Snort IDS Signatures Development (thread)

[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1410 - 1 msg, Nick Plante, 2005/06/28
[Snort-sigs] please add ref on multiple sid (snort233b14), rmkml, 2005/06/28
[Snort-sigs] help in implementing react keyword, mukherji rakesh, 2005/06/27
[Snort-sigs] false negative for SID 2386, Lutz Schildt, 2005/06/27
[Snort-sigs] sid: 2486 - false positive and false negatives, Fabio Panigatti, 2005/06/24
[Snort-sigs] multiple change on sid (snort233b14), rmkml, 2005/06/23
[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1400 - 1 msg, Nick Plante, 2005/06/18
[Snort-sigs] Snort.conf Samples Project, Matt Jonkman, 2005/06/16
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 2005/06/15
[Snort-sigs] Question about sid:159, Paul Schmehl, 2005/06/15
[Snort-sigs] SID 3655, 3656 info,, Craig Mueller, 2005/06/15
- Re: [Snort-sigs] SID 3655, 3656 info,, Nigel Houghton, 2005/06/15
[Snort-sigs] Spyware Listening Post Progress, Matt Jonkman, 2005/06/14
[Snort-sigs] sid 272 == sid 273 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] remove bid 0866 on sid 1911 ? (snort233b14), rmkml, 2005/06/14
- Re: [Snort-sigs] remove bid 0866 on sid 1911 ? (snort233b14), Nigel Houghton, 2005/06/14
[Snort-sigs] add ref BID 830 on sid 1936 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] remove bid 0564 on sid 1219 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] add ref MS99034 on sid 272 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] add ref MS99038 on sid 500/501 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] add ref bid 19980908 on sid 1604 (snort233b14), rmkml, 2005/06/14
[Snort-sigs] add ref BID 770 on sid 1507 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] add ref MS99013 on sid 1037 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] sid 1847 != cve-1999-0643 ? (snort233b14), rmkml, 2005/06/14
[Snort-sigs] Snort - problem, eirinina, 2005/06/12
- Re: [Snort-sigs] Snort - problem, Joel Esler, 2005/06/12
- [Snort-sigs] Snort - problem, eirinina, 2005/06/16
[Snort-sigs] IIS attack signatures, Mehul, 2005/06/12
[Snort-sigs] add ref MS-99-010 on sid 951 ? (snort233b14), rmkml, 2005/06/12
[Snort-sigs] add ref MS-99-003 on sid 2338 ? (snort233b14), rmkml, 2005/06/12
[Snort-sigs] add ref BUGTRAQ19970523 on sid 322 ? (snort233b14), rmkml, 2005/06/12
[Snort-sigs] sid 661 != cve-1999-0208 ? (snort233b14), rmkml, 2005/06/12
[Snort-sigs] sid 580 and sid 1267 = cve-1999-0008 ? (snort233b14), rmkml, 2005/06/12
- Re: [Snort-sigs] sid 580 and sid 1267 = cve-1999-0008 ? (snort233b14), Matthew Watchinski, 2005/06/24
- Re: [Snort-sigs] sid 580 and sid 1267 = cve-1999-0008 ? (snort233b14), Matthew Watchinski, 2005/06/24
- RE: [Snort-sigs] sid 580 and sid 1267 = cve-1999-0008 ? (snort233b14), Kevin Wood, 2005/06/12
[Snort-sigs] sid:2128 typo?, Brian Jameson, 2005/06/12
[Snort-sigs] unscribe, Vazquez, Frank, 2005/06/12
[Snort-sigs] RE: Proposal for a distributed "bleeding.conf", Eric Hines, 2005/06/12
- Re: [Snort-sigs] RE: Proposal for a distributed "bleeding.conf", Paul Schmehl, 2005/06/12
[Snort-sigs] FP on 3677 (SIP UDP Cseq overflow), Jeff Kell, 2005/06/12
[Snort-sigs] Tony Laster/MOB/Degussa-Huels/US is out of the office., Tony . Laster, 2005/06/05
[Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Matt Jonkman, 2005/06/03
- RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Hines, 2005/06/12
  - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Hines, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Adam Kennedy, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Joel Esler, 2005/06/12
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Jeff Dell, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Maheo, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Frank Knobbe, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Joel Esler, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Matt Jonkman, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Joel Esler, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Matt Jonkman, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Mike Poor, 2005/06/15
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Hines, 2005/06/12
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Mike Poor, 2005/06/15
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Hines, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
    - RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Eric Hines, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Alex Kirk, 2005/06/12
    - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Wes Young, 2005/06/12
  - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Jason Haar, 2005/06/12
- RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Jaramillo, Paul D [CC], 2005/06/12
  - Re: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Erik Fichtner, 2005/06/12
- RE: [Snort-sigs] If You're Using Bleeding Snort Rules Read This!!, Michael Scheidell, 2005/06/15
[Snort-sigs] sid:1233, Dominik Gehl, 2005/06/03
[Snort-sigs] Paul Clements is out of the office., Paul . Clements, 2005/06/03
- RE: [Snort-sigs] Paul Clements is out of the office., M. Shirk, 2005/06/03
  - Re: [Snort-sigs] Paul Clements is out of the office., Erik Fichtner, 2005/06/03
[Snort-sigs] Possible FP for rules 2329, Guillaume Arcas, 2005/06/03
- Re: [Snort-sigs] Possible FP for rules 2329, Matthew Watchinski, 2005/06/03
  - Re: [Snort-sigs] Possible FP for rules 2329, Joel Esler, 2005/06/03
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/01
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/03
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/03
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/04
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/06
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/12
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/12
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/12
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/14
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/14
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/15
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/16
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/17
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/18
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/19
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/20
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/21
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/22
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/23
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/24
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/25
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/26
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2005/06/27