Network Security Archives

August 31, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:23
[Snort-sigs] rule for detect tcpdump rsvp exploit, rmkml, 20:11
[Snort-sigs] False +ves on WEB-CLIENT HTML http scheme hostname overflow attempt 3550, Russell Fulton, 03:11

August 30, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:19

August 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:15
[Snort-sigs] add new simple rule for detect "Jboss % attempt", rmkml, 18:23

August 28, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:13
[Snort-sigs] Add many (180!) ref on sid, rmkml, 16:50

August 27, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:23
[Snort-sigs] add new rule "HTTP Transfer-Content Request Smuggling attempt", rmkml, 20:22
[Snort-sigs] new rule : SMTP Elm buffer overflow attempt, rmkml, 19:21

August 26, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:22
[Snort-sigs] false msg on sid 860 ?, rmkml, 18:29
[Snort-sigs] false uricontent on sid 1600 ?, rmkml, 18:09
[Snort-sigs] new rule for detect 'piranha default passwd attempt', rmkml, 08:04

August 25, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:50
[Snort-sigs] Remote IIS Server_Name Spoof attempt, rmkml, 09:11

August 24, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:17

August 23, 2005

[Snort-sigs] OSSRC Meeting - August 25th, 2005, Jennifer Steffens, 00:17

August 22, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:16

August 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:20
[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1463 - 1 msg, Nick Plante, 01:59

August 20, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:18

August 19, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:16
[Snort-sigs] dsize - fails on rebuilt streams, James Affeld, 22:16

August 18, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:21
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 20:20
Re: [Snort-sigs] fix typo "/calendar-admin.pl" to "/calendar_admin.pl" on sid 1701 (snortrule24), Nigel Houghton, 18:39
[Snort-sigs] fix typo "/calendar-admin.pl" to "/calendar_admin.pl" on sid 1701 (snortrule24), rmkml, 18:18
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 17:58
[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1459 - 1 msg, Aaron Dolan, 17:07
[Snort-sigs] sig 1653 content/alert typo - NOT 'campus', James Affeld, 03:19

August 17, 2005

[Snort-sigs] Zotob Worm Coverage, Jennifer Steffens, 04:16
[Snort-sigs] MS05-039 Updated Rules, Chris Baker, 00:14
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:04

August 16, 2005

Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Erik Fichtner, 14:38
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Jason, 14:18
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Nigel Houghton, 14:18
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), rmkml, 14:18
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Jason, 14:07
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), rmkml, 13:57
Re: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Jason, 13:05
RE: [Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), Harper, Patrick, 13:04
[Snort-sigs] snort not detect messenger spam ? (snort240b18+snortrules24), rmkml, 12:43
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 01:58

August 15, 2005

[Snort-sigs] Sourcefire VRT Update for Zotob Worm, Nigel Houghton, 23:57
[Snort-sigs] duplicate packets checking, Igor Belikov, 06:04
Re: [Snort-sigs] MS05-039 Worm in the wild - Snort sigs attached (they are not mine), purplebag, 01:42

August 14, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:21
[Snort-sigs] MS05-039 and Zotob worm, Nigel Houghton, 22:00
[Snort-sigs] MS05-039 Worm in the wild - Snort sigs attached (they are not mine), Harper, Patrick, 14:57

August 13, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:20

August 12, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:18
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 18:15
[Snort-sigs] add new ref on multiple sid (10) [snort240b18], rmkml, 05:59

August 11, 2005

[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1451 - 2 msgs, Nick Plante, 00:21
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:21

August 10, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 02:10

August 08, 2005

Re: [Snort-sigs] Authorization overflow ?, Frank Knobbe, 14:10
RE: [Snort-sigs] Authorization overflow ?, GNSC NetDefense Correlation, 10:57
[Snort-sigs] Authorization overflow ?, rmkml, 08:56
[Snort-sigs] RE: [Snort-devel] Detecting TCP Timestamp PAWS DoS from tracefile, Steven Sturges, 00:12

August 07, 2005

[Snort-users] Re: [Snort-devel] Detecting TCP Timestamp PAWS DoS from tracefile, J.Smith, 11:06

August 05, 2005

[Snort-sigs] add ref on sid {40} [new sid appears on snort24 rules], rmkml, 14:57
[Snort-sigs] FP for sid:1107, Jeff Kell, 02:32

August 04, 2005

[Snort-sigs] Glen Joseph is out of the office., Glen Joseph, 02:19

August 03, 2005

[Snort-sigs] Snort/Sguil Meeting in San Francisco, CA, Jennifer Steffens, 17:13

August 02, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:25
[Snort-sigs] FYI: docs for sid 564 wrong, Patrick Walsh, 11:25