Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

March 31, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:17
Re: [Snort-sigs] Any new rules coming out of snort.org?, Hugo van der Kooij, 19:14
Re: [Snort-sigs] Any new rules coming out of snort.org?, Frank Knobbe, 17:01
Re: [Snort-sigs] Any new rules coming out of snort.org?, Frank Knobbe, 17:00
Re: [Snort-sigs] Any new rules coming out of snort.org?, Nigel Houghton, 13:34
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 12:43
Re: [Snort-sigs] Any new rules coming out of snort.org?, Geoffrey Sanders, 12:42
Re: [Snort-sigs] Any new rules coming out of snort.org?, Tom Currie, Consultant, 11:51
Re: [Snort-sigs] Any new rules coming out of snort.org?, Frank Knobbe, 09:38
Re: [Snort-sigs] Any new rules coming out of snort.org?, Frank Knobbe, 00:39
Re: [Snort-sigs] Any new rules coming out of snort.org?, Nigel Houghton, 00:29

March 30, 2005

Re: [Snort-sigs] Any new rules coming out of snort.org?, Matt Kettler, 18:55
Re: [Snort-sigs] Any new rules coming out of snort.org?, Geoffrey Sanders, 14:02
[Snort-sigs] Any new rules coming out of snort.org?, Tom Currie, Consultant, 10:29

March 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:12

March 28, 2005

[Snort-sigs] VRT Certified Rules Update, Matthew Watchinski, 20:47

March 25, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15

March 24, 2005

[Snort-sigs] variable of subnets replacing rules, Lee Clemens, 21:24
Re: [Snort-sigs] False positive sid:498, Frank Knobbe, 19:12
Re: [Snort-sigs] False positive sid:498, Paul Schmehl, 18:52
Re: [Snort-sigs] False positive sid:498, Frank Knobbe, 18:31
Re: [Snort-sigs] False positive sid:498, Paul Schmehl, 13:48
Re: [Snort-sigs] False positive sid:498, Mike Pomraning, 02:23
smtp flowbits (Was: Re: [Snort-sigs] False positive sid:498), Mike Pomraning, 02:03

March 23, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:11
[Snort-sigs] PHILIP LJUNGBERG heeft verlof., philip . ljungberg, 21:21
Re: [Snort-sigs] False positive sid:498, Frank Knobbe, 21:11
Re: [Snort-sigs] False positive sid:498, Mike Pomraning, 16:37
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 13:25

March 22, 2005

[Snort-sigs] False positive sid:498, Paul Schmehl, 15:25
RE: [Snort-sigs] False positive - sid 1365, Paul Schmehl, 14:04
RE: [Snort-sigs] False positive - sid 1365, Ofer Shezaf, 11:32
RE: [Snort-sigs] False positive - sid 1365, Ofer Shezaf, 11:32
RE: [Snort-sigs] False positive - sid 1365, Mike Pomraning, 02:28

March 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:17
RE: [Snort-sigs] Proposed improvement for SID 553, nnposter, 20:05
[Snort-sigs] Proposed improvement for SID 553, Frank Knobbe, 19:25
Re: [Snort-sigs] Snort Rules reply, Jose Maria Lopez Hernandez, 08:29
[Snort-sigs] Snort Rules reply, Kenneth Lobato Lastra (Halkon), 08:28

March 20, 2005

RE: [Snort-sigs] Bleeding snort rules and snortcenter2, John Hally, 17:32

March 19, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:15
Re: [Snort-sigs] False positive - sid 1365, Jason, 17:43
Re: [Snort-sigs] Another false positive - sid:2435, Jason, 17:23
[Snort-sigs] rules vs. thresholding, Lee Clemens, 17:02

March 18, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:14
Re: [Snort-sigs] Another false positive - sid:2435, Chris Keladis, 21:24
Re: [Snort-sigs] False positive - sid 1365, Mike Pomraning, 20:54
Re: [Snort-sigs] Another false positive - sid:2435, Paul Schmehl, 20:14
Re: [Snort-sigs] Another false positive - sid:2435, Scott Dexter, 20:03
[Snort-sigs] Another false positive - sid:2435, Paul Schmehl, 20:03
Re: [Snort-sigs] False positive - sid:2303, Paul Schmehl, 19:53
[Snort-sigs] False positive - sid:1928, Paul Schmehl, 19:43
Re: [Snort-sigs] False positive - sid:2303, Bamm Visscher, 19:03
RE: [Snort-sigs] False positive - sid:2303, Paul Schmehl, 18:43
[Snort-sigs] False positive - sid:2435, Paul Schmehl, 18:33
RE: [Snort-sigs] False positive - sid:2303, SRH-Lists, 18:33
[Snort-sigs] False positive - sid;2565, Paul Schmehl, 18:33
Re: [Snort-sigs] False positive - sid 1365, Mark Tombaugh, 18:23
[Snort-sigs] False positive - sid:2303, Paul Schmehl, 18:23
[Snort-sigs] False positive - sid:1333, Paul Schmehl, 18:13
Re: [Snort-sigs] False positive - sid 1365, Paul Schmehl, 17:32
[Snort-sigs] False positive - sid:1344, Paul Schmehl, 17:22
Re: [Snort-sigs] False positive - sid 1365, Chris Kronberg, 16:42
RE: [Snort-sigs] False positive - sid 1365, Zachary Lanier, 16:42
[Snort-sigs] False positive - sid 1365, Paul Schmehl, 16:32
[Snort-sigs] web spam rules?, Hugo van der Kooij, 13:50
Re: [Snort-sigs] Bleeding snort rules and snortcenter2, Wes Young, 12:19
[Snort-sigs] Bleeding snort rules and snortcenter2, John Hally, 12:09
[Snort-sigs] Cobalt raq qpopper authentication failure, Chas Tomlin, 08:28

March 17, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:14

March 16, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:13

March 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:14
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:32
RE: [Snort-sigs] Unsubscribe, Esler, Joel CNTR/Sytex, 21:32
RE: [Snort-sigs] Unsubscribe, Joe Patterson, 21:32
[Snort-sigs] Open Source Snort Rules Consortium (OSSRC), Martin Roesch, 21:30
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:30
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:29
Re: [Snort-sigs] Unsubscribe, Nick Hatch, 21:29
[Snort-sigs] Unsubscribe, Hazel, Scott A., 21:29
[Snort-sigs] Upcoming changes for Bleeding Snort, Matt Jonkman, 21:29
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:29
Re: [Snort-sigs] FP: BLEEDING-EDGE MS-SQL DOS bouncing packets / DOS attempt (08), Matt Jonkman, 21:29
[Snort-sigs] FP: BLEEDING-EDGE MS-SQL DOS bouncing packets / DOS attempt (08), James Riden, 21:28
[Snort-sigs] FP in 1233 and 2435: possible general prob. w. content checks for filename?, James Affeld, 21:28
Re: [Snort-sigs] False positive: FTP passwd retrieval attempt - sid:356, nnposter, 21:27
[Snort-sigs] False positive: FTP passwd retrieval attempt - sid:356, James Riden, 21:27
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:27
[Snort-sigs] RE: rpc endpoint mapper, Lee Clemens, 21:27
[Snort-sigs] rpc endpoint mapper, Lee Clemens, 21:27
[Snort-sigs] Re: [Snort-users] Snort 2.3.1 released!, Matt Jonkman, 21:26
Re: [Snort-sigs] Escaping for #'s changed in 2.3.1?, Jeff Kell, 21:26
RE: [Snort-sigs] Escaping for #'s changed in 2.3.1?, Joe Patterson, 21:26
[Snort-sigs] Escaping for #'s changed in 2.3.1?, Matt Jonkman, 21:26
[Snort-sigs] Important Query, Rohit Khosla, 21:25
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:25
[Snort-sigs] ISystemActivator Call_id 127 to port 1025 vs sid:2192 (port 139) ?, Lee Clemens, 21:24
Re: [Snort-sigs] False positive with Win2K3 RESKIT tool against sid:2351, Brian Caswell, 21:24
[Snort-sigs] False positive with Win2K3 RESKIT tool against sid:2351, Jason Haar, 21:24
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 21:24
RE: [Snort-sigs] phpbb session exploit, Matt Jonkman, 21:22
[Snort-sigs] phpbb session exploit, Chas Tomlin, 21:19
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:47
Re: [Snort-sigs] Overhead caused by PCRE?, marc norton, 20:46
Re: [Snort-sigs] FLOWBITS ERROR, marc norton, 20:46
[Snort-sigs] A doubt about snort sid 1932, Wang Hui, 20:46
[Snort-users] RE: SPADE project, Matt Jonkman, 20:46
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:45
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:44

March 05, 2005

[Snort-users] Re: SPADE project, Simon Biles, 05:43

March 04, 2005

Re: [Snort-sigs] FLOWBITS ERROR, Brian, 13:04
Re: [Snort-sigs] False +ve for IMAP PCT Client_Hello overflow attempt: Sig ID 2517, Brian, 12:54
[Snort-sigs] [Fwd: Sourcefire Licensing and Bleeding Snort], Matt Jonkman, 12:44
RE: [Snort-sigs] alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"ICMP PING"; icode:0; itype:8; classtype:misc-ac, Kevin Wood, 12:04

March 03, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:17
[Snort-sigs] alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"ICMP PING"; icode:0; itype:8; classtype:misc-ac, Jon Banks, 18:55
Re: [Snort-sigs] Overhead caused by PCRE?, Edin Dizdarevic, 05:38
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 01:57

March 02, 2005

Re: [Snort-sigs] help with 2 rules, Matt Jonkman, 19:03
Re: [Snort-sigs] help with 2 rules, Matt Kettler, 18:53
Re: [Snort-sigs] help with 2 rules, BoFH, 18:43
[Snort-sigs] help with 2 rules, Rowland, Krisa W ERDC-ITL-MS Contractor, 18:43
RE: [Snort-sigs] help with 2 rules, Schott, Erik J Mr ANOSC/FCBS, 18:33
Re: [Snort-sigs] Rules licensing changes, Sam Evans, 17:12
[Snort-sigs] Rules licensing changes, Martin Roesch, 16:42
Re: [Snort-sigs] FLOWBITS ERROR, Matt Jonkman, 13:30
Re: [Snort-sigs] Overhead caused by PCRE?, Brian, 13:30
Re: [Snort-sigs] Flowbits error on the latest Sig's?, Matthew Watchinski, 13:30
Re: [Snort-sigs] FLOWBITS ERROR, Matt Jonkman, 12:50
[Snort-sigs] snort-rules update @ Tue Mar 1 14:02:00 2005, bmc, 12:30
Re: [Snort-sigs] FLOWBITS ERROR, Matt Jonkman, 11:49
RE: [Snort-sigs] FLOWBITS ERROR, Bristol, Gary L., 11:49
[Snort-sigs] FP on "NETBIOS name query overflow attempt UDP", Jason Haar, 10:19
Re: [Snort-sigs] FLOWBITS ERROR, Zultan , 10:19
Re: [Snort-sigs] FLOWBITS ERROR, Brian Caswell, 00:55

March 01, 2005

[Snort-sigs] FLOWBITS ERROR, Zultan , 22:54
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:34
[Snort-sigs] Flowbits error on the latest Sig's?, Bristol, Gary L., 21:54
[Snort-sigs] Re: [Snort-users] Overhead caused by PCRE?, Matt Kettler, 18:52