Snort: by date

618 messages starting Apr 01 18 and ending Jun 30 18
Date index | Thread index | Author index


Sunday, 01 April

-V 2.9.7.0 GRE rules Sean Fingers via Snort-sigs
Blocking Psiphon Syed Anas via Snort-sigs
Re: [Snort-openappid] Snort Rule Jaco Toledo
Re: -V 2.9.7.0 GRE rules Y M via Snort-sigs
Re: Blocking Psiphon Y M via Snort-sigs

Monday, 02 April

Re: [PATCH] daq: fix build against the musl C library Sergio Prado
Re: [PATCH] snort: fix cross compilation errors Sergio Prado
Re: [PATCH] daq: fix build against the musl C library Joel Esler (jesler) via Snort-devel
Re: [PATCH] snort: fix cross compilation errors Joel Esler (jesler) via Snort-devel
Re: snort with daq inline mode problem Joel Esler (jesler) via Snort-users
Re: snort rule to detect HTTP POST data Joel Esler (jesler) via Snort-users

Tuesday, 03 April

Odp: Re: snort with daq inline mode problem pawelsw1
Re: snort rule to detect HTTP POST data Al Lewis (allewi) via Snort-users
Win.Trojan.Bandios Y M via Snort-sigs
Osx.Trojan.Coldroot Y M via Snort-sigs
Win.Torjan.NeutrinoPOS variant Y M via Snort-sigs
CVE-2018-7171 and CVE-2018-9148 Y M via Snort-sigs
Re: Win.Trojan.Bandios Phillip Lee
Re: Osx.Trojan.Coldroot Phillip Lee
Re: Win.Torjan.NeutrinoPOS variant Phillip Lee
Re: CVE-2018-7171 and CVE-2018-9148 Phillip Lee
Snort Subscriber Rules Update 2018-04-03 Research
unsubscribe Shah, Neeraj A. (IntlCtr) via Snort-users
Portscan/portswep report rugg . vale
Fwd: unsubscribe Alejandro Aguilar
Re: Fwd: unsubscribe billroberts--- via Snort-users
Re: Fwd: unsubscribe Al Lewis (allewi) via Snort-users
Re: unsubscribe Al Lewis (allewi) via Snort-users
Re: Fwd: unsubscribe Martin castellanos via Snort-users
Re: Fwd: unsubscribe Al Lewis (allewi) via Snort-users
Re: unsubscribe Bill via Snort-users
Re: Fwd: unsubscribe Kelly Alger
unsubscribe Kashif Tahir
Re: unsubscribe Kelly Alger
Re: unsubscribe Alimukhtar Aliyev via Snort-users
Re: Fwd: unsubscribe CHARPY Bastien
Re: Fwd: unsubscribe Dz Gmail via Snort-users
Re: Fwd: unsubscribe Thomas McCourt (tmccourt) via Snort-users
Re: snort rule to detect HTTP POST data Neeraj Shah
Re: unsubscribe William Cheung
Re: unsubscribe Ahmed Ismail via Snort-users

Wednesday, 04 April

Re: [EXTERNAL] Re: unsubscribe Zunyan Yang via Snort-users
(no subject) Javier Salazar via Snort-users
Re: [EXTERNAL] Re: unsubscribe Obille, Richard
Re: [SUSPICIOUS] Re: [EXTERNAL] Re: unsubscribe Joel Esler (jesler) via Snort-users
Re: (no subject) Joel Esler (jesler) via Snort-users
Re: [EXTERNAL] Re: unsubscribe mokamaco--- via Snort-users
Re: (no subject) wkitty42
Re: [SUSPICIOUS] Re: [EXTERNAL] Re: unsubscribe Vaidehi Kakodkar via Snort-users
Re: [EXTERNAL] Re: unsubscribe Johan Bernhardsson via Snort-users
Re: (no subject) Thomas McCourt (tmccourt) via Snort-users
Re: (no subject) Mac Moraniec
Re: (no subject) Joel Esler (jesler) via Snort-users
Re: (no subject) Sean Duchstein via Snort-users
Re: (no subject) Joel Esler (jesler) via Snort-users
Re: (no subject) Victor Roemer via Snort-users
Re: (no subject) Johan Bernhardsson via Snort-users
Re: (no subject) Kelly Alger
Re: unsubscribe Alimukhtar Aliyev via Snort-users
Unsubscribing from the list Joel Esler (jesler) via Snort-users
Re: (no subject) Ian Caauwe
Re: (no subject) Joel Esler (jesler) via Snort-users
Re: [PATCH] daq: fix build against the musl C library Sergio Prado
Re: [PATCH] snort: fix cross compilation errors Sergio Prado
Re: (no subject) Jason Simsay via Snort-users
Re: (no subject) Joel Esler (jesler) via Snort-users

Thursday, 05 April

Submission for IOCs James via Snort-sigs
Re: Submission for IOCs Nick Randolph
Re: Submission for IOCs James via Snort-sigs
Troubles in paradise angel romero esquivel via Snort-users
Re: Troubles in paradise Jason Hellenthal
Re: Troubles in paradise Marcin Dulak via Snort-users
Snort Subscriber Rules Update 2018-04-05 Research
Re: Troubles in paradise epoupee () ac-rennes fr
Re: Troubles in paradise wkitty42
Re: Troubles in paradise Alberto Colosi via Snort-users

Friday, 06 April

Re: Troubles in paradise wkitty42
Re: Troubles in paradise Alberto Colosi via Snort-users
Snort Blog: Requiring at least TLS 1.2 for Snort.org Joel Esler (jesler) via Snort-devel
Question fjrohlf via Snort-users
Re: Question Alberto Colosi via Snort-users
Re: Question F. James Rohlf via Snort-users
Snort install on windows CJ Lorenz via Snort-users
Re: Snort install on windows Lee Brown

Saturday, 07 April

mysql support is not compiled into this build of snort 2014/2015 - Nsabimana Thierry
Re: mysql support is not compiled into this build of snort Al Lewis (allewi) via Snort-users
Re: mysql support is not compiled into this build of snort wkitty42
Re: mysql support is not compiled into this build of snort Diamond Foyer
Re: mysql support is not compiled into this build of snort Marcin Dulak via Snort-users
Re: mysql support is not compiled into this build of snort wkitty42
Re: mysql support is not compiled into this build of snort Joel Esler (jesler) via Snort-users

Sunday, 08 April

Re: Submission for IOCs Ronny Vaningh
Re: Submission for IOCs Mkultra via Snort-sigs
Re: Submission for IOCs Antonis
Re: Submission for IOCs David Sanders via Snort-sigs
Final Year Project Custom MySQL Database Server Rules and Classifications Review Jack Eastwood via Snort-devel
Re: Question Alberto Colosi via Snort-users
Re: mysql support is not compiled into this build of snort Jim Campbell
Re: mysql support is not compiled into this build of snort wkitty42
Re: mysql support is not compiled into this build of snort 2014/2015 - Nsabimana Thierry
UDP capture packet issue rugg . vale
Re: Submission for IOCs James via Snort-sigs

Monday, 09 April

Re: UDP capture packet issue Al Lewis (allewi) via Snort-users
Re: UDP capture packet issue wkitty42
Re: UDP capture packet issue rugg . vale
Re: UDP capture packet issue Al Lewis (allewi) via Snort-users
Re: Snort install on windows Lee Brown
Re: UDP capture packet issue rugg . vale
Re: UDP capture packet issue James Lay
Re: UDP capture packet issue Al Lewis (allewi) via Snort-users

Tuesday, 10 April

Re: Osx.Trojan.Coldroot Phillip Lee
Snort Subscriber Rules Update 2018-04-10 Research
Re: Final Year Project Custom MySQL Database Server Rules and Classifications Review DFIRob via Snort-devel

Wednesday, 11 April

Re: unifed2 log conf file via Snort-devel

Thursday, 12 April

Snort Subscriber Rules Update 2018-04-12 Research

Friday, 13 April

Re: [Snort-devel] Final Year Project Custom MySQL Database Server Rules and Classifications Review Mkultra via Snort-users
Re: [Snort-devel] Final Year Project Custom MySQL Database Server Rules and Classifications Review DFIRob via Snort-users
Re: Snort-sigs Digest, Vol 10, Issue 20 Briana Magana via Snort-sigs
Re: Snort-sigs Digest, Vol 10, Issue 6 Briana Magana via Snort-sigs
Re: Snort-sigs Digest, Vol 10, Issue 20 Joel Esler (jesler) via Snort-sigs

Sunday, 15 April

Microsoft Vulnerability CVE-2018-0950‏ אחיעד גלרנטר via Snort-sigs

Monday, 16 April

FWD: alert vs drop Андрей Пегов via Snort-devel

Tuesday, 17 April

Snort Subscriber Rules Update 2018-04-17 Research

Wednesday, 18 April

Updating sid-msg.map after adding custom rule Black Lion via Snort-users
Microsoft Vulnerability CVE-2018-0950 Achiad Gelerenter
alert vs drop Андрей Пегов via Snort-users
snort not working Mohammad Arif via Snort-users
Buidling IDS / IPS on existing Elasticsearch cluster using Snort Shivkumar Mallesappa via Snort-users

Thursday, 19 April

Snort Subscriber Rules Update 2018-04-19 Research

Saturday, 21 April

Error when analyzing pcap file Mokshay Gungah via Snort-users
Re: Buidling IDS / IPS on existing Elasticsearch cluster using Snort Y M via Snort-users
Re: snort not working Y M via Snort-users
Re: Updating sid-msg.map after adding custom rule Y M via Snort-users
Re: alert vs drop Y M via Snort-users

Sunday, 22 April

snort-2.9.11.1 mysql schema missing? 2014/2015 - Nsabimana Thierry

Monday, 23 April

Re: snort-2.9.11.1 mysql schema missing? Joel Esler (jesler) via Snort-users
Re: snort-2.9.11.1 mysql schema missing? wkitty42
Re: snort-2.9.11.1 mysql schema missing? Y M via Snort-users
TcpLen Rule Option Ibrahim Ahmed via Snort-users

Tuesday, 24 April

End of year report stephane Eteme via Snort-users
Re: snort-2.9.11.1 mysql schema missing? 2014/2015 - Nsabimana Thierry
Snort Subscriber Rules Update 2018-04-24 Research

Wednesday, 25 April

Re: End of year report Al Lewis (allewi) via Snort-users
Re: End of year report wkitty42
Re: snort-2.9.11.1 mysql schema missing? Joel Esler (jesler) via Snort-users
Requiring at least TLS 1.2 for Rules Updates Hassan Alsaffar via Snort-users
Re: alert vs drop Андрей Пегов via Snort-users
Re: Updating sid-msg.map after adding custom rule Black Lion via Snort-users
Re: Updating sid-msg.map after adding custom rule Black Lion via Snort-users
Re: Requiring at least TLS 1.2 for Rules Updates Joel Esler (jesler) via Snort-users
Moderation Joel Esler (jesler) via Snort-users
Re: Moderation Lucas K. Smith via Snort-users

Thursday, 26 April

[HITB-Announce] HITBGSEC2018 CFP - Final Call Hafez Kamal
Snort Subscriber Rules Update 2018-04-26 Research

Friday, 27 April

Zebrocy family sigs Y M via Snort-sigs
Reflow JS Backdoor sigs Y M via Snort-sigs
Win.Trojan.Proxysvc Y M via Snort-sigs
FakeUpdates campaign sig Y M via Snort-sigs
Win.Trojan.Kwampirs Y M via Snort-sigs
Ads data leaks sigs Y M via Snort-sigs
CVE-2018-1143, CVE-2018-1144, CVE-2018-1146 Y M via Snort-sigs
Re: Zebrocy family sigs Phillip Lee
CVE-2018-10173 Y M via Snort-sigs
Re: Win.Trojan.Proxysvc Phillip Lee
Re: FakeUpdates campaign sig Phillip Lee
Re: Win.Trojan.Kwampirs Phillip Lee
Re: CVE-2018-10173 James Lay
Re: Ads data leaks sigs Phillip Lee
Re: CVE-2018-1143, CVE-2018-1144, CVE-2018-1146 Phillip Lee
Re: CVE-2018-10173 Phillip Lee
Multiple recon sigs Y M via Snort-sigs
Re: CVE-2018-1143, CVE-2018-1144, CVE-2018-1146 David
Re: CVE-2018-1143, CVE-2018-1144, CVE-2018-1146 Y M via Snort-sigs

Monday, 30 April

tls1.3 support for 'ssl_version' and DTLS Joshua Kinard via Snort-devel
Re: tls1.3 support for 'ssl_version' and DTLS Russ via Snort-devel
Configuring the acidbase GUI Patrick Biyaga via Snort-users
Re: Configuring the acidbase GUI Joel Esler (jesler) via Snort-users
Re: tls1.3 support for 'ssl_version' and DTLS Joshua Kinard via Snort-devel

Tuesday, 01 May

Snort Subscriber Rules Update 2018-05-01 Research
Osx.Trojan.OceanLotus variant Y M via Snort-sigs
Win.Trojan.COMRat Y M via Snort-sigs
Win.Trojan.Qarallax (QRAT) Y M via Snort-sigs
Win.Ransomware.Satan Y M via Snort-sigs
CVE-2018-8733, CVE-2018-8734, CVE-2018-8735 Y M via Snort-sigs
Re: Osx.Trojan.OceanLotus variant Phillip Lee
Re: Win.Trojan.COMRat Phillip Lee
Re: Win.Trojan.Qarallax (QRAT) Phillip Lee
Re: Win.Ransomware.Satan Phillip Lee
Re: CVE-2018-8733, CVE-2018-8734, CVE-2018-8735 Phillip Lee
Win.Trojan.RedLeaves variant Y M via Snort-sigs
Win.Trojan.DoubleAgent Y M via Snort-sigs
all good Víctor Vásquez via Snort-users

Wednesday, 02 May

Unsubscribe Marc Cozzi via Snort-users
Re: Win.Trojan.RedLeaves variant Phillip Lee
Re: Win.Trojan.DoubleAgent Phillip Lee
Pulledpork error at blacklist download David Corsello
Re: Pulledpork error at blacklist download David Corsello
Re: Pulledpork error at blacklist download Joel Esler (jesler) via Snort-users
Discard Packet rugg . vale
Re: Unsubscribe Mkultra via Snort-users

Thursday, 03 May

Snort Subscriber Rules Update 2018-05-03 Research

Monday, 07 May

Andr.Trojan.ZooPark family Y M via Snort-sigs
Kubernetes kubelet API Y M via Snort-sigs
Win.Trojan.Dunihi Y M via Snort-sigs
Re: Andr.Trojan.ZooPark family Phillip Lee
Re: Kubernetes kubelet API Phillip Lee
Re: Win.Trojan.Dunihi Phillip Lee

Tuesday, 08 May

Re: Win.Trojan.Dunihi Ernest Johnson via Snort-sigs
Snort Subscriber Rules Update 2018-05-08 Research
Re: Win.Torjan.NeutrinoPOS variant Ernest Johnson via Snort-sigs
Re: Win.Trojan.Dunihi Joel Esler (jesler) via Snort-sigs
Problem with unified2 files joseph m via Snort-users
Re: Win.Trojan.Dunihi Ernest Johnson via Snort-sigs
Re: Win.Trojan.Dunihi Joel Esler (jesler) via Snort-sigs

Wednesday, 09 May

backdoored ssh-decorator package Y M via Snort-sigs

Thursday, 10 May

Re: backdoored ssh-decorator package wkitty42
Re: backdoored ssh-decorator package Phillip Lee
Re: backdoored ssh-decorator package Y M via Snort-sigs
Re: backdoored ssh-decorator package Y M via Snort-sigs
Snort Subscriber Rules Update 2018-05-10 Research
Re: backdoored ssh-decorator package wkitty42

Monday, 14 May

Re: Problem with unified2 files wkitty42
where are stored the snort 3 logs bz Os via Snort-users

Tuesday, 15 May

Classtype Map Error Sujit Ghosal via Snort-users
Re: Problem with unified2 files joseph m via Snort-users
Snort IDS doesn't log the alerts in the path /var/log/snort 2014/2015 - Nsabimana Thierry
Snort Subscriber Rules Update 2018-05-15 Research

Wednesday, 16 May

Re: Snort IDS doesn't log the alerts in the path /var/log/snort Al Lewis (allewi) via Snort-users
Re: Classtype Map Error Al Lewis (allewi) via Snort-users
Could not initialize protocol session memory pool My Nguyen via Snort-users
Decoder rule: who to set traffic that must be inspected ? oleg gv via Snort-users
Fwd: Decoder rule: how to set traffic that must be inspected ? oleg gv via Snort-users
Rule Needed Beshoy Atef via Snort-sigs
Re: Rule Needed Alex McDonnell
Re: Rule Needed Beshoy Atef via Snort-sigs
Re: Rule Needed Beshoy Atef via Snort-sigs
Re: Rule Needed Phillip Lee

Thursday, 17 May

Snort Subscriber Rules Update 2018-05-17 Research
Re: Ads data leaks sigs Phillip Lee
Re: CVE-2018-10173 Phillip Lee
Re: Classtype Map Error Sujit Ghosal via Snort-users
Decoder rule: how to set traffic that must be inspected ? oleg gv via Snort-users
Re: Rule Needed Beshoy Atef via Snort-sigs
How to debugging on Snort? İzzettin Erdem via Snort-devel
Re: How to debugging on Snort? Al Lewis (allewi) via Snort-devel
Re: CVE-2018-10173 James via Snort-sigs
Re: How to debugging on Snort? James via Snort-devel
Re: How to debugging on Snort? Russ via Snort-devel

Friday, 18 May

Re: Problem with unified2 files joseph m via Snort-users
ID number in pcap files (Darpa 99) Ibrahim Ahmed via Snort-users
Snort 2.9.11.1 compilation error with openappid (make) Tarek Ben Soltane via Snort-users
Logs serg_sctemp serg_sctemp via Snort-users
Re: Classtype Map Error wkitty42
Updating snort rules via pulledpork, failing bobby via Snort-users
Re: How to debugging on Snort? Joel Esler (jesler) via Snort-devel

Saturday, 19 May

Re: ID number in pcap files (Darpa 99) Al Lewis (allewi) via Snort-users
Re: ID number in pcap files (Darpa 99) wkitty42
Re: Updating snort rules via pulledpork, failing Philip Robson via Snort-users
Snort's Test Logger Ibrahim Ahmed via Snort-users
Can Snort detect a download file from internet? Hào Tài via Snort-sigs

Sunday, 20 May

conf problem Dorian ROSSE
Missing rules - Advisory 2018-05-17 Y M via Snort-sigs
Rules included in the VRT base policies Antonio Leding
Re: Rules included in the VRT base policies Y M via Snort-sigs

Monday, 21 May

Snort alerts Pildesapo2 via Snort-sigs
Re: Missing rules - Advisory 2018-05-17 Joel Esler (jesler) via Snort-sigs
Alerts to mail serg_sctemp serg_sctemp via Snort-sigs
Re: Missing rules - Advisory 2018-05-17 Y M via Snort-sigs
Re: Missing rules - Advisory 2018-05-17 Joel Esler (jesler) via Snort-sigs
Re: Can Snort detect a download file from internet? Hào Tài via Snort-sigs
Re: Can Snort detect a download file from internet? Antonio Leding
Re: Can Snort detect a download file from internet? Al Lewis (allewi) via Snort-sigs
Re: Can Snort detect a download file from internet? Antonio Leding
Re: Can Snort detect a download file from internet? Joel Esler (jesler) via Snort-sigs
Re: Can Snort detect a download file from internet? Antonio Leding
Re: Can Snort detect a download file from internet? Russ via Snort-sigs

Tuesday, 22 May

Re: Can Snort detect a download file from internet? Tai Ly via Snort-sigs
Snort Subscriber Rules Update 2018-05-22 Research
Configuring Snort to work with Pytbull Sarfraz Saddiq
Re: Can Snort detect a download file from internet? Tai Ly via Snort-sigs
Re: Can Snort detect a download file from internet? Al Lewis (allewi) via Snort-sigs

Thursday, 24 May

Critical: Memory leak in snort 2.9 and FreeBSD >= 10.4 elof
Snort Subscriber Rules Update 2018-05-24 Research
snort no detect any attack bz Os via Snort-sigs
?????? Can Snort detect a download file from internet? Zer0d0y via Snort-sigs
Re: 回复: Can Snort detect a download file from internet? James via Snort-sigs
Re: Critical: Memory leak in snort 2.9 and FreeBSD >= 10.4 James via Snort-devel

Friday, 25 May

Re: Critical: Memory leak in snort 2.9 and FreeBSD >= 10.4 Carter Waxman (cwaxman) via Snort-devel
(no subject) Dorian ROSSE
BITSAdmin Upload Y M via Snort-sigs
Re: (no subject) Russ via Snort-devel
Muhstik Botnet scan requests Y M via Snort-sigs
Win.Trojan.Orcus RAT Y M via Snort-sigs
Vbs.Downloader.Valyria Y M via Snort-sigs
Win.Trojan.Ammyy RAT Y M via Snort-sigs
Linux Redis mining worm Y M via Snort-sigs
Specific Office UAs with short URLs Y M via Snort-sigs

Saturday, 26 May

Re: Critical: Memory leak in snort 2.9 and FreeBSD >= 10.4 elof

Sunday, 27 May

How to launch snort as an all time scanner network for a DHCP network scanner Dorian ROSSE
Wireshnork or other 'Snort for Wireshark' tool? Ibrahim Ahmed via Snort-users

Monday, 28 May

Re: Critical: Memory leak in snort 2.9 and FreeBSD >= 10.4 Lokesh Bevinamarad (lbevinam) via Snort-devel

Tuesday, 29 May

SID 1-44076 Suspicious .trade dns query Jorge Junco
Re: Wireshnork or other 'Snort for Wireshark' tool? Joel Esler (jesler) via Snort-users
Re: How to launch snort as an all time scanner network for a DHCP network scanner Joel Esler (jesler) via Snort-users
GET SOME TROUBLE CONFIGURING SNORT 3 Francis Ahadji via Snort-users
How snort handels contents divided in multiple packets? Hamza Ali via Snort-users
Snort daemon Dorian ROSSE
IP4 Discad rugg . vale
Re: SID 1-44076 Suspicious .trade dns query Joel Esler (jesler) via Snort-sigs
Re: SID 1-44076 Suspicious .trade dns query wkitty42
Re: GET SOME TROUBLE CONFIGURING SNORT 3 wkitty42
Re: How to launch snort as an all time scanner network for a DHCP network scanner Mark W. Jeanmougin via Snort-users
Win.Trojan.RoyalCli O C via Snort-sigs
Win.Trojan.Nemucod JS O C via Snort-sigs
Win.Trojan.Dropper O C via Snort-sigs
CVE-2017-8570 O C via Snort-sigs
ThreadKit Documents O C via Snort-sigs
Re: Snort-devel Digest, Vol 12, Issue 9 Anuj Patel via Snort-devel
Snort Subscriber Rules Update 2018-05-29 Research

Wednesday, 30 May

Re: ThreadKit Documents John Levy
Re: BITSAdmin Upload Nick Randolph
Re: BITSAdmin Upload O C via Snort-sigs
Re: GET SOME TROUBLE CONFIGURING SNORT 3 Russ via Snort-users
how can improve detection of attack by snort 3 bz Os via Snort-users
Now how to launch my scan Dorian ROSSE
Re: how can improve detection of attack by snort 3 Joel Esler (jesler) via Snort-users
Re: ThreadKit Documents Y M via Snort-sigs
Re: how can improve detection of attack by snort 3 bz Os via Snort-users
Ask for a rogue scan Dorian ROSSE

Thursday, 31 May

Re: Snort-devel Digest, Vol 12, Issue 9 Bhargava Jandhyala (bjandhya) via Snort-devel
Re: Ask for a rogue scan Mark W. Jeanmougin via Snort-sigs
Snort Subscriber Rules Update 2018-05-31 Research
Re: how can improve detection of attack by snort 3 DFIRob via Snort-users
Re: how can improve detection of attack by snort 3 wkitty42
Re: Now how to launch my scan Mark W. Jeanmougin via Snort-users
Is pfSense the Best Open Source Firewall/IDS/IPS in the World? Turritopsis Dohrnii Teo En Ming via Snort-users
Open appid problème Kondi AGBA GNANDI via Snort-users
Re: how can improve detection of attack by snort 3 Joel Esler (jesler) via Snort-users
Re: Is pfSense the Best Open Source Firewall/IDS/IPS in the World? Joel Esler (jesler) via Snort-users
Snort 3 Build 245 on FreeBSD Y M via Snort-devel
Re: Snort 3 Build 245 on FreeBSD Y M via Snort-devel
(no subject) BeYourSelf BeYourSelf via Snort-sigs

Saturday, 02 June

Re: Snort 3 Build 245 on FreeBSD Russ via Snort-devel
Re: Snort 3 Build 245 on FreeBSD Y M via Snort-devel
Unsubscribe Nathan D'Elboux via Snort-devel

Monday, 04 June

It is possible to execute NIPS and NIDS together? Younes Abderrahmane via Snort-users
It is possible to execute NIPS and NIDS together? Younes Abderrahmane via Snort-users
Problem of converting tcpdump.list (.txt) file to pcap format 2014/2015 - Nsabimana Thierry
Win.Trojan.Autophyte Y M via Snort-sigs
Win.Backdoor.Joanap Y M via Snort-sigs
Win.Trojan.Danabot Y M via Snort-sigs
Win.Trojan.Nocturnal Y M via Snort-sigs
Re: ThreadKit Documents Y M via Snort-sigs

Tuesday, 05 June

Re: It is possible to execute NIPS and NIDS together? Cynthia Leonard (cyleonar) via Snort-users
Re: ThreadKit Documents John Levy
Snort Subscriber Rules Update 2018-06-05 Research
Re: Snort-sigs Digest, Vol 13, Issue 3 oumaima el jaouhari via Snort-sigs
Re: Snort-sigs Digest, Vol 13, Issue 3 Alex McDonnell

Wednesday, 06 June

Re: Problem of converting tcpdump.list (.txt) file to pcap format Bruno Riccelli
Problem of converting tcpdump.list (.txt) file to pcap format 2014/2015 - Nsabimana Thierry

Thursday, 07 June

Re: Win.Backdoor.Joanap Alex McDonnell
CVE-2018-8162 rule Sevens Benoît
Re: Win.Backdoor.Joanap Y M via Snort-sigs
Re: CVE-2018-8162 rule David Randolph
Re: CVE-2018-8162 rule Joel Esler (jesler) via Snort-sigs
Need help on snort documents Shefali via Snort-devel
Re: Need help on snort documents Al Lewis (allewi) via Snort-devel
Snort Subscriber Rules Update 2018-06-07 Research

Friday, 08 June

Snort Rules Sensors lukasz zab via Snort-sigs
Re: Snort Rules Sensors wkitty42
Re: Snort-sigs Digest, Vol 12, Issue 50 Ashlee Benge
Re: Snort Rules Sensors Alex McDonnell
can we setup acid with snort ++ bz Os via Snort-users
Need help on snort documents Shefali via Snort-users
ftp error when testing snort with pytbull bz Os via Snort-users
Re: Snort-sigs Digest, Vol 12, Issue 50 Mkultra via Snort-sigs
Re: Snort-sigs Digest, Vol 12, Issue 50 Mkultra via Snort-sigs
Re: Snort-sigs Digest, Vol 12, Issue 50 Y M via Snort-sigs
Re: Snort-sigs Digest, Vol 12, Issue 50 6vector9telemetry--- via Snort-sigs

Saturday, 09 June

SNORT Alert Messages İzzettin Erdem via Snort-devel
Re: SNORT Alert Messages Marcin Dulak via Snort-devel
Re: SNORT Alert Messages Russ via Snort-devel
Re: Snort-devel Digest, Vol 13, Issue 4 İzzettin Erdem via Snort-devel
SNORT Alert Messages İzzettin Erdem via Snort-devel
Re: SNORT Alert Messages Y M via Snort-devel
Re: SNORT Alert Messages Y M via Snort-devel
Re: SNORT Alert Messages Russ via Snort-devel

Sunday, 10 June

Re: ftp error when testing snort with pytbull Marcin Dulak via Snort-users
Feature request James Lay
Re: It is possible to execute NIPS and NIDS together? Younes Abderrahmane via Snort-users
Ubuntu 18 and so rules error James Lay
Snort 3 - Custom file magic definitions Y M via Snort-devel
hi it-beograd
Re: Snort 3 - Custom file magic definitions Ernest Russell via Snort-devel
Re: Snort-devel Digest, Vol 13, Issue 7 İzzettin Erdem via Snort-devel
Re: Snort-devel Digest, Vol 13, Issue 7 Al Lewis (allewi) via Snort-devel
Re: Snort 3 - Custom file magic definitions Michael Altizer via Snort-devel

Monday, 11 June

Re: Snort-devel Digest, Vol 13, Issue 9 İzzettin Erdem via Snort-devel
Snort rule for allowing Logitech Squeezebox streaming service/traffic Dominik Steiner via Snort-users
Re: Snort-sigs Digest, Vol 12, Issue 50 Joel Esler (jesler) via Snort-sigs
Win.Backdoor.SocketPlayer Y M via Snort-sigs
Win.Trojan.PLEAD & Win.Trojan.TSCookie Y M via Snort-sigs
Doc.Dropper.Yoban Y M via Snort-sigs
Doc.Dropper.HWPnshell Y M via Snort-sigs
Win.Trojan.InvisiMole Y M via Snort-sigs
Win.Trojan.Occamy Y M via Snort-sigs
Office documents with commands in metadata Y M via Snort-sigs
Outlook phishing pattern Y M via Snort-sigs

Tuesday, 12 June

Segfault building Snort3 b245 with --enable-tcmalloc flag Noah Dietrich
non-fatal warnings when loading snort-extras (with warn-all) Noah Dietrich
Re: Win.Trojan.Nocturnal John Levy
Re: Outlook phishing pattern John Levy
Re: Win.Trojan.Nocturnal Y M via Snort-sigs
Re: non-fatal warnings when loading snort-extras (with warn-all) Russ via Snort-devel
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Y M via Snort-devel
Re: Snort 3 - Custom file magic definitions Y M via Snort-devel
Snort Subscriber Rules Update 2018-06-12 Research
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Y M via Snort-devel
Snort Subscriber Rules Update 2018-06-12 Research
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Noah Dietrich
Re: non-fatal warnings when loading snort-extras (with warn-all) Noah Dietrich
Snort Alert max_queue_events Parameter İzzettin Erdem via Snort-devel

Wednesday, 13 June

Odd bug when using alert_json plugin Noah Dietrich
Re: Snort rule for allowing Logitech Squeezebox streaming service/traffic Al Lewis (allewi) via Snort-users
Re: can we setup acid with snort ++ Joel Esler (jesler) via Snort-users
Re: Snort rule for allowing Logitech Squeezebox streaming service/traffic wkitty42
Re: It is possible to execute NIPS and NIDS together? Cynthia Leonard (cyleonar) via Snort-users
Flowbits set to isset Gerry Carpinetti via Snort-users
Ubuntu16.04 dynamic preprocess reputation didn't alert cha shao via Snort-users
how perform snort 3 detection? bz Os via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: Snort 3 - Custom file magic definitions Y M via Snort-devel
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Y M via Snort-devel
Re: Flowbits set to isset Russ via Snort-users
Re: can we setup acid with snort ++ Russ via Snort-users
what is the difference between snort 3 rules and snort v2.9? bz Os via Snort-users
Re: what is the difference between snort 3 rules and snort v2.9? Y M via Snort-users
Re: how perform snort 3 detection? Y M via Snort-users
Re: Flowbits set to isset Patrick Mullen (pamullen) via Snort-users
Re: Flowbits set to isset Joel Esler (jesler) via Snort-users
no preprocessors configured for policy 0 graham
Re: no preprocessors configured for policy 0 Al Lewis (allewi) via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: can we setup acid with snort ++ Michael Steele
Re: can we setup acid with snort ++ Michael Steele
Re: Ubuntu 18 and so rules error Russ via Snort-users
File.swf.cff has 2 sections for flowbits? Gerry Carpinetti via Snort-users
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Michael Altizer via Snort-devel
Re: Snort 3 - Custom file magic definitions Michael Altizer via Snort-devel

Thursday, 14 June

SNORT Alert Configuration Furkan Çelik via Snort-devel
Re: can we setup acid with snort ++ wkitty42
Re: File.swf.cff has 2 sections for flowbits? wkitty42
Re: can we setup acid with snort ++ Marcin Dulak via Snort-users
Snort Subscriber Rules Update 2018-06-14 Research
Re: Ubuntu 18 and so rules error Patrick Mullen (pamullen) via Snort-users
Re: can we setup acid with snort ++ Joel Esler (jesler) via Snort-users
Re: can we setup acid with snort ++ Noah Dietrich
Spam Vasil Furmanski
Re: Spam Mark Kosier
Re: Spam Thomas McCourt (tmccourt) via Snort-users
Re: Spam Russ via Snort-users
Re: Spam Vasil Furmanski
Re: Spam Thomas McCourt (tmccourt) via Snort-users
Re: Spam DFIRob via Snort-users
Re: Spam wkitty42
Re: Ubuntu 18 and so rules error Y M via Snort-users
Re: Spam DFIRob via Snort-users
Re: Spam Joel Esler (jesler) via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: Ubuntu 18 and so rules error James Lay
Re: Ubuntu 18 and so rules error Y M via Snort-users

Friday, 15 June

(no subject) Dorian ROSSE
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Noah Dietrich
Flowbit Warnings Gerry Carpinetti via Snort-sigs
Re: Flowbit Warnings Alex McDonnell
Re: Flowbit Warnings wkitty42
Re: Flowbit Warnings wkitty42
Re: Flowbit Warnings Felix Rodríguez
Re: Flowbit Warnings wkitty42
Re: Ubuntu 18 and so rules error Patrick Mullen (pamullen) via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Two missing for scan Dorian ROSSE

Saturday, 16 June

Re: Odd bug when using alert_json plugin Noah Dietrich
Snort 3.0 performance issue Qinwen Hu
if the less ressource (cpu , ram) can cause the false positive? bz Os via Snort-users

Sunday, 17 June

Re: Odd bug when using alert_json plugin Russ via Snort-devel

Monday, 18 June

Re: Ubuntu 18 and so rules error Patrick Mullen (pamullen) via Snort-users
Re: Segfault building Snort3 b245 with --enable-tcmalloc flag Michael Altizer via Snort-devel
Re: Two missing for scan DFIRob via Snort-sigs

Tuesday, 19 June

Snort Subscriber Rules Update 2018-06-19 Research
Re: Ubuntu 18 and so rules error James Lay
Re: Snort 3.0 performance issue Carter Waxman (cwaxman) via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: Snort 3.0 performance issue Qinwen Hu
Re: Ubuntu 18 and so rules error Russ via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: Ubuntu 18 and so rules error Y M via Snort-users
Re: Ubuntu 18 and so rules error Russ via Snort-users
about snort can not auto update rules. vend.adosrv3

Wednesday, 20 June

Re: Ubuntu 18 and so rules error James Lay
No more mail please Tony Sanchez via Snort-users
Re: Ubuntu 18 and so rules error James Lay
Re: about snort can not auto update rules. wkitty42
Re: [SUSPECTED SPAM] No more mail please Thomas McCourt (tmccourt) via Snort-users
Appearance of new custom alerts in BASE delayed Black Lion via Snort-users
Re: Snort 3.0 performance issue Carter Waxman (cwaxman) via Snort-users
White and Blacklist Rules Eichhorn Sophia
Re: White and Blacklist Rules Al Lewis (allewi) via Snort-sigs
Re: Snort 3.0 performance issue PUllarao via Snort-users

Thursday, 21 June

Fwd: Snort 3.0 performance issue Виктор Сурин via Snort-users
Unsubscribe me from this list. Reggie Gibbons via Snort-users
Snort Subscriber Rules Update 2018-06-21 Research
Re: Unsubscribe me from this list. Thomas McCourt (tmccourt) via Snort-users
Logging "pass" rules that are hit Dave Osbourne

Friday, 22 June

Snort 3, IDS mode, Monitor Multiple Interface At Same Time Moojit
Re: Snort 3, IDS mode, Monitor Multiple Interface At Same Time Al Lewis (allewi) via Snort-users
Re: Snort 3, IDS mode, Monitor Multiple Interface At Same Time Moojit
Re: Ubuntu 18 and so rules error Patrick Mullen (pamullen) via Snort-users

Sunday, 24 June

spam Avi Cohen via Snort-users
Re: spam wkitty42

Monday, 25 June

header intact Iberic Olamide via Snort-users
(no subject) gitay yaniv via Snort-users
do not send me email please Mohamed Ahmed Abd El-Migeed via Snort-users
Re: do not send me email please Michael Da Cova
(no subject) Ogy Pramarta via Snort-users
Re: header intact Thomas McCourt (tmccourt) via Snort-users
Re: (no subject) Thomas McCourt (tmccourt) via Snort-users
Re: (no subject) Thomas McCourt (tmccourt) via Snort-users
Re: (no subject) B via Snort-users
Re: (no subject) Wm. Josiah Erikson
Re: (no subject) Thomas McCourt (tmccourt) via Snort-users
Re: (no subject) Thomas McCourt (tmccourt) via Snort-users
Re: Snort 3, IDS mode, Monitor Multiple Interface At Same Time Michael Altizer via Snort-users
Re: (no subject) Wm. Josiah Erikson
Re: Logging "pass" rules that are hit Russ via Snort-users

Tuesday, 26 June

Snort Subscriber Rules Update 2018-06-26 Research
Re: Ubuntu 18 and so rules error James Lay

Wednesday, 27 June

Multiple signatures Y M via Snort-sigs
Re: Multiple signatures John Levy
Re: Ubuntu 18 and so rules error Patrick Mullen (pamullen) via Snort-users
Re: Ubuntu 18 and so rules error James Lay

Thursday, 28 June

Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Re: Error Compiling Snort 2.9.11.1 James Lay
Re: Error Compiling Snort 2.9.11.1 Noah Dietrich
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Multiple signatures - 001 Y M via Snort-sigs
Re: Error Compiling Snort 2.9.11.1 Y M via Snort-users
Re: Ubuntu 18 and so rules error Y M via Snort-users
Snort Subscriber Rules Update 2018-06-28 Research
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Re: Error Compiling Snort 2.9.11.1 Y M via Snort-users
1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Steve Thames via Snort-sigs
Re: 1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Y M via Snort-sigs
Re: 1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt wkitty42--- via Snort-sigs
Re: 1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Steve Thames via Snort-sigs
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users

Friday, 29 June

Fucking stop emailing Naing Lynn Htway via Snort-users
Re: Error Compiling Snort 2.9.11.1 Y M via Snort-users
Re: Fucking stop emailing Russ via Snort-users
Re: Fucking stop emailing Michael Da Cova
Re: Fucking stop emailing Tarek Ben Soltane via Snort-users
Re: Fucking stop emailing Joel Esler (jesler) via Snort-users
Re: (censored) stop emailing paul meding via Snort-users
Re: Fucking stop emailing Ken via Snort-users
Re: (censored) stop emailing James Lay via Snort-users
Re: (censored) stop emailing Chris Baiocchetti via Snort-users
Re: (censored) stop emailing Wm. Josiah Erikson
0 dynamic rule loaded in snort bz Os via Snort-sigs
1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Steve Thames via Snort-sigs
Additional rules for detecting Emotet - Trickbot - IcedID banking malware Lenny Hansson
how get latest snort ruleset. xtdwnuisea
Re: 1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Y M via Snort-sigs
Re: (censored) stop emailing Alan McKay via Snort-users
Re: how get latest snort ruleset. Joel Esler (jesler) via Snort-sigs
Re: 0 dynamic rule loaded in snort Joel Esler (jesler) via Snort-sigs
Re: (censored) stop emailing Nick Ellson via Snort-users
Re: (censored) stop emailing Lynn Schott via Snort-users
Re: (censored) stop emailing Joel Esler (jesler) via Snort-users
Re: (censored) stop emailing Joel Esler (jesler) via Snort-users
Re: (censored) stop emailing Wm. Josiah Erikson
Re: (censored) stop emailing Wm. Josiah Erikson
Re: (censored) stop emailing Joel Esler (jesler) via Snort-users
Re: Fucking stop emailing wkitty42--- via Snort-users
Re: 1:11672, 3:11672 BROWSER-OTHER Mozilla Network Security Services SSLv2 stack overflow attempt Steve Thames via Snort-sigs
Re: Fucking stop emailing B via Snort-users
Re: Fucking stop emailing Caleb Jaren via Snort-users
Re: Fucking stop emailing Matthew Molloy via Snort-users
Re: Fucking stop emailing Carter Waxman (cwaxman) via Snort-users
Re: Error Compiling Snort 2.9.11.1 Lucas Miguel (_theHarvester) via Snort-users
Remcos RAT 2.0.4 Pro sig James Lay via Snort-sigs
Re: Fucking stop emailing Matthew Molloy via Snort-users
Re: Fucking stop emailing Kelly Alger

Saturday, 30 June

Re: Fucking stop emailing Nate Schmuecker via Snort-users
Babylon RAT sig James Lay via Snort-users
Fwd: Fucking stop emailing Виктор Сурин via Snort-users
Re: Fucking stop emailing Timothy Czadzeck via Snort-users
Unsubscribe snort mailing Variya Sirilertworakul via Snort-users
Re: Unsubscribe snort mailing Kelly Alger
mail list Jeff Frazier
I’ve tried to unsubscribe but it didn’t work! Ahmed Qaisi via Snort-users
Re: mail list B via Snort-users
Unsubcribe ! klebar59 ClB
Re: Fucking stop emailing Joel Esler (jesler) via Snort-users
Re: Fucking stop emailing Shahbaaz Chaki via Snort-users
N00B Windows snort.config help Carlos Sun via Snort-users
Re: Fucking stop emailing Caleb Jaren via Snort-users
Re: Fucking stop emailing Paulo Angelo
Re: Fucking stop emailing R. Scott Belford via Snort-users
Re: Fucking stop emailing Lucas Smith via Snort-users
Re: mail list B M via Snort-users
Re: Fucking stop emailing Jason Brvenik
Re: Fucking stop emailing Ian Caauwe
Re: mail list Jaime Pérez Estrada
Re: Fucking stop emailing Tajul Azhar via Snort-users
Re: mail list Joel Esler (jesler) via Snort-users
Re: Fucking stop emailing Joel Esler (jesler) via Snort-users