Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

December 31, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:08

December 30, 2004

Re: [Snort-sigs] Failed Attempts, Matt Jonkman, 14:03
Re: [Snort-sigs] Santy (sort of ) doesnt trigger any rule, Matt Jonkman, 13:53
[Snort-sigs] Failed Attempts, justice737@excite.com, 13:13
[Snort-sigs] Failed Login Attempts, justice737@excite.com, 13:03
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 12:22
RE: [Snort-sigs] Santy (sort of ) doesnt trigger any rule, M. Shirk, 11:12
[Snort-sigs] Santy (sort of ) doesnt trigger any rule, Guy Marcenac, 07:50

December 29, 2004

[Snort-sigs] Ruleset changes at Bleedingsnort.com, Matt Jonkman, 18:35
Re: [Snort-sigs] flowbits error, Jose Maria Lopez, 09:31

December 28, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:07
Re: [Snort-sigs] flowbits error, Charles Heselton, 17:45
Re: [Snort-sigs] flowbits error, Judy Novak, 16:54
[Snort-sigs] flowbits error, Charles Heselton, 14:03

December 27, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17

December 26, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:13
RE: [Snort-sigs] Hello, Harper, Patrick, 02:02

December 25, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:10
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Will Metcalf, 22:50
[Snort-sigs] Hello, Calvin, 22:40

December 23, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:08

December 22, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17

December 21, 2004

[Snort-sigs] False +ve for IMAP PCT Client_Hello overflow attempt: Sig ID 2517, Russell Fulton, 23:56
Re: [Snort-sigs] Santy/phpBB rules, Frank Knobbe, 22:35
[Snort-sigs] Santy/phpBB rules, M. Shirk, 22:15
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:44
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Matt Jonkman, 19:03
Re: [Snort-sigs] Loophole Server, Nigel Houghton, 17:02
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Matt Jonkman, 15:52
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Will Metcalf, 15:42
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Matt Jonkman, 15:11
Re: [Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Olaf Schreck, 14:31
[Snort-sigs] Compilable SPADE/Snort 2.3.0RC2 Tarball, Matt Jonkman, 03:46
Re: [Snort-sigs] Loophole Server, Nigel Houghton, 02:56
[Snort-sigs] Loophole Server, Ron Jenkins, 00:45

December 20, 2004

Re: [Snort-sigs] First attempt at writing a sig, Alex Kirk, 11:39
Re: [Snort-sigs] First attempt at writing a sig, Andreas Östling, 05:55
Re: [Snort-sigs] First attempt at writing a sig, Russell Fulton, 04:24

December 19, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:09
[Snort-sigs] Bleeding Snort CVS available via RSS, Matt Jonkman, 14:13

December 18, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:16

December 17, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:16
RE: [Snort-sigs] First attempt at writing a sig, Lance Boon, 18:24
RE: [Snort-users] RE: [Snort-sigs] First attempt at writing a sig, Lance Boon, 18:14
Re: [Snort-sigs] First attempt at writing a sig, Matt Jonkman, 17:53
RE: [Snort-sigs] First attempt at writing a sig, Lance Boon, 17:33
RE: [Snort-sigs] First attempt at writing a sig, Hogan, Adam (A.W.), 17:33
RE: [Snort-sigs] First attempt at writing a sig, Lance Boon, 17:33
Re: [Snort-sigs] First attempt at writing a sig, Matt Jonkman, 17:23
[Snort-sigs] First attempt at writing a sig, Lance Boon, 17:13
Re: [Snort-sigs] FPs on bleeding iscbaddness6 sid:2000557 rev 2, Matt Jonkman, 17:13
[Snort-sigs] FPs on bleeding iscbaddness6 sid:2000557 rev 2, Matt Ostiguy, 13:31
[Snort-sigs] False positives for rule 1792, Mark Carrington, 07:09

December 16, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:16
[Snort-sigs] snort-rules update @ Thu Dec 16 10:43:49 2004, bmc, 22:04
Re: [Snort-sigs] Skype, Matt Jonkman, 22:04
[Snort-sigs] Skype, Chich Thierry, 22:04
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:04
[Snort-sigs] Snort Alert 1:3003:0 NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt, Taylor, Graham, 22:03
Re: [Snort-sigs] TCP sweeps, Frank Knobbe, 22:03
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:02
[Snort-sigs] Bleeding Snort updates and a new ruleset, Matt Jonkman, 22:02
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:02
Re: [Snort-sigs] TCP sweeps, Matt Jonkman, 22:02
[Snort-sigs] False +ves for SID 2657 :EXPLOIT SSLv2 Client_Hello with pad Challenge Length overflow attempt, Russell Fulton, 22:02
Re: [Snort-sigs] TCP sweeps, James Riden, 22:02
RE: [Snort-sigs] TCP sweeps, Matt Jonkman, 22:01

December 02, 2004

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 10:34
Re: [Snort-sigs] TCP sweeps, James Riden, 10:23
Re: [Snort-sigs] we need support, James Riden, 10:23
RE: [Snort-sigs] TCP sweeps, Frank Knobbe, 10:12
RE: [Snort-sigs] TCP sweeps, Hazel, Scott A., 10:12
Re: [Snort-sigs] TCP sweeps, Matt Jonkman, 10:12
RE: [Snort-sigs] TCP sweeps, Hazel, Scott A., 10:12
RE: [Snort-sigs] TCP sweeps, Matt Jonkman, 10:12
RE: [Snort-sigs] we need support, James Lay, 10:12
Re: [Snort-sigs] we need support, Alex Kirk, 10:12
[Snort-sigs] we need support, SHAFFIE, 10:02
[Snort-sigs] TCP sweeps, eltra1n, 10:02
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 09:41
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 09:31
[Snort-sigs] Sig 2664 false positive, Jeff Kell, 08:51
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:40
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 08:30
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 08:00
[Snort-sigs] UDP Strangeness Signatures -- ISC, Matt Jonkman, 07:50
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 07:40
Re: [Snort-sigs] Fw: [Snort-users] negation symbol, Nigel Houghton, 06:48
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 06:48
Fw: [Snort-users] negation symbol, reynald, 06:38
Re: [Snort-sigs] False positive in 1777.6 (FTP EXPLOIT STAT * dos attempt), nnposter, 06:37
Re: [Snort-sigs] False positive in 1777.6 (FTP EXPLOIT STAT * dos attempt), Brian, 06:37
[Snort-sigs] False positives for Napster signatures, Sam Evans, 06:37
[Snort-sigs] False positive in 1777.6 (FTP EXPLOIT STAT * dos attempt), nnposter, 06:37
Re: [Snort-sigs] Rule FP, possible fix, warwick ackfin, 05:23
[Snort-sigs] false positive, Chris Luhman, 05:01
[Snort-sigs] Rule FP, possible fix, Giles Coochey, 05:01
[Snort-sigs] Fw: need one help..., ALERT, 05:01
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 04:29
[Snort-sigs] WEB-IIS w3who.dll overflow attempt, nnposter, 04:05
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 03:51
Re: [Snort-sigs] Suggestions for new attack response rules, Nick, 03:41
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 03:30
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 03:30
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 03:30
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 03:30
[Snort-sigs] [Snort-users] Snortcenter and updating rules, John Hally, 03:09
Re: [Snort-sigs] Suggestions for new attack response rules, Nick, 02:58
Re: [Snort-sigs] need one help..., Alex Kirk, 02:58
[Snort-sigs] need one help..., ALERT, 02:57
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 02:57
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 02:26
[Snort-sigs] RxBot and IRC traffic, James Riden, 02:16
Re: [Snort-sigs] Suggestions for new attack response rules, Nick, 01:55
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 01:45
Re: [Snort-sigs] Suggestions for new attack response rules, Brian caswell, 01:14
Re: [Snort-sigs] Reducing FPs by linking attacks to service versions, Matt Jonkman, 00:54
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:23
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 00:12
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 00:01

December 01, 2004

Re: [Snort-sigs] Suggestions for new attack response rules, Matthew Jonkman, 23:59
[Snort-sigs] false positive snort it 2329 ?, dara, 23:59
[Snort-sigs] Reducing FPs by linking attacks to service versions, root, 23:59
RE: [Snort-sigs] Suggestions for new attack response rules, Esler, Joel - Contractor, 23:49
Re: [Snort-sigs] Suggestions for new attack response rules, Matthew Jonkman, 23:49
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 23:49
Re: [Snort-sigs] Suggestions for new attack response rules, Chris Keladis, 23:49
Re: [Snort-sigs] Suggestions for new attack response rules, Matthew Jonkman, 23:49
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 23:38
Re: [Snort-sigs] netbios rule question, Russell Fulton, 23:28
[Snort-sigs] False positive in 1992.8 (FTP LIST directory traversal attempt), nnposter, 23:17
Re: [Snort-sigs] Suggestions for new attack response rules, Jason, 23:07
[Snort-sigs] Help: ssh intrusion detection rule makes snort stop, nnposter, 22:56
RE: [Snort-sigs] unscribe, Harper, Patrick, 22:56
Re: [Snort-sigs] Help: ssh intrusion detection rule makes snort stop, sekure, 22:45
[Snort-sigs] unscribe, FG12sqTSS, 22:44
[Snort-sigs] Help: ssh intrusion detection rule makes snort stop, Gerd-Christian Michalke, 22:34
RE: [Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 22:34
Re: [Snort-sigs] Microsoft IFrame vulnerability, Chris Mills, 22:34
Re: [Snort-sigs] Microsoft IFrame vulnerability, Matt Jonkman, 22:33
[Snort-sigs] Microsoft IFrame vulnerability, Chris Mills, 22:33
[Snort-sigs] Microsoft IFrame vulnerability, Chris Mills, 22:33
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:02
Re: [Snort-sigs] Suggestions for new attack response rules, Brian, 18:14
[Snort-sigs] Suggestions for new attack response rules, Joe Patterson, 18:04
Re: [Snort-sigs] phpBB remote code execution detection rule (final), Tony Blackmon, 15:52
RE: [Snort-sigs] phpBB remote code execution detection rule (final), M. Shirk, 15:42
RE: [Snort-sigs] phpBB remote code execution detection rule (final), M. Shirk, 15:12
RE: [Snort-sigs] phpBB remote code execution detection rule (final), hchemin, 14:31
Re: [Snort-sigs] phpBB remote code execution detection rule (final), Alex Kirk, 12:10
[Snort-sigs] DC++ p2p rules?, Tony Hernandez, 12:00
Re: [Snort-sigs] Re: netbios rules, Brian, 11:50
[Snort-sigs] phpBB remote code execution detection rule (final), Federico Petronio, 11:50
Re: [Snort-sigs] netbios rule question, Alex Kirk, 11:20
[Snort-sigs] netbios rule question, RKejariwal, 10:49
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 02:46
[Snort-sigs] Re: netbios rules, grep, 02:45
[Snort-sigs] snort-rules update @ Mon Nov 29 22:15:39 2004, bmc, 02:44