Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

August 31, 2004

Re: [Snort-sigs] Bleedingsnort.com Daily Update, Matt Jonkman, 23:52
RE: [Snort-sigs] secure connection to bleedingsnort.com, Frank Knobbe, 21:01
Re: [Snort-sigs] SAM tool, John Nagro, 20:01
Re: [Snort-sigs] secure connection to bleedingsnort.com, John Nagro, 20:01
[Snort-sigs] SAM tool, Paul Ryan, 19:51
Re: [Snort-sigs] secure connection to bleedingsnort.com, John Nagro, 19:51
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 19:30
Re: [Snort-sigs] Snorting gzip encoded http source code, Jose Maria Lopez, 19:30
RE: [Snort-sigs] secure connection to bleedingsnort.com, Esler, Joel - Contractor, 18:20
[Snort-sigs] secure connection to bleedingsnort.com, John Nagro, 13:07
[Snort-sigs] Akak trojan signatures, Joe Stewart, 12:26
[Snort-sigs] Add false positive entry to rule 1:2003, Lyndon Tiu, 12:26
Re: [Snort-sigs] Connecting signatures?, Chris Kronberg, 08:45

August 30, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:41
Re: [Snort-sigs] Snorting gzip encoded http source code, Jason Haar, 21:10
RE: [Snort-sigs] Snorting gzip encoded http source code, Abe Use, 17:28

August 29, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:40
Re: [Snort-sigs] Connecting signatures?, Matthew Watchinski, 13:36
Re: [Snort-sigs] Connecting signatures?, Erik Fichtner, 13:26
Re: [Snort-sigs] Connecting signatures?, Chris Kronberg, 11:35
Re: [Snort-sigs] Connecting signatures?, Keith W. McCammon, 10:55
[Snort-sigs] Connecting signatures?, Chris Kronberg, 04:22
Re: [Snort-sigs] RE: Snort Rule Howto, James Riden, 02:01

August 28, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:50

August 27, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:32
[Snort-sigs] snort-rules update @ Fri Aug 27 15:15:43 2004, bmc, 17:50
RE: [Snort-sigs] Snorting gzip encoded http source code, Abe Use, 17:40
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Ben Dugdale, 17:00
Re: [Snort-sigs] " ..MS Terminal Server no encryption.. " misfire?, Nigel Houghton, 16:50
[Snort-sigs] " ..MS Terminal Server no encryption.. " misfire?, Ben Dugdale, 16:40
[Snort-sigs] Snorting gzip encoded http source code, Abe Use, 16:09
RE: [Snort-sigs] RE: Snort Rule Howto, Andrews Carl 448, 15:09
Re: [Snort-sigs] Possible false positives for rule 1:1983, 1:1980 and 1:1981, Alex Kirk, 14:08
Re: [Snort-sigs] BACKDOOR NetMetro File List Signature False Positive, Nigel Houghton, 13:48
RE: [Snort-sigs] RE: Snort Rule Howto, Harper, Patrick, 13:28
[Snort-sigs] RE: Snort Rule Howto, Andrews Carl 448, 12:38
[Snort-sigs] Possible false positives for rule 1:1983, 1:1980 and 1:1981, George Laiacona, 11:27
[Snort-sigs] BACKDOOR NetMetro File List Signature False Positive, McCash, John, 11:17

August 26, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:32
[Snort-sigs] snort-rules update @ Thu Aug 26 11:15:39 2004, bmc, 13:56

August 25, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:50
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Daniel Roelker, 20:38
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Brian, 20:17
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Alex Kirk, 19:47
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Seth Art, 19:27
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Alex Kirk, 19:07
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Seth Art, 18:47
Re: [Snort-sigs] Help on an ICMP rule: sid 486, Alex Kirk, 16:36
[Snort-sigs] Help on an ICMP rule: sid 486, Seth Art, 15:25
Re: [Snort-sigs] 2383 FP " NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt", Alex Kirk, 14:55
Re: Re: [Snort-sigs] 2383 FP " NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt", sekure, 14:35
Re: [Snort-sigs] 2383 FP " NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt", Alex Kirk, 14:35
[Snort-sigs] 2383 FP " NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt", sekure, 14:15

August 24, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:18
[Snort-sigs] Re: bleedingsnort PNG rule 2001203 FP?, Federico Petronio, 14:13
[Snort-sigs] bleedingsnort PNG rule 2001203 FP?, Federico Petronio, 13:33

August 23, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:07
Re: [Snort-sigs] SSH Scans, Frank Knobbe, 19:15
Re: [Snort-sigs] SSH Scans, Ben Whaley, 19:15
Re: [Snort-sigs] SSH Scans, Matthew Jonkman, 19:15
Re: [Snort-sigs] SSH Scans, Matthew Jonkman, 18:55
Re: [Snort-sigs] SSH Scans, Frank Knobbe, 18:45
Re: [Snort-sigs] SSH Scans, Matthew Jonkman, 18:25
Re: [Snort-sigs] Malware/Spyware, Stef, 18:05
Re: [Snort-sigs] SSH Scans, Brian, 17:54
[Snort-sigs] Malware/Spyware, Matthew Jonkman, 17:14
[Snort-sigs] SSH Scans, Matthew Jonkman, 16:54
Re: [Snort-sigs] sid 2518 typo?, Brian, 16:54
[Snort-sigs] sid 2518 typo?, Aaron W. DeLashmutt, 15:13

August 22, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:35

August 21, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:53
Re: [Snort-sigs] SID 1344, Nigel Houghton, 16:10
RE: [Snort-sigs] SID 1344, James Ashton, 16:10
Re: [Snort-sigs] SID 1344, Nigel Houghton, 14:20
[Snort-sigs] SID 1344, James Ashton, 13:59
[Snort-sigs] David Kibilka/Networking/Willich/Datasystems ist außer Haus., dkibilka, 03:25

August 20, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:53
Re: [Snort-sigs] New adobe vulnerability, Frank Knobbe, 18:21
Re: [Snort-sigs] BleedingSnort rules hits information, Matthew Jonkman, 17:41
Re: [Snort-sigs] New adobe vulnerability, frank, 17:20
RE: [Snort-sigs] SID 2417, Paul Schmehl, 16:50
Re: [Snort-sigs] New adobe vulnerability, Frank Knobbe, 16:30
Re: [Snort-sigs] New adobe vulnerability, Matthew Watchinski, 16:30
RE: [Snort-sigs] SID 2417, Murat Korkmaz, 16:30
Re: [Snort-sigs] SID 2417, Frank Knobbe, 16:00
[Snort-sigs] RE: Snort Rule Howto, Andrews Carl 448, 15:50
Re: [Snort-sigs] SID 2417, Nigel Houghton, 15:30
Re: [Snort-sigs] New adobe vulnerability, Frank Knobbe, 15:19
[Snort-sigs] SID 2417, Paul Schmehl, 14:59
Re: [Snort-sigs] New adobe vulnerability, nnposter, 14:19
[Snort-sigs] BleedingSnort rules hits information, Federico Petronio, 14:09
Re: [Snort-sigs] DHCP Attack, Frank Knobbe, 01:52
Re: [Snort-sigs] New adobe vulnerability, Frank Knobbe, 01:52

August 19, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:11
Re: [Snort-sigs] PNG vulnerabilities and more, Joe Stewart, 19:50
Re: [Snort-sigs] DHCP Attack, twebster, 19:19
RE: [Snort-sigs] Snort Rule Howto, John Hally, 19:19
Re: [Snort-sigs] Snort Rule Howto, twebster, 19:09
Re: [Snort-sigs] New adobe vulnerability, Joseph Gama, 18:59
Re: [Snort-sigs] PNG vulnerabilities and more, Joseph Gama, 18:49
Re: [Snort-sigs] DHCP Attack, Kenneth G. Arnold, 18:29
Re: [Snort-sigs] DHCP Attack, Nick Hatch, 18:19
[Snort-sigs] Snort Rule Howto, Andrews Carl 448, 17:48
Re: [Snort-sigs] Possible False Positive on SID 2383, Nigel Houghton, 13:36
[Snort-sigs] Possible False Positive on SID 2383, Lance Boon, 13:36
[Snort-sigs] Rule 466 False-Positives, John B., 12:36
Re: [Snort-sigs] PNG vulnerabilities and more, Joe Stewart, 10:45
Re: [Snort-sigs] New adobe vulnerability, Matthew Jonkman, 03:42
RE: [Snort-sigs] New adobe vulnerability, nnposter, 01:51
Re: [Snort-sigs] DHCP Attack, arif . jatmoko, 01:31
Re: [Snort-sigs] DHCP Attack, Chris Reining, 01:31
Re: [Snort-sigs] DHCP Attack, Kenneth G. Arnold, 00:01

August 18, 2004

[Snort-sigs] DHCP Attack, arif . jatmoko, 23:40
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:20
Re: [Snort-sigs] Snort rules question., Matt Kettler, 19:29
[Snort-sigs] PNG vulnerabilities and more, Joseph Gama, 19:08
[Snort-sigs] Mozilla vulnerabilities, Joseph Gama, 19:08
[Snort-sigs] Serv-U vulnerabilities, Joseph Gama, 19:08
[Snort-sigs] Snort rules question., wbenetti, 17:27
[Snort-sigs] New adobe vulnerability, Matthew Jonkman, 14:36
[Snort-sigs] Call for Spyware, Matthew Jonkman, 14:26
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 05:32
Re: [Snort-sigs] Update on the non-smtp server rule, Matthew Jonkman, 00:54
Re: [Snort-sigs] help, Joseph Gama, 00:54
Re: [Snort-sigs] Rules sid:2000344 and following (IRC)., Matthew Jonkman, 00:54
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 00:54
Re: [Snort-sigs] Rules sid:2000344 and following (IRC)., Chich Thierry, 00:54
[Snort-sigs] Update on the non-smtp server rule, Eric Hines, 00:53
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Matthew Jonkman, 00:53
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Alex Kirk, 00:53
RE: [Snort-sigs] Bleedingsnort.com Daily Update, Graeme Rider, 00:53

August 16, 2004

Re: [Snort-sigs] signature for SoulSeek P2P?, Matthew Jonkman, 15:59
[Snort-sigs] SID 2492 - Question, Michael Sconzo, 15:09
Re: [Snort-sigs] help, Alex Kirk, 14:38
Re: [Snort-sigs] signature for SoulSeek P2P?, Alex Kirk, 14:18
[Snort-sigs] snort-rules CURRENT update @ Tue Aug 10 10:02:57 2004, bmc, 13:37
[Snort-sigs] amendment to ATTACK-RESOPNSES id check returned root, Likai Liu, 13:37
[Snort-sigs] snort-rules 2.1.* update @ Tue Aug 10 10:15:41 2004, bmc, 13:37
[Snort-sigs] New bagle variant, Matthew Jonkman, 13:27
RE: [Snort-sigs] signature for SoulSeek P2P?, marcamone, 13:27
[Snort-sigs] NIDS Signature # 1930: False positive, Bob Van Cleef, 13:27
[Snort-sigs] SID 1432 False Positive (P2P GNUTella client request), lonewf, 13:27
[Snort-sigs] (no subject), Gary Verhulp, 13:27
[Snort-sigs] help, randy gillo, 13:27
[Snort-sigs] More Bagle.AQ rules, Matthew Jonkman, 13:27
Re: [Snort-sigs] Rules sid:2000344 and following (IRC)., Matthew Jonkman, 11:36
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 10:56
[Snort-sigs] Rules sid:2000344 and following (IRC)., Chich Thierry, 05:54

August 15, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 10:25

August 14, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 10:15

August 13, 2004

[Snort-sigs] PNG vulnerabilities 1, Joseph Gama, 23:10
[Snort-sigs] IE exploits, Joseph Gama, 20:29
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 18:57
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 18:37
Re: [Snort-sigs] lsasrv.dll exploit, Matthew Jonkman, 16:24
[Snort-sigs] lsasrv.dll exploit, Albers, Lucas, 14:32

August 12, 2004

Re: [Snort-sigs] 2 WEB-IIS unicode directory rules, Brian, 18:41
Re: [Snort-sigs] signature for SoulSeek P2P?, Alex Kirk, 18:31
Re: [Snort-sigs] signature for SoulSeek P2P?, John Nagro, 18:31
RE: [Snort-sigs] signature for SoulSeek P2P?, twebster, 18:28
Re: [Snort-sigs] signature for SoulSeek P2P?, Matthew Jonkman, 18:10
[Snort-sigs] signature for SoulSeek P2P?, twebster, 16:30
Re: [Snort-sigs] I must have signed up for the wrong mailing list, webcatalog, 16:30
Re: [Snort-sigs] False positive in sid:1448, Nigel Houghton, 16:29
Re: [Snort-sigs] I must have signed up for the wrong mailing list, Hugo van der Kooij, 16:09
[Snort-sigs] Signatures for the latest rxbot / rbot variant, Christopher Harrington, 14:56
[Snort-sigs] I must have signed up for the wrong mailing list, Daniel Gutzwiller, 14:16
[Snort-sigs] new rules 9, Joseph Gama, 14:14
RE: [Snort-sigs] Please remove the word "nazi" from the website, Thompson, Jimi, 14:14
RE: [Snort-sigs] Please remove the word "nazi" from the website, Adrian Marsden, 14:14
RE: [Snort-sigs] Please remove the word "nazi" from the website, Thompson, Jimi, 14:14
Re: [Snort-sigs] Please remove the word "nazi" from the website, Brian, 14:14
Re: [Snort-sigs] Please remove the word "nazi" from the website, bmc, 14:14
Re: [Snort-sigs] new rules 2, Matthew Jonkman, 14:14
[Snort-sigs] RE: [Snort-sigs]sorry, Harper, Patrick, 14:14
Re: [Snort-sigs] false negative on sig 688, Steven Bairstow, 14:14
Re: [Snort-sigs] Please remove the word "nazi" from the website, Jason, 14:13
RE: [Snort-sigs] new rules 2, patrick . harper, 14:13
RE: [Snort-sigs] new rules 2, patrick . harper, 14:13
RE: [Snort-sigs] Please remove the word "nazi" from the website, Tony Hernandez, 14:13
Re: [Snort-sigs] Please remove the word "nazi" from the website, Paul Schmehl, 14:13
[Snort-sigs] False positive in sid:1448, Federico Petronio, 14:13
Re: [Snort-sigs] Please remove the word "nazi" from the website, John Nagro, 14:13
RE: [Snort-sigs] Please remove the word "nazi" from the website, Seth Art, 14:13
RE: [Snort-sigs] Please remove the word "nazi" from the website, Nick Duda, 14:13
RE: [Snort-sigs] Please remove the word "nazi" from the website, Yaakov Yehudi, 14:13
Re: [Snort-sigs] XSS rules, Matthew Jonkman, 14:13
Re: [Snort-sigs] Quickie rule to catch the new price.zip virus going around, Matthew Jonkman, 14:13
[Snort-sigs] encoded Javascript not being detected, Joseph Gama, 14:13
[Snort-sigs] Another idea for the preprocessor, Joseph Gama, 14:13
Re: [Snort-sigs] Please remove the word "nazi" from the website, Joseph Gama, 14:12
RE: [Snort-sigs] new rules 2, Joseph Gama, 14:12

August 11, 2004

Re: [Snort-sigs] snort-rules update @ Tue Aug 10 10:39:14 2004, Burak DAYIOGLU, 17:53
Re: [Snort-sigs] snort-rules update @ Tue Aug 10 10:39:14 2004, Brian, 17:53
[Snort-sigs] snort-rules update @ Tue Aug 10 10:39:14 2004, bmc, 17:53
[Snort-sigs] snort-rules 2.1.* update @ Tue Aug 10 10:02:57 2004, bmc, 17:53

August 10, 2004

Re: [Snort-sigs] Please remove the word "nazi" from the website, Brian, 16:32
RE: [Snort-sigs] new rules 2, Harper, Patrick, 16:32
[Snort-sigs] MS04-22 - Rule ?, Michael Sconzo, 16:10
[Snort-sigs] new rules 7, Joseph Gama, 15:30
[Snort-sigs] Please remove the word "nazi" from the website, Joseph Gama, 15:30
[Snort-sigs] new rules 3, Joseph Gama, 15:30
[Snort-sigs] new rules 6, Joseph Gama, 15:30
[Snort-sigs] new rules 4, Joseph Gama, 15:20
[Snort-sigs] XSS rules, Joseph Gama, 15:20
[Snort-sigs] new rules 8, Joseph Gama, 15:20
[Snort-sigs] new rules 2, Joseph Gama, 15:20
[Snort-sigs] new rules 5, Joseph Gama, 15:20
[Snort-sigs] rukes for worms, Joseph Gama, 15:20
Re: Re: [Snort-sigs] Quickie rule to catch the new price.zip virus going around, Paul Tinsley, 14:39
Re: [Snort-sigs] Rule 1797 triggered by Win XP SP2 download, Matthew Jonkman, 10:29
[Snort-sigs] Rule 1797 triggered by Win XP SP2 download, Gregoire Hostettler, 05:27
Re: [Snort-sigs] False Positives on sid 1690, Joseph Gama, 05:06
Re: [Snort-sigs] Quickie rule to catch the new price.zip virus going around, Matthew Jonkman, 01:54
[Snort-sigs] false negative on sig 688, Steven Bairstow, 01:34