Network Security Archives

May 31, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:07
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 21:56
Re: [Snort-sigs] Possible FP for rules 2329, precision, Russell Fulton, 20:24
[Snort-sigs] Possible FP for rules 2329, precision, Guillaume Arcas, 20:24
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:24
[Snort-sigs] Possible FP for rules 2329, Guillaume Arcas, 20:23
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:23

May 29, 2005

[Snort-sigs] Anyone got a rule for the Google Web Accelerator yet?, Jason Haar, 19:50
Re: [Snort-sigs] [snort] why disabled "BAD TRAFFIC data in TCP SYN packet" rules on snort v2.3.3 (and before) ?, Joel Esler, 13:06
Re: [Snort-sigs] False Positives: BACKDOOR NetMetro File List, Joel Esler, 13:06

May 26, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:10
[Snort-sigs] FP for IMAP login format string attempt sid 2664, Russell Fulton, 21:29
Re: [Snort-sigs] Comments for rules, Russell Fulton, 19:28

May 25, 2005

Re: [Snort-sigs] FP for BLEEDING-EDGE TROJAN IRC Bot DDoS command, Erik Fichtner, 20:58
[Snort-sigs] FP for BLEEDING-EDGE TROJAN IRC Bot DDoS command, Russell Fulton, 20:07
[Snort-sigs] CoreMarks Code Donated by Sensory Networks!, Matt Jonkman, 01:49

May 24, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:28
Re: [Snort-sigs] Comments for rules, Matt Jonkman, 14:44
Re: [Snort-sigs] Comments for rules, João Mota, 07:40

May 23, 2005

Re: [Snort-sigs] False Positive => GEN:SID 1:2002, Joel Esler, 21:06
Re: [Snort-sigs] Comments for rules, Matt Jonkman, 12:42
[Snort-sigs] Comments for rules, João Mota, 07:09

May 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17
[Snort-sigs] False Positive => GEN:SID 1:2002, Alessandro Fiorotto, 07:00

May 20, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:07
Re: [Snort-sigs] ftpbounce?, Brian Caswell, 11:31
Re: [Snort-sigs] False Positives: BACKDOOR NetMetro File List, Matt Ostiguy, 11:11
[Snort-sigs] False Positives: BACKDOOR NetMetro File List, Chich Thierry, 10:01
[Snort-sigs] FP for sid:2570, Russell Fulton, 02:37
[Snort-sigs] ftpbounce?, Jeff Kell, 02:17
Re: [Snort-sigs] [snort] why disabled "BAD TRAFFIC data in TCP SYN packet" rules on snort v2.3.3 (and before) ?, Frank Knobbe, 00:16

May 19, 2005

Re: [Snort-sigs] [snort] why disabled "BAD TRAFFIC data in TCP SYN packet" rules on snort v2.3.3 (and before) ?, Russell Fulton, 20:14
Re: [Snort-sigs] False +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCC Buffer Overflow sid:2000329, Matt Jonkman, 18:34
[Snort-sigs] [snort] why disabled "BAD TRAFFIC data in TCP SYN packet" rules on snort v2.3.3 (and before) ?, rmkml, 10:59

May 18, 2005

[Snort-sigs] False +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCC Buffer Overflow sid:2000329, Russell Fulton, 21:22
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 18:41
[Snort-sigs] Multi-Kulturell = Multi-Kriminell, cmg, 18:11
Re: [Snort-sigs] Comments for 3196, Brian, 17:20
[Snort-sigs] Comments for 3196, Sean Hendrickson, 17:10

May 17, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:11
Re: [Snort-sigs] Logging packet content?, João Mota, 08:23
[Snort-sigs] Logging packet content?, Rich Adamson, 00:00

May 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:08

May 14, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:18

May 13, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:09

May 12, 2005

[Snort-users] Re: [Snort-sigs] Snort ClamAV for 2.3.3, Will Metcalf, 17:33

May 11, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:15
Re: [Snort-sigs] Rule 2480 : byte_jump doesn't make sense., Erik de Castro Lopo, 21:14
[Snort-sigs] FALSE POSITIVE, Alessandro Fiorotto, 13:59
[Snort-sigs] FALSE POSITIVE, Alessandro Fiorotto, 13:58
Re: [Snort-sigs] Rule 2480 : byte_jump doesn't make sense., Brian, 12:27

May 10, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:19
Re: [Snort-sigs] Rule 2480 : byte_jump doesn't make sense., Erik de Castro Lopo, 20:48
Re: [Snort-sigs] ICMP, Matt Kettler, 19:27
Re: [Snort-sigs] Rule 2480 : byte_jump doesn't make sense., Brian, 12:33
[Snort-sigs] SID 1653 : WEB-CGI campus access, rule completely wrong, ryan, 11:02
Re: [Snort-sigs] Possible improvements to pop3 rules., pr00f, 11:02
[Snort-sigs] ICMP, Garth Grayson, 11:02

May 09, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17
[Snort-sigs] Rule 2480 : byte_jump doesn't make sense., Erik de Castro Lopo, 22:27
Re: [Snort-sigs] Snort ClamAV for 2.3.3, Jason Haar, 14:42
Re: [Snort-users] Re: [Snort-sigs] Snort ClamAV for 2.3.3, Xavier Cabrera, 14:42
Re: [Snort-sigs] Snort ClamAV for 2.3.3, Erik Fichtner, 14:22
Re: [Snort-sigs] Snort ClamAV for 2.3.3, Jason Haar, 14:02
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Brian, 13:21
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Brian, 13:11
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Brian, 13:01
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Erik Fichtner, 09:59
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Frank Knobbe, 05:27
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Erik de Castro Lopo, 04:17
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Erik de Castro Lopo, 02:36
Re: [Snort-sigs] Strange PCRE usage in standard snort rules, Frank Knobbe, 00:25
[Snort-sigs] Strange PCRE usage in standard snort rules, Erik de Castro Lopo, 00:15

May 06, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:15
[Snort-sigs] Snort ClamAV for 2.3.3, Matt Jonkman, 19:54
Re: [Snort-sigs] rule to detect three strings?, Brian, 13:10

May 05, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:14
Re: [Snort-sigs] rule to detect three strings?, Matt Kettler, 19:12
[Snort-sigs] rule to detect three strings?, Rich Adamson, 19:02
[Snort-sigs] FP on 1493 - WEB-MISC RBS ISP /newuser access, Jeff Kell, 17:01
[Snort-sigs] False pos on WEB-ATTACKS cc command attempt sid:1344; rev:5, John York, 10:57

May 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:11
Re: [Snort-sigs] Possible improvements to pop3 rules., Erik de Castro Lopo, 20:40
Re: [Snort-sigs] Possible improvements to pop3 rules., Frank Knobbe, 18:50
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 17:59
Re: [Snort-sigs] Possible improvements to pop3 rules., Brian, 12:56
Re: [Snort-sigs] Possible improvements to pop3 rules., Jeff Kell, 12:06
Re: [Snort-sigs] Possible improvements to pop3 rules., Frank Knobbe, 11:05
Re: [Snort-sigs] Possible improvements to pop3 rules., Frank Knobbe, 10:45
Re: [Snort-sigs] Possible improvements to pop3 rules., Michael Stone, 10:15
Re: [Snort-sigs] Possible improvements to pop3 rules., Frank Knobbe, 03:32
[Snort-sigs] Possible improvements to pop3 rules., Erik de Castro Lopo, 03:12

May 03, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:10
Re: [Snort-sigs] Two more bleeding snort rules with bad escape sequences., Matt Jonkman, 23:10
Re: [Snort-sigs] Two more bleeding snort rules with bad escape sequences., Erik de Castro Lopo, 22:50
Re: [Snort-sigs] Bad tag directive in bleeding snort rule?, Frank Knobbe, 22:30
Re: [Snort-sigs] Two more bleeding snort rules with bad escape sequences., Frank Knobbe, 22:20
[Snort-sigs] Bad tag directive in bleeding snort rule?, Erik de Castro Lopo, 21:49
[Snort-sigs] Two more bleeding snort rules with bad escape sequences., Erik de Castro Lopo, 21:29
[Snort-sigs] New User Group in Chicago - Meeting on 6/2, Jennifer Steffens, 19:18
Re: [Snort-sigs] More bleeding snort rules with missing semicolon between content and nocase, Frank Knobbe, 09:22
[Snort-sigs] More bleeding snort rules with missing semicolon between content and nocase, Erik de Castro Lopo, 04:20
Re: [Snort-sigs] Bug in sid 2001528 of bleeding-all.rules, Frank Knobbe, 00:39
Re: [Snort-sigs] Bug in current bleeding-all.rules, Erik de Castro Lopo, 00:29
[Snort-sigs] Bug in sid 2001528 of bleeding-all.rules, Erik de Castro Lopo, 00:08

May 02, 2005

Re: [Snort-sigs] Bug in current bleeding-all.rules, Matt Jonkman, 23:58
[Snort-sigs] Bug in current bleeding-all.rules, Erik de Castro Lopo, 23:58
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:08