to MySQL Joel Esler (jesler) (Jan 28)
      • Re: Snort logs to MySQL Abdullah AL-Mutairy (Jan 29)
      • Re: Snort logs to MySQL Joel Esler (jesler) (Jan 29)
• Remove me from the mailing list please Chakresh Singh (Jan 27)
  • Re: Remove me from the mailing list please Al Lewis (allewi) (Jan 27)
• Remove me from the mailing list please Mike Plaster (Jan 27)
  • Re: Remove me from the mailing list please Joel Esler (jesler) (Jan 27)
• Snort read a incremental file Paul Li (Jan 28)
  • <Possible follow-ups>
  • Fwd: Re: Snort read a incremental file Felix Erlacher (Jan 28)
    • Re: Snort read a incremental file Paul Li (Jan 30)
      • Re: Snort read a incremental file Joel Esler (jesler) (Jan 30)
      • Re: Snort read a incremental file Paul Li (Jan 30)
      • Re: Snort read a incremental file Alberto Colosi (Jan 30)
      • Re: Snort read a incremental file Felix Erlacher (Jan 30)
• Content-Type: application/x-www-form-urlencoded allows bypass of my snort rule Avery Rozar (Jan 28)
  • Re: Content-Type: application/x-www-form-urlencoded allows bypass of my snort rule Y M (Jan 28)
    • Re: Content-Type: application/x-www-form-urlencoded allows bypass of my snort rule Avery Rozar (Jan 28)
  • Re: Content-Type: application/x-www-form-urlencoded allows bypass of my snort rule 강명훈 (Jan 30)
• Snort-sigs mailing list and VoipTech HelpDesk auto replies Y M (Jan 28)
  • Re: Snort-sigs mailing list and VoipTech HelpDesk auto replies wkitty42 (Jan 28)
    • Re: Snort-sigs mailing list and VoipTech HelpDesk auto replies Joel Esler (jesler) (Jan 28)
      • Re: Snort-sigs mailing list and VoipTech HelpDesk auto replies Y M (Jan 28)
      • Re: Snort-sigs mailing list and VoipTech HelpDesk auto replies Joel Esler (jesler) (Jan 28)
• afpacket and inline mode Michael David (Jan 28)
  • Re: afpacket and inline mode James Lay (Jan 28)
    • Message not available
      • Re: afpacket and inline mode James Lay (Jan 28)
• Help Snort Iman Behhid (Jan 29)
  • Re: Help Snort James Lay (Jan 29)
• snort2lua errors koppfabi (Jan 29)
• Snort rule does not alarm Aleksandrs Polinkins (Jan 30)
• instalacion snort Omar Johnatan Lopez Carrillo (Jan 30)
  • Re: instalacion snort Omar Johnatan Lopez Carrillo (Jan 30)
    • Re: instalacion snort wkitty42 (Jan 30)
• Configuration Problem Jones, Christopher (Chris) (Maj) (Jan 30)
  • Re: Configuration Problem wkitty42 (Jan 30)
• Error Initializing DAQ PCAP Jones, Christopher (Chris) (Maj) (Jan 30)
  • <Possible follow-ups>
  • Re: Error Initializing DAQ PCAP Al Lewis (allewi) (Jan 30)
• Gathering the session for a two rule setup Joshua Ochsankehl (Jan 30)
  • Re: Gathering the session for a two rule setup Joel Esler (jesler) (Jan 30)
    • Re: Gathering the session for a two rule setup Joshua Ochsankehl (Jan 31)
• Manually download and install Snort Rules updates Haim Mitrany (Jan 31)
  • Re: Manually download and install Snort Rules updates Joel Esler (jesler) (Jan 31)
    • Re: Manually download and install Snort Rules updates Personal (Jan 31)
      • Re: Manually download and install Snort Rules updates Al Lewis (allewi) (Jan 31)
      • Re: Manually download and install Snort Rules updates Cynthia Leonard (cyleonar) (Jan 31)
• log snort Xref Diego Brum (Jan 31)
• Rule 18:119 James Lay (Jan 31)
  • Re: Rule 18:119 Joshua Williams (Feb 01)
• Snort Subscriber Rules Update 2017-01-31 Research (Jan 31)
• Snort Rule Creation John G (Jan 31)
  • Re: Snort Rule Creation Joel Esler (jesler) (Jan 31)
    • Re: Snort Rule Creation James Lay (Jan 31)
    • Re: Snort Rule Creation John G (Jan 31)
    • Re: Snort Rule Creation John G (Jan 31)
      • Re: Snort Rule Creation John G (Jan 31)
      • Re: Snort Rule Creation Desmond Agee (Jan 31)
      • Re: Snort Rule Creation John G (Jan 31)
      • Re: Snort Rule Creation Joel Esler (jesler) (Jan 31)
      • Re: Snort Rule Creation John G (Jan 31)
  • Re: Snort Rule Creation Wei Chea Ang (Feb 01)
• Upgrading Snort Asad, Hafiz ul (Feb 01)
  • Re: Upgrading Snort Joel Esler (jesler) (Feb 01)
• New rule for detecting Netgear WNR2000v5 router leaks its serial number attempt rmkml (Feb 01)
  • Re: New rule for detecting Netgear WNR2000v5 router leaks its serial number attempt Joshua Williams (Feb 01)
• Snort Subscriber Rules Update 2017-02-02 Research (Feb 02)
• Snort++ Build 225 Available Now on Snort.org! Snort Releases (Feb 02)
• snort.conf: HOME_NET value for AWS EC2 instance Paul Li (Feb 03)
  • Re: snort.conf: HOME_NET value for AWS EC2 instance Al Lewis (allewi) (Feb 03)
    • Re: snort.conf: HOME_NET value for AWS EC2 instance Paul Li (Feb 03)
      • Re: snort.conf: HOME_NET value for AWS EC2 instance Al Lewis (allewi) (Feb 03)
      • How to tune snort3.0 to handle 10Gbps traffic? Maxim (Feb 03)
• http_inspect missing requests Felix Erlacher (Feb 03)
  • Re: http_inspect missing requests Russ (Feb 03)
    • Re: http_inspect missing requests Felix Erlacher (Feb 08)
      • Re: http_inspect missing requests James Lay (Feb 08)
      • Re: http_inspect missing requests Felix Erlacher (Feb 08)
      • Re: http_inspect missing requests James Lay (Feb 08)
      • Re: http_inspect missing requests Russ (Feb 08)
      • Message not available
      • Re: http_inspect missing requests Felix Erlacher (Feb 09)
      • Re: http_inspect missing requests Russ (Feb 09)
• Snort Alert Log Timestamps Jones, Christopher (Chris) (Maj) (Feb 03)
  • Re: Snort Alert Log Timestamps Marcin Dulak (Feb 03)
  • Re: Snort Alert Log Timestamps Balasubramaniam Natarajan (Feb 04)
• Please remove Scott Tolbert (Feb 03)
  • Re: Please remove Al Lewis (allewi) (Feb 03)
• Load alerts read from file to database Paul Li (Feb 03)
  • Re: Load alerts read from file to database Al Lewis (allewi) (Feb 04)
    • Re: Load alerts read from file to database Paul Li (Feb 06)
      • Re: Load alerts read from file to database Paul Li (Feb 06)
      • Re: Load alerts read from file to database Tural Aghazada (Feb 06)
      • Re: Load alerts read from file to database wkitty42 (Feb 07)
      • Re: Load alerts read from file to database Marcin Dulak (Feb 07)
      • Re: Load alerts read from file to database Joel Esler (jesler) (Feb 07)
• Query on Snort BPF setests setests (Feb 04)
• Snort 2.9.2 vs 2.9.9 Abdullah AL-Mutairy (Feb 05)
  • Re: Snort 2.9.2 vs 2.9.9 wkitty42 (Feb 05)
• Help!! hackthissite7979 (Feb 06)
  • Re: Help!! Luke Ager (Feb 06)
    • Re: Help!! hackthissite7979 (Feb 06)
      • Re: Help!! Antonis Papathanasiou (Feb 06)
• Lowmem issue James Lay (Feb 06)
  • Re: Lowmem issue Y M (Feb 06)
    • Re: Lowmem issue James Lay (Feb 06)
  • Re: Lowmem issue James Lay (Feb 13)
    • Re: Lowmem issue Michael Altizer (Feb 14)
      • Re: Lowmem issue James Lay (Feb 14)
• Snort and encapsulation Ana Serrano Mamolar (Feb 06)
  • Re: Snort and encapsulation Cynthia Leonard (cyleonar) (Feb 06)
    • Re: Snort and encapsulation Ana Serrano Mamolar (Feb 06)
      • Re: Snort and encapsulation Cynthia Leonard (cyleonar) (Feb 07)
      • Re: Snort and encapsulation Russ (Feb 07)
• Help - Rule writing hackthissite7979 (Feb 06)
  • Re: Help - Rule writing Luke Ager (Feb 07)
• Snort Subscriber Rules Update 2017-02-07 Research (Feb 07)
• Barnyard2 loads src IP and dst IP as digital in MySQL Paul Li (Feb 07)
  • Re: Barnyard2 loads src IP and dst IP as digital in MySQL wkitty42 (Feb 07)
  • Re: Barnyard2 loads src IP and dst IP as digital in MySQL Ian (Feb 08)
    • Re: Barnyard2 loads src IP and dst IP as digital in MySQL Maxim (Feb 08)
• Alert log Dawit Admassu (Feb 07)
  • Re: Alert log wkitty42 (Feb 07)
  • Re: Alert log Nikolai Shields (Feb 08)
    • Re: Alert log Al Lewis (allewi) (Feb 08)
• Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 08)
  • Re: Snort and GTP encapsulation info Joel Esler (jesler) (Feb 08)
    • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 09)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 13)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 13)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 13)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 13)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 13)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 13)
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Message not available
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 13)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 13)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 13)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Al Lewis (allewi) (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
      • Re: Snort and GTP encapsulation info Ana Serrano Mamolar (Feb 14)
• Issue with snort and Coldfusion sdesort (Feb 09)
• rules 41458 41459 41460 and 41461 John Ives (Feb 09)
  • Re: rules 41458 41459 41460 and 41461 Joel Esler (jesler) (Feb 09)
• byte_test and buffer cursor Y M (Feb 09)
  • Re: byte_test and buffer cursor Alex McDonnell (Feb 09)
    • Re: byte_test and buffer cursor Y M (Feb 09)
      • Re: byte_test and buffer cursor Alex McDonnell (Feb 09)
      • Re: byte_test and buffer cursor Y M (Feb 09)
• Snort Subscriber Rules Update 2017-02-09 Research (Feb 09)
• Andr.Trojan.Agent Y M (Feb 10)
  • Re: Andr.Trojan.Agent Tyler Montier (Feb 10)
• Win.Trojan.Kovtar Y M (Feb 10)
  • Re: Win.Trojan.Kovtar Tyler Montier (Feb 10)
• Win.Ransomware.Sage Y M (Feb 10)
  • Re: Win.Ransomware.Sage Tyler Montier (Feb 10)
• CVE-2015-2795 DotNetNuke Y M (Feb 10)
  • Re: CVE-2015-2795 DotNetNuke Tyler Montier (Feb 10)
• Win.Malware.Disttrack Y M (Feb 10)
  • Re: Win.Malware.Disttrack Tyler Montier (Feb 10)
    • Re: Win.Malware.Disttrack Y M (Feb 10)
  • <Possible follow-ups>
  • Win.Malware.Disttrack Y M (Feb 18)
    • Re: Win.Malware.Disttrack ILLG, FREDERICK C (Feb 19)
  • Re: Win.Malware.Disttrack Al Lewis (allewi) (Feb 19)
• Please remove from list... Fowler, Jason (US - Denver) (Feb 10)
• F5 BIG-IP Joshua Ochsankehl (Feb 10)
  • Re: F5 BIG-IP Alex McDonnell (Feb 10)
  • Re: F5 BIG-IP Y M (Feb 10)
    • Re: F5 BIG-IP Joshua Ochsankehl (Feb 10)
      • Re: F5 BIG-IP Y M (Feb 10)
      • Re: F5 BIG-IP Joshua Ox (Feb 10)
      • Re: F5 BIG-IP Geoffrey Serrao (Feb 10)
• Re: Snort-users Digest, Vol 129, Issue 18 Porncheewa PomHom (Feb 11)
  • Re: Snort-users Digest, Vol 129, Issue 18 wkitty42 (Feb 11)
• Snort No. of Alerts= Packets Asad, Hafiz ul (Feb 11)
• Unsubscribe replies - Why Michael Steele (Feb 11)
  • Re: Unsubscribe replies - Why wkitty42 (Feb 11)
    • Re: Unsubscribe replies - Why Al Lewis (allewi) (Feb 11)
• Snort error: daq.h: no such file Abdullah AL-Mutairy (Feb 11)
  • Re: Snort error: daq.h: no such file Alberto Colosi (Feb 11)
• Remove Me From Mailing list Martin Waldner (Feb 11)
  • Re: Remove Me From Mailing list Joel Esler (jesler) (Feb 11)
• Snort No. of Alerts= Packets ?? Asad, Hafiz ul (Feb 13)
  • Fw: Snort No. of Alerts= Packets ?? Asad, Hafiz ul (Feb 13)
    • Re: Fw: Snort No. of Alerts= Packets ?? Joel Esler (jesler) (Feb 13)
      • Re: Fw: Snort No. of Alerts= Packets ?? Asad, Hafiz ul (Feb 13)
• Snort Service not starting Bernhard Hopfenmüller (Feb 13)
• SID 39379 Norton Antivirus ASPack Charlie Dyer (Feb 13)
  • Re: SID 39379 Norton Antivirus ASPack Y M (Feb 13)
    • Re: SID 39379 Norton Antivirus ASPack Charlie Dyer (Feb 13)
      • Re: SID 39379 Norton Antivirus ASPack Y M (Feb 13)
      • Re: SID 39379 Norton Antivirus ASPack Alex McDonnell (Feb 13)
  • Re: SID 39379 Norton Antivirus ASPack Alex McDonnell (Feb 13)
• Emerging Threats and VRT Rules MD5 mismatch Richard Gaylord (Feb 13)
  • Re: Emerging Threats and VRT Rules MD5 mismatch Alex McDonnell (Feb 13)
  • Re: Emerging Threats and VRT Rules MD5 mismatch Y M (Feb 13)
• Win.Trojan.KopiLuwak Turla JS Y M (Feb 14)
  • Re: Win.Trojan.KopiLuwak Turla JS Tyler Montier (Feb 14)
• WD MyCloud authentication bypass Y M (Feb 14)
  • Re: WD MyCloud authentication bypass Joshua Williams (Feb 14)
• Teleopti WFM multiple vulnerabilities Y M (Feb 14)
  • Re: Teleopti WFM multiple vulnerabilities Tyler Montier (Feb 14)
• Re: Snort-users Digest, Vol 129, Issue 41 Michael Clark (Feb 14)
• Snort Subscriber Rules Update 2017-02-14 Research (Feb 14)
• Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 14)
  • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 14)
    • Re: Network Interface Issue in Ubuntu 16.04 Noah Dietrich (Feb 15)
  • <Possible follow-ups>
  • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 15)
    • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 15)
  • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 17)
    • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 17)
  • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 17)
    • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 17)
  • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 17)
    • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 18)
      • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 18)
      • Re: Network Interface Issue in Ubuntu 16.04 James Lay (Feb 18)
  • Re: Network Interface Issue in Ubuntu 16.04 tantioification . (Feb 18)
    • Re: Network Interface Issue in Ubuntu 16.04 Dwight Hill (Feb 18)
      • Re: Network Interface Issue in Ubuntu 16.04 Luke Ager (Feb 18)
• Osx.Trojan.MacDownloader Y M (Feb 14)
  • Re: Osx.Trojan.MacDownloader Tyler Montier (Feb 14)
• convert snort rules variables to their values Big Strong (Feb 15)
• Skype login rules - can these be used? Jim McKibben (Feb 15)
• snort3 - Segmentation fault when inline? Marcin Dulak (Feb 15)
  • Re: snort3 - Segmentation fault when inline? Carter Waxman (cwaxman) (Feb 15)
    • Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 15)
      • Re: snort3 - Segmentation fault when inline? Russ (Feb 18)
      • Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 18)
      • Re: snort3 - Segmentation fault when inline? Russ (Feb 19)
      • Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 19)
• tcp rules not working Michael J. Sheldon (Feb 15)
  • Re: tcp rules not working James Lay (Feb 15)
    • Re: tcp rules not working Michael J. Sheldon (Feb 16)
      • Re: tcp rules not working James Lay (Feb 16)
• Trojan-Downloader.Win32.Ratankba.A NWeights NWeights (Feb 15)
• Zombie detection rules Paul Li (Feb 15)
  • Re: Zombie detection rules Alberto Colosi (Feb 16)
    • Re: Zombie detection rules Luke Ager (Feb 16)
      • Re: Zombie detection rules Paul Li (Feb 16)
  • Re: Zombie detection rules Jones, Christopher (Chris) (Maj) (Feb 16)
  • <Possible follow-ups>
  • Re: Zombie detection rules Jack Pepper (Feb 16)
• GRE preprocessor and rules Ana Serrano Mamolar (Feb 16)
  • <Possible follow-ups>
  • Re: GRE preprocessor and rules Al Lewis (allewi) (Feb 16)
    • Re: GRE preprocessor and rules Ana Serrano Mamolar (Feb 17)
      • Re: GRE preprocessor and rules Al Lewis (allewi) (Feb 17)
      • Re: GRE preprocessor and rules Ana Serrano Mamolar (Feb 17)
• Snort Subscriber Rules Update 2017-02-16 Research (Feb 16)
• When will be multiple consecutive sessions be captured when tag is being used with sessions? Maxim (Feb 17)
  • Re: When will be multiple consecutive sessions be captured when tag is being used with sessions? Russ (Feb 17)
• Osx.Adware.IronCore Y M (Feb 17)
  • Re: Osx.Adware.IronCore Tyler Montier (Feb 17)
• Osx.Trojan.OceanLotus Y M (Feb 17)
  • Re: Osx.Trojan.OceanLotus Tyler Montier (Feb 17)
• Osx.Adware.Pirrit Y M (Feb 17)
  • Re: Osx.Adware.Pirrit James Lay (Feb 17)
  • Re: Osx.Adware.Pirrit Tyler Montier (Feb 17)
• libnghttp2 query for snort 2.9.9.0 setests setests (Feb 17)
  • Re: libnghttp2 query for snort 2.9.9.0 Y M (Feb 17)
    • Re: libnghttp2 query for snort 2.9.9.0 ATTAPHON PHAYAK (GABLE-GSEC-NSD-SRD) (Feb 17)
      • Re: libnghttp2 query for snort 2.9.9.0 Russ (Feb 17)
  • <Possible follow-ups>
  • Re: libnghttp2 query for snort 2.9.9.0 tantioification . (Feb 17)
    • Re: libnghttp2 query for snort 2.9.9.0 SILVANA QUINTERO (Feb 20)
• Crashlytics via Umbrella FP James Lay (Feb 18)
• Help Dawit Admassu (Feb 18)
  • Re: Help Joel Esler (jesler) (Feb 18)
• Andr.Trojan.Femas (ViperRAT) Y M (Feb 18)
  • Re: Andr.Trojan.Femas (ViperRAT) Tyler Montier (Feb 20)
• snort log formats: .log v.s .u2 Paul Li (Feb 18)
  • Re: snort log formats: .log v.s .u2 Marcin Dulak (Feb 19)
• Local Rule Error Jones, Christopher (Chris) (Maj) (Feb 19)
  • Re: Local Rule Error wkitty42 (Feb 19)
    • Re: Local Rule Error Jones, Christopher (Chris) (Maj) (Feb 19)
      • Re: Local Rule Error Jones, Christopher (Chris) (Maj) (Feb 19)
      • Re: Local Rule Error wkitty42 (Feb 19)
      • Re: Local Rule Error Jones, Christopher (Chris) (Maj) (Feb 19)
• Process Snort alerts on real time Nora Aron (Feb 20)
  • Re: Process Snort alerts on real time wkitty42 (Feb 20)
    • Re: Process Snort alerts on real time Ana Serrano Mamolar (Feb 21)
      • Re: Process Snort alerts on real time wkitty42 (Feb 21)
  • <Possible follow-ups>
  • Process Snort alerts on real time Nora Aron (Feb 21)
    • Re: Process Snort alerts on real time Giles Coochey (Feb 21)
    • Re: Process Snort alerts on real time Marcin Dulak (Feb 21)
  • Process Snort alerts on real time Nora Aron (Feb 21)
  • Process Snort alerts on real time Nora Aron (Feb 22)
    • Re: Process Snort alerts on real time James Lay (Feb 22)
    • Re: Process Snort alerts on real time Marcin Dulak (Feb 22)
      • Re: Process Snort alerts on real time Nora Aron (Feb 22)
      • Re: Process Snort alerts on real time Marcin Dulak (Feb 22)
• Load snort alert to database without barnyard2 Paul Li (Feb 20)
  • Re: Load snort alert to database without barnyard2 wkitty42 (Feb 20)
    • Re: Load snort alert to database without barnyard2 Marcin Dulak (Feb 20)
• Zyns iframer Y M (Feb 20)
  • Re: Zyns iframer Tyler Montier (Feb 20)
    • Re: Zyns iframer ILLG, FREDERICK C (Feb 22)
    • Re: Zyns iframer ILLG, FREDERICK C (Feb 22)
      • Re: Zyns iframer Al Lewis (allewi) (Feb 22)
      • Re: Zyns iframer ted.r.tesoro (Feb 22)
      • Message not available
      • Re: Zyns iframer Hamer, Cyprille (Feb 23)
• snort3: snort_defaults.lua pattern to include custom rules files and the meaning of ips Marcin Dulak (Feb 20)
  • Re: snort3: snort_defaults.lua pattern to include custom rules files and the meaning of ips Russ (Feb 21)
    • Re: snort3: snort_defaults.lua pattern to include custom rules files and the meaning of ips Marcin Dulak (Feb 21)
      • Re: snort3: snort_defaults.lua pattern to include custom rules files and the meaning of ips Russ (Feb 21)
• snort3: ERROR: Unable to find a Codec with data link type 228 Marcin Dulak (Feb 20)
  • Re: snort3: ERROR: Unable to find a Codec with data link type 228 Russ (Feb 21)
• Report PDF from Snort tantioification . (Feb 21)
• Snort Subscriber Rules Update 2017-02-21 Research (Feb 21)
• Barnyard2 launching problem Abdullah AL-Mutairy (Feb 21)
  • Re: Barnyard2 launching problem Marcin Dulak (Feb 21)
    • Re: Barnyard2 launching problem Abdullah AL-Mutairy (Feb 22)
    • Re: Barnyard2 launching problem Abdullah AL-Mutairy (Feb 22)
• Snort read file to generate u2 logs. Paul Li (Feb 21)
  • Re: Snort read file to generate u2 logs. Al Lewis (allewi) (Feb 21)
    • Re: Snort read file to generate u2 logs. Paul Li (Feb 21)
    • Re: Snort read file to generate u2 logs. Paul Li (Feb 21)
      • Re: Snort read file to generate u2 logs. Paul Li (Feb 21)
      • Re: Snort read file to generate u2 logs. Al Lewis (allewi) (Feb 22)
• content-based rules not detected praveen kumar (Feb 22)
  • Re: content-based rules not detected Bhargava Jandhyala (bjandhya) (Feb 22)
• Unsubscribe snort mailing Sang Nguyen Van (Feb 22)
  • Re: Unsubscribe snort mailing Joel Esler (jesler) (Feb 22)
• Win.Trojan.Isg Y M (Feb 22)
  • Re: Win.Trojan.Isg Tyler Montier (Feb 22)
    • Re: Win.Trojan.Isg Y M (Feb 23)
• incremental download of snort rules greg . mcnathansonsnuf003 (Feb 22)
  • Re: incremental download of snort rules Joel Esler (jesler) (Feb 23)
    • Re: incremental download of snort rules James Lay (Feb 25)
  • <Possible follow-ups>
  • incremental download of snort rules Nora Aron (Feb 23)
    • Re: incremental download of snort rules Marcin Dulak (Feb 23)
      • Re: incremental download of snort rules Nora Aron (Feb 23)
      • Re: incremental download of snort rules Joel Esler (jesler) (Feb 23)
• changing HOME_NET variable without reloading completely greg . mcnathansonsnuf003 (Feb 22)
  • Re: changing HOME_NET variable without reloading completely Jack Pepper (Feb 22)
• to suppress my account Manh-Chau NGUYEN (Feb 23)
• packet I/O totals Felix Erlacher (Feb 23)
  • Re: packet I/O totals Michael Altizer (Feb 26)
• Snort Subscriber Rules Update 2017-02-23 Research (Feb 23)
• How to convert snort packets data in the mysql database in to sessions Asad, Hafiz ul (Feb 24)
• Snort Subscriber Rules Update 2017-02-24 Research (Feb 24)
• snort3: problem with http_inspect Marcin Dulak (Feb 25)
  • Re: snort3: problem with http_inspect Al Lewis (allewi) (Feb 25)
    • Re: snort3: problem with http_inspect Marcin Dulak (Feb 25)
      • Re: snort3: problem with http_inspect Al Lewis (allewi) (Feb 25)
      • Re: snort3: problem with http_inspect Marcin Dulak (Feb 26)
      • Re: snort3: problem with http_inspect Marcin Dulak (Feb 26)
      • Re: snort3: problem with http_inspect Al Lewis (allewi) (Feb 26)
      • Re: snort3: problem with http_inspect Marcin Dulak (Feb 26)
      • Re: snort3: problem with http_inspect Al Lewis (allewi) (Feb 26)
  • Re: snort3: problem with http_inspect Tom Peters (thopeter) (Feb 27)
• Snort Perfomance Metric Tools yudhi ardiyanto (Feb 25)
  • Re: Snort Perfomance Metric Tools Joel Esler (jesler) (Feb 27)
• Snort not seeing my local rules Dawit Admassu (Feb 26)
  • Re: Snort not seeing my local rules wkitty42 (Feb 26)
    • Re: Snort not seeing my local rules wkitty42 (Feb 26)
• Osx.Trojan.Xagent Y M (Feb 27)
  • Re: Osx.Trojan.Xagent Tyler Montier (Feb 28)
• Barnyard2 working properly? Asad, Hafiz ul (Feb 28)
• Snort Subscriber Rules Update 2017-02-28 Research (Feb 28)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2017-02-28 Research (Feb 28)
• Barnyard2 and snort mysql databse Asad, Hafiz ul (Feb 28)
  • Re: Barnyard2 and snort mysql databse wkitty42 (Feb 28)
    • Re: Barnyard2 and snort mysql databse Asad, Hafiz ul (Mar 02)
• Spam mail Ikenna Chiadikaobi (Feb 28)
  • Re: Spam mail wkitty42 (Mar 01)
• snort on pfsense Puzant Chouljian (Feb 28)
  • Re: snort on pfsense Marcin Dulak (Mar 01)
    • Re: snort on pfsense Puzant Chouljian (Mar 01)
• executable documentation of a snort++ setup in the spirit of literate programming Marcin Dulak (Feb 28)
• Log packets before the packet that triggered a rule oleg gv (Mar 01)
• Snort Blog: EOL for Snort 2.9.7.6 is approaching! Joel Esler (jesler) (Mar 01)
  • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Dmitry Melekhov (Mar 01)
    • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Marcin Dulak (Mar 01)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Marcin Dulak (Mar 01)
    • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Joel Esler (jesler) (Mar 01)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Marcin Dulak (Mar 01)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Dmitry Melekhov (Mar 01)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Marcin Dulak (Mar 02)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Dmitry Melekhov (Mar 02)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Dmitry Melekhov (Mar 01)
      • Re: Snort Blog: EOL for Snort 2.9.7.6 is approaching! Dmitry Melekhov (Mar 01)
• Snort 2.9.9.0 miss syslog messages Eric Deherve (Mar 02)
  • Re: Snort 2.9.9.0 miss syslog messages Marcin Dulak (Mar 02)
    • Re: Snort 2.9.9.0 miss syslog messages James Lay (Mar 02)
• Snort Subscriber Rules Update 2017-03-02 Research (Mar 02)
• Snort 3.0 Alpha 4 has been released! Snort Releases (Mar 02)
• Unsubscribe request failure franki ho (Mar 02)
  • Re: Unsubscribe request failure Pete Purchon (Mar 03)
    • Re: Unsubscribe request failure Joel Esler (jesler) (Mar 03)
      • Re: Unsubscribe request failure Joel Esler (jesler) (Mar 03)
• Endace Dag Card w/ Snort Alvin DeJesus (Mar 02)
  • Re: Endace Dag Card w/ Snort Jason Ish (Mar 16)
• Barnyard2 sql insert failure Kaon Thana (Mar 03)
• snort3: problem with metadata: service http in sample.rules Marcin Dulak (Mar 04)
  • Re: snort3: problem with metadata: service http in sample.rules Al Lewis (allewi) (Mar 05)
  • Re: snort3: problem with metadata: service http in sample.rules Russ (Mar 05)
    • Re: snort3: problem with metadata: service http in sample.rules Marcin Dulak (Mar 05)
      • Re: snort3: problem with metadata: service http in sample.rules Russ (Mar 06)
• Backdoor OSCelestial RAT Y M (Mar 06)
  • Re: Backdoor OSCelestial RAT Tyler Montier (Mar 06)
• Snort Subscriber Rules Update 2017-03-07 Research (Mar 07)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2017-03-07 Research (Mar 08)
• Win.Backdoor.StoneDrill Y M (Mar 07)
  • Re: Win.Backdoor.StoneDrill Tyler Montier (Mar 08)
• INDICATOR-COMPROMISE DNS request for known malware domain icanhazip.com (1:33215:1) John Tan (Mar 08)
• Win.Trojan.NeutrinoBot Y M (Mar 08)
  • Re: Win.Trojan.NeutrinoBot Tyler Montier (Mar 09)
• banrnyard2 always look in /var/log/snort Asad, Hafiz ul (Mar 09)
  • <Possible follow-ups>
  • Re: banrnyard2 always look in /var/log/snort Al Lewis (allewi) (Mar 09)
    • Re: banrnyard2 always look in /var/log/snort Asad, Hafiz ul (Mar 09)
      • Re: banrnyard2 always look in /var/log/snort Asad, Hafiz ul (Mar 10)
• Snort Subscriber Rules Update 2017-03-09 Research (Mar 09)
  • <Possible follow-ups>
  • Snort Subscriber Rules Update 2017-03-09 Research (Mar 09)
• Pulledpork and multiple reputation IP blacklists Stanford Prescott (Mar 10)
• pulledpork and colon within in msg-text Claus Regelmann (Mar 10)
  • Re: pulledpork and colon within in msg-text Joel Esler (jesler) (Mar 10)
• dataset Mojtaba Haghighipour (Mar 11)
  • Re: dataset Marcin Dulak (Mar 13)
• BASE 1.4.5 Non-Operational on Fedora 25 m-one (Mar 13)
  • Re: BASE 1.4.5 Non-Operational on Fedora 25 Marcin Dulak (Mar 13)
    • Snort Alert Processing Survey m-one (Mar 14)
      • Re: Snort Alert Processing Survey James Lay (Mar 14)
      • Re: Snort Alert Processing Survey wkitty42 (Mar 15)
      • Re: Snort Alert Processing Survey Jack Pepper (Mar 15)
      • Re: Snort Alert Processing Survey Marcin Dulak (Mar 15)
      • Re: Snort Alert Processing Survey eagleliujin () 163 com (Mar 16)
      • Re: Snort Alert Processing Survey Gregory (Greg) Nowicki (Mar 21)
      • Snort Bridge in Snort-IPS-Tutorial.pdf B (Mar 26)
      • Bridging issue inline B (Mar 28)
      • Re: Bridging issue inline wkitty42 (Mar 28)
      • Message not available
      • Message not available
      • Re: Bridging issue inline B (Mar 29)
      • Re: Snort Alert Processing Survey Jim Hranicky (Mar 27)
• Snort Subscriber Rules Update 2017-03-14 Research (Mar 14)
• Problem with snortrules unpacking. Miikkael Puikkonen (Mar 15)
  • Re: Problem with snortrules unpacking. Joel Esler (jesler) (Mar 15)
• Snort 3 rules not loading Stephen Stark (Mar 15)
  • Re: Snort 3 rules not loading Russ (Mar 16)
    • Re: Snort 3 rules not loading Stephen Stark (Mar 16)
• EDNS-Client-Subnet ECS Da Pozzo Matteo (Mar 16)
  • Re: EDNS-Client-Subnet ECS Russ (Mar 17)
• Reputation blacklists and snort_control Stanford Prescott (Mar 16)
  • Re: Reputation blacklists and snort_control Joel Esler (jesler) (Mar 16)
    • Re: Reputation blacklists and snort_control Stanford Prescott (Mar 16)
• Snort Subscriber Rules Update 2017-03-16 Research (Mar 16)
• BROWSER-OTHER TRUFFLEHUNTER SFVRT-1024 attack attempt (3:42014:1) alerts Charlie Dyer (Mar 17)
  • Re: BROWSER-OTHER TRUFFLEHUNTER SFVRT-1024 attack attempt (3:42014:1) alerts Charlie Dyer (Mar 17)
    • Re: BROWSER-OTHER TRUFFLEHUNTER SFVRT-1024 attack attempt (3:42014:1) alerts Joel Esler (jesler) (Mar 17)
• Re: Snort-devel Digest, Vol 128, Issue 1 Da Pozzo Matteo (Mar 17)
  • Re: Snort-devel Digest, Vol 128, Issue 1 Russ (Mar 17)
• process .gzip pcaps using snort Angelos Marnerides (Mar 20)
• Fwd: maldet alert from TCP-IDS Scott Spangler (Mar 20)
  • Re: maldet alert from TCP-IDS Joel Esler (jesler) (Mar 20)
    • Re: maldet alert from TCP-IDS James Lay (Mar 20)
  • Re: Fwd: maldet alert from TCP-IDS Geoffrey Serrao (Mar 20)
    • Re: Fwd: maldet alert from TCP-IDS Geoffrey Serrao (Mar 20)
• Can't get Snort to run on Win2008 Matt H (Mar 20)
  • Re: Can't get Snort to run on Win2008 Ed Borgoyn (eborgoyn) (Mar 20)
• Abnormal JPEG file detection rule demantos(Cho Hoon) (Mar 20)
  • Re: Abnormal JPEG file detection rule Jim McKibben (Mar 21)
    • Re: Abnormal JPEG file detection rule rmkml (Mar 21)
• Snort Subscriber Rules Update 2017-03-21 Research (Mar 21)
  • FW: Snort Subscriber Rules Update 2017-03-21 ted.r.tesoro (Mar 21)
    • Message not available
      • Re: FW: Snort Subscriber Rules Update 2017-03-21 Hamer, Cyprille (Mar 21)
    • Re: FW: Snort Subscriber Rules Update 2017-03-21 ILLG, FREDERICK C (Mar 21)
      • Re: FW: Snort Subscriber Rules Update 2017-03-21 lists (Mar 21)
      • Message not available
      • Re: FW: Snort Subscriber Rules Update 2017-03-21 Hamer, Cyprille (Mar 21)
      • Re: Snort Subscriber Rules Update 2017-03-21 Joel Esler (jesler) (Mar 21)
• Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Robert Kudyba (Mar 21)
  • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Stanford Prescott (Mar 22)
  • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Stanford Prescott (Mar 22)
    • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Robert Kudyba (Mar 22)
      • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Stanford Prescott (Mar 22)
      • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Robert Kudyba (Mar 22)
      • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Stanford Prescott (Mar 22)
      • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Robert Kudyba (Mar 27)
      • Re: Unable to connect to UNIX socket at SNORT.sock: Connection refused with Fedora RPM Stanford Prescott (Mar 28)
• Using snort -r for default detection against 1000s of PCAPs Jeremy Gin (Mar 22)
  • Re: Using snort -r for default detection against 1000s of PCAPs Al Lewis (allewi) (Mar 22)
  • Re: Using snort -r for default detection against 1000s of PCAPs Victor Roemer (Mar 22)
• Snort dont pass traffic tantioification . (Mar 22)
  • Re: Snort dont pass traffic Al Lewis (allewi) (Mar 22)
    • Re: Snort dont pass traffic tantioification . (Mar 22)
      • Re: Snort dont pass traffic Al Lewis (allewi) (Mar 23)
      • Re: Snort dont pass traffic tantioification . (Mar 26)
• Snort Subscriber Rules Update 2017-03-23 Research (Mar 23)
• Offer sig for detect Malformed RTF document rmkml (Mar 23)
  • Re: Offer sig for detect Malformed RTF document Tyler Montier (Mar 23)
• snort performance Mojtaba Haghighipour (Mar 24)
• re-writing snortreport DB_mysql.php for php 7 using PDO syntax Robert Kudyba (Mar 24)
• where is the default location of snort conf file ‫moon sun‬ ‫ (Mar 24)
  • Re: where is the default location of snort conf file Al Lewis (allewi) (Mar 25)
• Snort to process multiple gzipped pcaps? Angelos Marnerides (Mar 27)
• Offer sig for detect IISv6 WebDAV If header overflow rmkml (Mar 27)
  • Re: Offer sig for detect IISv6 WebDAV If header overflow Tyler Montier (Mar 27)
• Snort Subscriber Rules Update 2017-03-28 Research (Mar 28)
• How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 28)
  • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 29)
    • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) wkitty42 (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) James Lay (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Jack Pepper (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) wkitty42 (Mar 29)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 30)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Ward Sladek (Mar 30)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 30)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) James Lay (Mar 30)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) Stanford Prescott (Mar 30)
      • Re: How to run multiple instances of snort inline and daq and multiple interfaces (firewall) James Lay (Mar 30)
• Bridging issue inline B (Mar 28)
  • Re: Bridging issue inline Al Lewis (allewi) (Mar 29)
• Snort rule to detect nmap OS scan Solomon Melekwe (Mar 29)
  • Re: Snort rule to detect nmap OS scan Alberto Colosi (Mar 29)
• running snort bobby (Mar 29)
  • Re: running snort Russ (Mar 29)
    • Re: running snort Dan Fulop (Mar 29)
      • Re: running snort Al Lewis (allewi) (Mar 29)
      • Re: running snort Luke Ager (Mar 29)
      • Re: running snort Joel Esler (jesler) (Mar 29)
• Snort Subscriber Rules Update 2017-03-29 Research (Mar 29)
• I do not want to receive emails from your subscribed users Amarilis Almengor (Mar 29)
  • Re: I do not want to receive emails from your subscribed users Joel Esler (jesler) (Mar 30)
• Speeding up Snort for Pcap file more than 800GB Asad, Hafiz ul (Mar 30)
• 答复: Snort-users Digest, Vol 130, Issue 22 刘长松 (Mar 30)
  • Re: 答复: Snort-users Digest, Vol 130, Issue 22 Joel Esler (jesler) (Mar 30)
  • Re: [Snort-users] 答复: Snort-users Digest, Vol 130, Issue 22 Martin Tremblay (Mar 30)
• How do I run multiple instances of snort on each firewall network interface? Stanford Prescott (Mar 31)
  • Re: How do I run multiple instances of snort on each firewall network interface? wkitty42 (Mar 31)
    • Re: How do I run multiple instances of snort on each firewall network interface? Stanford Prescott (Mar 31)
      • Re: How do I run multiple instances of snort on each firewall network interface? wkitty42 (Mar 31)

Previous period

Next period