Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

September 30, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:01
Re: [Snort-sigs] Help Me, Geoffrey Sanders, 16:48
Re: [Snort-sigs] bleedingmalware sigs and severity, Gregoire Hostettler, 16:18
[Snort-sigs] Invalid HTTP Strig, Goodson, Jacob, 15:48
[Snort-sigs] Possible Falsy, Goodson, Jacob, 15:37
Re: [Snort-sigs] bleedingmalware sigs and severity, Alex Butcher, ISC/ISYS, 11:55
[Snort-sigs] Help Me, Javier Guamán, 11:25
Re: [Snort-sigs] New bleeding virus rules (Korgo.P), Matt Jonkman, 03:29

September 29, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:07
[Snort-sigs] New bleeding virus rules (Korgo.P), Nick Hatch, 21:47
Re: [Snort-sigs] Mime type filtering when looking for GDI+, Russell Fulton, 21:16
[Snort-sigs] Mime type filtering when looking for GDI+, Lazarakis, Dan, 15:54
Re: [Snort-sigs] How to detect Skype?, Jason Haar, 11:42
Re: [Snort-sigs] bleedingmalware sigs and severity, Burak DAYIOGLU, 04:59
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 04:19
Re: [Snort-sigs] bleedingmalware sigs and severity, David Glosser, 02:18

September 28, 2004

Re: [Snort-sigs] How to detect Skype?, james edwards, 22:06
[Snort-sigs] How to detect Skype?, Hernandez Huerta Higinio, 21:06
Re: [Snort-sigs] bleedingmalware sigs and severity, Matt Jonkman, 19:15
Re: [Snort-sigs] bleedingmalware sigs and severity, Brian, 17:24
Re: [Snort-sigs] bleedingmalware sigs and severity, Matt Jonkman, 15:53
Re: [Snort-sigs] bleedingmalware sigs and severity, Matt Jonkman, 14:02
[Snort-sigs] bleedingmalware sigs and severity, Caracal GH, 13:52
Re: [Snort-sigs] |3B|id, Daniel Roelker, 13:32
[Snort-sigs] Bleeding Snort Howto, Matt Jonkman, 12:52
Re: [Snort-sigs] bleedingmalware sigs and severity, David Glosser, 09:20
Re: [Snort-sigs] bleedingmalware sigs and severity, Burak DAYIOGLU, 03:47
Re: [Snort-sigs] False positive for rule 1:1365, Mike Pomraning, 02:47
[Snort-sigs] GDI Sig, Matt Jonkman, 02:36
Re: [Snort-sigs] bleedingmalware sigs and severity, Matt Jonkman, 01:36
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 00:25

September 27, 2004

[Snort-sigs] bleedingmalware sigs and severity, David Glosser, 23:55
[Snort-sigs] |3B|id, Worthy, 23:24
Re: [Snort-sigs] |3B|id, Nigel Houghton, 22:34
[Snort-sigs] New Bleedingsnort.com Rulesets!!!, Matt Jonkman, 15:58

September 26, 2004

Re: [Snort-sigs] edonkey rules, Jose Maria Lopez, 19:16

September 24, 2004

Re: [Snort-sigs] edonkey rules, Matt Jonkman, 10:41
RE: [Snort-sigs] Barnyard Choking., James Ashton, 07:40
[Snort-sigs] edonkey rules, Chich Thierry, 05:19
RE: [Snort-sigs] False positive for rule 1:1365, Truax, Shawn (MBS), 02:38

September 23, 2004

[Snort-sigs] False positive for rule 1:1365, Worthy, 22:16

September 22, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:04
Re: [Snort-sigs] JPEG / GDI+ DLL exploit sig?, Mailing Lists, 22:03
Re: [Snort-sigs] Barnyard Choking., Mailing Lists, 13:49
[Snort-sigs] snort-rules update @ Wed Sep 22 10:15:46 2004, bmc, 12:38
Re: [Snort-sigs] Barnyard Choking., sekure, 11:08
Re: [Snort-sigs] Barnyard Choking., Alex Butcher, ISC/ISYS, 06:36
[Snort-sigs] Barnyard Choking, James Ashton, 06:36
[Snort-sigs] Barnyard Choking., James Ashton, 04:55

September 21, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:32
Re: [Snort-sigs] PCRE for SS#'s, nnposter, 17:30
Re: [Snort-sigs] PCRE for SS#'s, Jim Zajkowski, 17:00
Re: [Snort-sigs] PCRE for SS#'s, Matt Jonkman, 16:50
Re: [Snort-sigs] JPEG / GDI+ DLL exploit sig?, Paul Tinsley, 14:19
RE: [Snort-sigs] JPEG / GDI+ DLL exploit sig?, Frank Knobbe, 14:19
RE:[Snort-sigs] PCRE for SS#'s, nnposter, 13:48
Re: [Snort-sigs] snort not logging into database, John Nagro, 13:48
[Snort-sigs] PCRE for SS#'s, Harper, Patrick, 11:57
RE: [Snort-sigs] JPEG / GDI+ DLL exploit sig?, Chas Tomlin, 07:55

September 20, 2004

[Snort-sigs] JPEG / GDI+ DLL exploit sig?, Frank Knobbe, 15:07

September 16, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:59

September 15, 2004

[Snort-sigs] which new tags with which snort version?, Chris Kronberg, 04:57
Re: [Snort-sigs] Need sig to alert on webmail file attachments, Nigel Houghton, 03:06

September 14, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:44
[Snort-sigs] False Positives on Rule 2050, John Duksta, 20:03
Re: [Snort-sigs] what's the type of Pattrem matching slgorithm in sonrt???, Daniel Roelker, 15:51
Re: [Snort-sigs] what's the type of Pattrem matching slgorithm in sonrt???, sekure, 15:41
[Snort-sigs] False positives on FTP command 100 character limit, Sander Steffann, 14:20
Re: [Snort-sigs] typot false positives?, andreas, 14:20
[Snort-sigs] snort not logging into database, neha agrawal, 14:20
Re: [Snort-sigs] secure connection to bleedingsnort.com, Matt Jonkman, 14:20
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 14:20
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Ben Dugdale, 14:20
Re: [Snort-sigs] Snorting gzip encoded http source code, Jose Maria Lopez, 14:20
Re: [Snort-sigs] " ..MS Terminal Server no encryption.. " misfire?, Ben Dugdale, 14:20
[Snort-sigs] what's the type of Pattrem matching slgorithm in sonrt???, mehdi gholami, 14:10
Re: [Snort-sigs] secure connection to bleedingsnort.com, Matt Jonkman, 14:10
[Snort-sigs] Need sig to alert on webmail file attachments, Jeffrey Lowe, 02:44
[Snort-sigs] False +ves on 2590, Russell Fulton, 00:03

September 13, 2004

[Snort-sigs] false positive for 2517, IMAP PCT Client_Hello overflow attempt, Serge Pashenkov, 23:13
[Snort-sigs] smtp pass rules, David Lowless, 18:51
Re: [Snort-sigs] help with LSASS rule, Nigel Houghton, 17:30
RE: [Snort-sigs] help with LSASS rule, Esler, Joel - Contractor, 15:09
RE: [Snort-sigs] help with LSASS rule, Wohlberg, Jonathan, 14:39
Re: [Snort-sigs] help with LSASS rule, Keith W. McCammon, 14:18
Re: [Snort-sigs] SSH Scans Slightly off topic but related......., Ben Whaley, 11:47
[Snort-sigs] help with LSASS rule, Wohlberg, Jonathan, 11:07
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 02:24

September 12, 2004

Re: [Snort-sigs] SSH Scans Slightly off topic but related......., Chris Kronberg, 15:06

September 11, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:02
[Snort-sigs] Broken 2671.1 (WEB-CLIENT bitmap BitmapOffset integer overflow attempt), nnposter, 01:59

September 10, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:08
[Snort-sigs] Typo in 2418.3 msg field, nnposter, 18:15
[Snort-sigs] format of data logged in mysql database, neha agrawal, 10:21
Re: [Snort-sigs] how to see the log from database, Geoffrey Sanders, 03:38
[Snort-sigs] how to see the log from database, neha agrawal, 01:47

September 09, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:05
AW: [Snort-sigs] snort not logging into mysql, Lutz Schildt, 17:52
Re: [Snort-sigs] typot false positives?, ICOSTAFF, 16:52
Re: [Snort-sigs] typot false positives?, John Nagro, 14:51
RE: [Snort-sigs] snort not logging into mysql, Esler, Joel - Contractor, 13:00
Re: [Snort-sigs] SSH Scans Slightly off topic but related......., John Nagro, 12:50
Re: [Snort-sigs] snort not logging into mysql, Geoffrey Sanders, 11:29
[Snort-sigs] snort not logging into mysql, neha agrawal, 10:59
Re: [Snort-sigs] SSH Scans Slightly off topic but related......., Jeff Price, 01:55
Re: [Snort-sigs] PCRE in 1930.4 (IMAP auth literal overflow attempt), Brian caswell, 01:45

September 08, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:24
[Snort-sigs] false positive for 1:2383 - NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt, Peter A. Peterson II, 20:42
Re: [Snort-sigs] false positive for 1:2383 - NETBIOS SMB-DS DCERPC NTLMSSP asn1 overflow attempt, Brian, 19:52
Re: [Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!, Jose Maria Lopez, 18:11
[Snort-sigs] P2P eDonkey Signatures, Sam Evans, 18:01
Re: [Snort-sigs] PCRE in 1930.4 (IMAP auth literal overflow attempt), Brian, 17:51
Re: [Snort-sigs] SSH Scans, Matt Jonkman, 16:30
Re: [Snort-sigs] SSH Scans, Federico Petronio, 15:20
[Snort-sigs] PCRE in 1930.4 (IMAP auth literal overflow attempt), nnposter, 14:29
[Snort-sigs] Avoidance of 2665.1 (IMAP login literal format string attempt), nnposter, 14:09
[Snort-sigs] Avoidance of 2664.1 (IMAP login format string attempt), nnposter, 14:09
Re: [Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!, Chich Thierry, 10:37
Re: [Snort-sigs] DameWare rule, Matt Jonkman, 09:37
Re: [Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!, John Duksta, 09:27
Re: [Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!, Rocio Alfonso Pita, 08:47
[Snort-sigs] DameWare rule, Ole-Martin, 08:06
[Snort-sigs] UPDATE TO BLEEDINGSNORT RULESETS!!!!, Matt Jonkman, 03:04

September 07, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:42
[Snort-sigs] snort-rules update @ Tue Sep 7 18:15:41 2004, bmc, 20:01
[Snort-sigs] snort-rules update @ Tue Sep 7 16:15:38 2004, bmc, 17:50
Re: [Snort-sigs] False positive: zincite, Matt Jonkman, 14:09
Re: [Snort-sigs] False positive: zincite, Matt Jonkman, 12:58
Re: [Snort-sigs] False positive: zincite, twebster, 12:18

September 06, 2004

[Snort-sigs] More questions re: logging and formatting, Sconeboy The Magnificent, 11:28
[Snort-sigs] Pb with rule 2000346, Chich Thierry, 11:28
[Snort-sigs] False positive: zincite, Chich Thierry, 10:58
[Snort-sigs] typot false positives?, Joerg Weber, 09:17

September 05, 2004

Re: [Snort-sigs] Using snort to view/log MSN traffic, Jose Maria Lopez, 18:07
Re: [Snort-sigs] Using snort to view/log MSN traffic, Matt Jonkman, 17:07
Re: [Snort-sigs] Using snort to view/log MSN traffic, Matthew Watchinski, 14:24
[Snort-sigs] Using snort to view/log MSN traffic, Sconeboy The Magnificent, 09:20

September 03, 2004

Re: [Snort-sigs] 3 new rules, Jason Haar, 22:55
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 22:55
Re: [Snort-sigs] 3 new rules, Joseph Gama, 19:03
Re: [Snort-sigs] 3 new rules, Brian, 18:53
[Snort-sigs] 3 new rules, Joseph Gama, 18:23
Re: [Snort-sigs] Re: [Snort-users] VNC Failed Login, sekure, 10:50

September 02, 2004

Re: [Snort-sigs] Re: [Snort-users] VNC Failed Login, Nigel Houghton, 21:34
Re: [Snort-sigs] New idea in change tracking for nets, Frank Knobbe, 21:24
Re: [Snort-sigs] New idea in change tracking for nets, Frank Knobbe, 21:14
[Snort-sigs] Re: [Snort-users] VNC Failed Login, Frank Knobbe, 21:03
[Snort-sigs] phishing, etc, Joseph Gama, 20:43
[Snort-sigs] Re: [Snort-users] VNC Failed Login, Andreas Östling, 19:43
[Snort-sigs] VNC Failed Login, sekure, 16:51
Re: [Snort-sigs] Snorting gzip encoded http source code, Jose Maria Lopez, 15:31
Re: [Snort-sigs] New idea in change tracking for nets, Jason Haar, 02:15
Re: [Snort-sigs] Snorting gzip encoded http source code, Jason Haar, 02:15

September 01, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, matt, 23:03
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 17:11
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 17:01
RE: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 15:50
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Jose Maria Lopez, 15:50
Re: [Snort-sigs] secure connection to bleedingsnort.com, John Nagro, 12:08
Re: [Snort-sigs] New idea in change tracking for nets, Stef, 11:37
Re: [Snort-sigs] New idea in change tracking for nets, Matt Jonkman, 11:37
Re: [Snort-sigs] New idea in change tracking for nets, Matt Jonkman, 11:17
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Andreas Östling, 09:16
RE: [Snort-sigs] Bleedingsnort.com Daily Update, James Ashton, 08:36
[Snort-sigs] Bleedingsnort.com Daily Update, matt, 07:46
Re: [Snort-sigs] New idea in change tracking for nets, Brian Howard, 05:35
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Hugo van der Kooij, 03:14
Re: [Snort-sigs] New idea in change tracking for nets, Frank Knobbe, 03:14
[Snort-sigs] New idea in change tracking for nets, Matt Jonkman, 02:13
Re: [Snort-sigs] secure connection to bleedingsnort.com, James Riden, 00:12