Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

January 31, 2005

Re: [Snort-sigs] Updating bleeding.rules, BoFH, 20:20
[Snort-sigs] False positive on sid:2109 POP3 TOP overflow attempt, Ben Dugdale, 20:10
[Snort-sigs] RE: Snort-sigs digest, Vol 1 #1265 - 1 msg, Sahni,Neeraj, 18:59
Re: [Snort-sigs] False alert for SID 1:1769, Nigel Houghton, 12:25
[Snort-sigs] False alert for SID 1:1769, p3consulting, 11:15

January 30, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:16

January 28, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:36
[Snort-sigs] Downloadable 2.3.0 rules?, Bristol, Gary L., 21:45
[Snort-sigs] False Positive, 119:4 (htp_inspect: BARE BYTE UNICODE ENCODING) -update, David Morris, 17:33
Re: [Snort-sigs] Bleedingsnort.com Daily Update, Matt Jonkman, 15:32
RE: [Snort-sigs] Bleedingsnort.com Daily Update, John Hally, 15:32
[Snort-sigs] Duplicate sid entry in Snort-rules snapshot, David Maciejak, 14:32
[Snort-sigs] Snort rule 613 False Positive, gandalf, 13:31
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 03:06

January 26, 2005

[Snort-sigs] Mistake in rule 2196, Ofer Shezaf, 10:56
[Snort-sigs] Awstats Remote Code Execution, Chas Tomlin, 02:42
Re: [Snort-sigs] virus rules, Matt Jonkman, 00:21
RE: [Snort-sigs] virus rules, John Hally, 00:11
Re: [Snort-sigs] virus rules, Matt Jonkman, 00:11

January 25, 2005

Re: [Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Frank Knobbe, 23:41
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:10
[Snort-sigs] virus rules, John Hally, 22:00
Re: [Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Russell Fulton, 20:50
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Brian, 20:09
Re: [Snort-sigs] Awstats Remote Code Execution, Frank Knobbe, 16:17
Re: [Snort-sigs] Awstats Remote Code Execution, Nigel Houghton, 16:17
Re: [Snort-sigs] Awstats Remote Code Execution, Frank Knobbe, 15:57
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Brian, 12:45
Re: [Snort-sigs] L3Retriever false positives, Nigel Houghton, 09:24
[Snort-sigs] L3Retriever false positives, Javier Fernandez-Sanguino, 08:24
Re: [Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Frank Knobbe, 07:03
Re: [Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Paul Schmehl, 06:53
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Matt Jonkman, 05:43
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), nnposter, 04:42
[Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Russell Fulton, 01:31

January 24, 2005

Re: [Snort-sigs] false +ves on IMAP fetch overflow attempt: sid 3070, Nigel Houghton, 23:29
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Nigel Houghton, 21:07
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Matt Kettler, 20:37
Re: [Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), Brian, 13:03
[Snort-sigs] Hi, Ks, Mithun (Corporate), 12:23

January 23, 2005

Re: [Snort-sigs] More on RxBot and IRC traffic, Tom Fischer, 10:20
[Snort-sigs] False negative in 3087.1 (WEB-IIS w3who.dll buffer overflow attempt), nnposter, 01:37

January 22, 2005

Re: [Snort-sigs] More on RxBot and IRC traffic, Chris Harrington, 17:23

January 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15
Re: [Snort-sigs] More on RxBot and IRC traffic, James Riden, 22:05
Re: [Snort-sigs] More on RxBot and IRC traffic, James Riden, 21:45
Re: [Snort-sigs] More on RxBot and IRC traffic, Tom Fischer, 10:09

January 19, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:13
Re: [Snort-sigs] False positive in 3070.1 (IMAP fetch overflow attempt), Matthew Watchinski, 21:02
[Snort-sigs] False positive in 1861.9 (WEB-MISC Linksys router default username and password login attempt), nnposter, 20:32
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:40
[Snort-sigs] False positive in 3070.1 (IMAP fetch overflow attempt), nnposter, 18:40
[Snort-sigs] False positive in 3065.1 (IMAP append literal overflow attempt), nnposter, 18:40
Re: [Snort-sigs] False Positive, nnposter, 18:39
[Snort-sigs] False Positive, fmonkey, 18:39
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:39
[Snort-sigs] snort-rules update @ Mon Jan 17 19:15:40 2005, bmc, 18:39
Re: [Snort-sigs] False Positive, Nigel Houghton, 18:38
Re: [Snort-sigs] RE: Apache Proxy, Alex Kirk, 18:38
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:37
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:37
Re: [Snort-sigs] Re: Question about bleeding Netsky rule?, James Riden, 18:37
[Snort-sigs] Re: Question about bleeding Netsky rule?, James Riden, 18:37
Re: [Snort-sigs] More on RxBot and IRC traffic, Matt Jonkman, 18:37
[Snort-sigs] RE: Apache Proxy, Tyler Hudak, 18:37
[Snort-sigs] Re: Question about bleeding Netsky rule?, Matt Jonkman, 18:37
[Snort-sigs] More on RxBot and IRC traffic, James Riden, 18:37
[Snort-sigs] Question about bleeding Netsky rule?, James Riden, 18:37
[Snort-sigs] Belated New Years Gushing, Matt Jonkman, 18:37
Re: [Snort-sigs] Re: Question about bleeding Netsky rule?, Matt Jonkman, 18:37
Re: [Snort-sigs] Re: Question about bleeding Netsky rule?, Chris Keladis, 18:37
[Snort-sigs] (no subject), Adam Hogan, 18:37
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:37
RE: [Snort-sigs] Apache Proxy, Joe Patterson, 18:36
RE: [Snort-sigs] Apache Proxy, Joe Patterson, 18:36
RE: [Snort-sigs] RE: Apache Proxy, Hudak, Tyler, 18:36
Re: [Snort-sigs] Apache Proxy, Alex Kirk, 18:36
Re: [Snort-sigs] RE: Apache Proxy, Paul Schmehl, 18:36
Re: [Snort-sigs] Apache Proxy, Alex Kirk, 18:35
Re: [Snort-sigs] Apache Proxy, Chris Kronberg, 18:35
Re: [Snort-sigs] RE: Apache Proxy, Matt Jonkman, 18:35
[Snort-sigs] RE: Apache Proxy, Hudak, Tyler, 18:35
Re: [Snort-sigs] Apache Proxy, Matt Jonkman, 18:35
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:35
[Snort-sigs] Apache Proxy, Adam Hogan, 18:35
[Snort-sigs] False Positive, Pendleton, Adam (HQ-LD070)[SAIC], 18:34
[Snort-sigs] snortcenter2 and updates of bleeding snort rulesets, Brandon Rodak, 18:34
Re: [Snort-sigs] snortcenter2 and updates of bleeding snort rulesets, Jason Alexander, 18:34
Re: [Snort-sigs] snortcenter2 and updates of bleeding snort rulesets, Wes Young, 18:34
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:34
[Snort-sigs] snort-rules update @ Wed Jan 12 11:15:52 2005, bmc, 18:33
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:32

January 11, 2005

[Snort-sigs] sid 2590 false positives, Stewart James, 11:52

January 10, 2005

Re: [Snort-sigs] A Snort Problem, Matt Kettler, 23:07
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:07
[Snort-sigs] Re: [Snort-devel] A Snort Problem, Rich Adamson, 12:52
[Snort-sigs] A Snort Problem, arash azarfar, 12:12

January 09, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17

January 08, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:23

January 07, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:02

January 06, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:31

January 05, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:14
[Snort-sigs] RE: [Snort-users] SFS 1.0.2 released, Ron Jenkins, 20:03
Re: [Snort-users] RE: [Snort-sigs] ports, Jason, 19:12
RE: [Snort-users] RE: [Snort-sigs] ports, Esler, Joel - Contractor, 16:10
RE: [Snort-users] RE: [Snort-sigs] ports, Joe Patterson, 16:00
Re: [Snort-users] RE: [Snort-sigs] ports, Jason, 15:39
[Snort-users] SFS 1.0.2 released, Ophir Rachman, 15:29
RE: [Snort-users] RE: [Snort-sigs] ports, Joe Patterson, 14:08
Re: [Snort-users] RE: [Snort-sigs] ports, Jason, 13:57
RE: [Snort-sigs] ports, Joe Patterson, 13:37
RE: [Snort-sigs] ports, Esler, Joel - Contractor, 10:15
Re: [Snort-sigs] ports, Hugo van der Kooij, 03:33
[Snort-sigs] ports, reynald, 01:02

January 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:21
[Snort-sigs] sample for MS04-045, John Johnson, 11:36

January 03, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:11
Re: [Snort-sigs] excessive simultaneous connections like iplimit ??, sekure, 17:49
Re: [Snort-sigs] excessive simultaneous connections like iplimit ??, Matt Jonkman, 16:18
Re: [Snort-sigs] excessive simultaneous connections like iplimit ??, paddy, 16:08
Re: [Snort-sigs] excessive simultaneous connections like iplimit ??, sekure, 14:57
[Snort-sigs] excessive simultaneous connections like iplimit ??, paddy, 14:47