Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

July 31, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:45

July 30, 2005

[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1443 - 1 msg, Nick Plante, 21:16
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:35

July 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:34
Re: [Snort-sigs] add variable on snort.conf, why not ?, Frank Knobbe, 09:37
[Snort-sigs] add variable on snort.conf, why not ?, rmkml, 09:17
[Snort-sigs] modify port 80 to $HTTP_PORTS ? (snort233b14), rmkml, 09:17
[Snort-sigs] add microsoft on reference.config file ?, rmkml, 09:07
[Snort-sigs] add cert on reference.config file ?, rmkml, 09:07
[Snort-sigs] add established on sid 2048 ?, rmkml, 09:06

July 28, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:39

July 27, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:37

July 26, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:35

July 25, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:33
[Snort-sigs] Snort Rule: 3472 inconsistency, \"JC\", 14:21
Re: [Snort-sigs] Snort rule: 686 Reference URL incomplete, Nigel Houghton, 14:01
[Snort-sigs] Snort rule: 686 Reference URL incomplete, \"JC\", 14:01

July 24, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:42

July 23, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:43

July 22, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:43
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 16:01

July 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 19:00
[Snort-sigs] sid:3677 SIP UDP overflow - false positives, Rich Adamson, 13:56
[Snort-users] Movin' on up..., Joel Esler, 11:55
Re: [Snort-sigs] Sql Bakups Snort Rule, Sanjay Rawat, 00:19

July 20, 2005

Re: [Snort-sigs] Sql Bakups Snort Rule, nnposter, 21:08
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:36
[Snort-sigs] rogue wireless access points, Rowland, Krisa W ERDC-ITL-MS Contractor, 12:22
[Snort-sigs] Sql Bakups Snort Rule, Joseph Pierini, 12:02

July 19, 2005

[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1432 - 6 msgs, Nick Plante, 21:15
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:44
Re: [Snort-sigs] Matching question, Ron, 07:36
Re: [Snort-sigs] Matching question, bmc, 07:16
Re: [Snort-sigs] Matching question, Ron, 06:56

July 18, 2005

Re: [Snort-sigs] Matching question, Jason Brvenik, 22:11
Re: [Snort-sigs] Matching question, Jason Brvenik, 22:11
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:49
[Snort-sigs] Matching question, Ron, 13:06
Re: [Snort-sigs] sigs to catch response traffic, Jason Brvenik, 07:42
RE: [Snort-sigs] sigs to catch response traffic, Steven Sturges, 06:52

July 17, 2005

Re: [Snort-sigs] sigs to catch response traffic, Matt Jonkman, 20:06
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:45
[Snort-sigs] sigs to catch response traffic, Russell Fulton, 18:35

July 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:40

July 14, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:47
Re: [Snort-sigs] Fp ON 2001702, Matt Jonkman, 07:58
[Snort-sigs] 1:2515 false positive, giulio . martinat, 07:48
[Snort-sigs] Rule:2229, Joel Ebrahimi, 07:48
[Snort-sigs] question, Jidong Long, 07:48
[Snort-sigs] False positive Id=1:1113, Loriente Ara, Luis Antonio, 07:47
[Snort-sigs] Fp ON 2001702, Michael Scheidell, 07:47

July 13, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:38

July 12, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:45
[Snort-sigs] change msg nortan to norton on sid 2485 (snort233b14), rmkml, 07:37

July 11, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:42

July 10, 2005

Re: [Snort-sigs] SID 3466 reference incorrect, Nigel Houghton, 20:39
[Snort-sigs] SID 3466 reference incorrect, \"JC\", 19:59
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:38

July 09, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:37

July 08, 2005

[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1422 - 3 msgs, Nick Plante, 21:18
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:47
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 15:26
[Snort-sigs] new multiple change on sid (snort233b14), rmkml, 09:43

July 07, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:46
Re: [Snort-sigs] SSH brute force attack sig, James Riden, 15:05
Re: [Snort-sigs] SSH brute force attack sig, Jason Haar, 13:14
Re: [Snort-sigs] SSH brute force attack sig, Paul Schmehl, 09:31
Re: [Snort-sigs] SSH brute force attack sig, Matt Jonkman, 09:31
Re: [Snort-sigs] SSH brute force attack sig, Jeff Kell, 09:21
Re: [Snort-sigs] SSH brute force attack sig, bmc, 09:21
Re: [Snort-sigs] SSH brute force attack sig, Nigel Houghton, 09:11
Re: [Snort-sigs] SSH brute force attack sig, Matt Jonkman, 09:11
Re: [Snort-sigs] SSH brute force attack sig, bmc, 09:01

July 06, 2005

Re: [Snort-sigs] SSH brute force attack sig, Russell Fulton, 22:49
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:44
Re: [Snort-sigs] SSH brute force attack sig, Frank Knobbe, 17:03
Re: [Snort-sigs] SSH brute force attack sig, Matt Jonkman, 13:31
Re: [Snort-sigs] SSH brute force attack sig, bmc, 13:10
Re: [Snort-sigs] SSH brute force attack sig, bmc, 13:10
Re: [Snort-sigs] SSH brute force attack sig, Paul Schmehl, 12:40
Re: [Snort-sigs] SSH brute force attack sig, Michael Sierchio, 12:30
Re: [Snort-sigs] SSH brute force attack sig, Paul Schmehl, 12:30
Re: [Snort-sigs] SSH brute force attack sig, Erik Fichtner, 12:30
Re: [Snort-sigs] SSH brute force attack sig, Matt Jonkman, 12:09
Re: [Snort-sigs] SSH brute force attack sig, Wes Young, 12:09
Re: [Snort-sigs] SSH brute force attack sig, Paul Schmehl, 11:59
Re: [Snort-sigs] SSH brute force attack sig, Matt Jonkman, 11:39
[Snort-sigs] SSH brute force attack sig, Paul Schmehl, 11:29
[Snort-sigs] FP - 3696 (Veritas), Wes Young, 07:06
[Snort-sigs] (no subject), Jure S, 04:54

July 05, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 18:49
[Snort-users] Bleeding-Edge Virus 2001268 false positive (SWEN.A), Rich Adamson, 14:47
Re: [Snort-sigs] FPs on 1653 - WEB-CGI campus access, Nigel Houghton, 13:46
[Snort-sigs] FPs on 1653 - WEB-CGI campus access, Jeff Kell, 13:36
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:41
[Snort-sigs] FP on 1365 - Web attack rm attempt, Jeff Kell, 08:41
Re: [Snort-sigs] Re: Fp ON 2001702, Frank Knobbe, 08:41
Re: [Snort-sigs] Re: Fp ON 2001702, Colin Grady, 08:41
[Snort-sigs] Re: Fp ON 2001702, Frank Knobbe, 08:41
[Snort-sigs] Re: Fp ON 2001702, Matt Jonkman, 08:41
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:40
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:40
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:40
Re: [Snort-sigs] First Meeting of the Open Source Snort Rules Consortium (OSSRC), Jennifer Steffens, 08:39
[Snort-sigs] First Meeting of the Open Source Snort Rules Consortium (OSSRC), Jennifer Steffens, 08:39
Re: [Snort-sigs] False +VE for NETBIOS DCERPC IActivation little endian bind attempt,Sig ID,3276, Nigel Houghton, 08:39
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 08:39
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:39
Re: [Snort-sigs] False +VE for NETBIOS DCERPC IActivation little endian bind attempt,Sig ID,3276, Russell Fulton, 08:39
Re: [Snort-sigs] False +VE for NETBIOS DCERPC IActivation little endian bind attempt,Sig ID,3276, Joel Esler, 08:39
[Snort-sigs] False +VE for NETBIOS DCERPC IActivation little endian bind attempt,Sig ID,3276, Russell Fulton, 08:39
[Snort-sigs] Re: "CHAT IRC channel join" seems wrong, Colin Grady, 08:39
[Snort-sigs] Re: "CHAT IRC channel join" seems wrong, Colin Grady, 08:38
[Snort-sigs] "CHAT IRC channel join" seems wrong, Colin Grady, 08:38
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 08:37
[Snort-sigs] Sourcefire VRT Certified Rules Update, Matthew Watchinski, 08:37