Network Security Archives

September 30, 2005

[Snort-sigs] Snort Community Rules Update, Alex Kirk, 14:07
[Snort-sigs] Bad escape sequence?, sekure, 11:56
[Snort-sigs] RE: [Bleeding-sigs] [NewBie Question] Can Anyone Tell me how to write snort rules, Adam Kliarsky, 07:44

September 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:40
[Snort-sigs] Notice on future Rule Submissions, Frank Knobbe, 22:10
[Snort-sigs] Removing WEB-IIS Remote IIS Server Name spoof attempt from Bleeding, Frank Knobbe, 21:29

September 28, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:26
[Snort-sigs] Snort 2.4.2 Now Available, Jennifer Steffens, 20:04
Re: [Snort-sigs] Re: bleeding snort: ref to sid:2002366, Alex Kirk, 11:08

September 27, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:53
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 19:20
[Snort-sigs] Re: bleeding snort: ref to sid:2002366, Frank Knobbe, 17:49
Re: [Snort-sigs] Lpd Solaris unlink file attempt false positives, Matt Jonkman, 16:07
Re: [Snort-sigs] Lpd Solaris unlink file attempt false positives, Nigel Houghton, 13:35
Re: [Snort-sigs] New rule for detect icmp malformed sctp DoS linux, Alex Kirk, 11:34
[Snort-sigs] COMMUNITY MISC BAD-SSL tcp detect, Matt Jonkman, 11:13
[Snort-sigs] Lpd Solaris unlink file attempt false positives, Matt Jonkman, 11:13
Re: [Snort-sigs] Duplicate sids, Andreas Östling, 09:22
Re: [Snort-sigs] False +VES COMMUNITY MISC BAD-SSL tcp detect,Sig ID,100000137, rmkml, 09:22
[Snort-sigs] New rule for detect icmp malformed sctp DoS linux, rmkml, 09:02
Re: [Snort-sigs] False +VES COMMUNITY MISC BAD-SSL tcp detect,Sig ID,100000137, Rich Adamson, 08:52
[Snort-sigs] Duplicate sids, João Mota, 08:42
[Snort-sigs] False +VES COMMUNITY MISC BAD-SSL tcp detect,Sig ID,100000137, Russell Fulton, 02:29

September 26, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:38
Re: [Snort-sigs] Snort Beer Question, Jack Pepper, 11:21

September 25, 2005

RE: [Snort-sigs] Warez Search Signature ?, Charles Heselton, 21:05
[Snort-sigs] Warez Search Signature ?, Court Graham, 18:14

September 24, 2005

Re: [Snort-sigs] Snort Beer Question, Hugo van der Kooij, 05:59

September 23, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:56
Re: [Snort-sigs] snort virus rules, Joel Esler, 10:59
Re: [Snort-sigs] (snort decoder) Bad Traffic Same Src/Dst IP {trying to supress alerts from certain IP's}, Joel Esler, 10:59
Re: [Snort-sigs] Signature research, Joel Esler, 10:59
[Snort-sigs] Emailing: 721.txt, Alan Johnson, 10:59
[Snort-sigs] (snort decoder) Bad Traffic Same Src/Dst IP {trying to supress alerts from certain IP's}, Mike Kelley, 10:49
[Snort-sigs] Fwd: pcre in sid 3550, James Affeld, 10:49
[Snort-sigs] sid: 1792 - errors, false positive and false negatives, Fabio Panigatti - Minerva spa, 10:49
[Snort-sigs] Sid: 1917 triggered by MSN messenger, Adrian Chitoni, 10:49
[Snort-sigs] Signature research, security, 10:49
[Snort-sigs] Rule: WEB-MISC weblogic/tomcat .jsp view source attempt false pos, Andy_Bach, 10:49
[Snort-sigs] snort virus rules, Anthony C. Norris, 10:49
[Snort-sigs] Snort SID 3550 False Positive, Briggs, Bruce, 10:49
[Snort-sigs] Re: [Snort-users] Snort Beer Question, Dominik Gehl, 10:39
[Snort-users] installing snort, Omar F. Altom, 10:39
[Snort-users] Snort Beer Question, Theodore Stout, 09:08
Re: [Snort-sigs] Snort Community Rules Update, Nerijus Krukauskas, 03:55

September 22, 2005

Re: [Snort-sigs] Snort Community Rules Update, Alex Kirk, 12:36
Re: [Snort-sigs] Snort Community Rules Update, Nerijus Krukauskas, 05:03
[Snort-sigs] fp in 3679, James Affeld, 01:42
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:51

September 21, 2005

[Snort-sigs] Rules not Triggering after Snort v2.4.1, Ron Jenkins, 18:18
[Snort-sigs] Snort Community Rules Update, Alex Kirk, 18:08

September 20, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:57
[Snort-sigs] rule for detect snort240 / tcp sack option DoS ?, rmkml, 16:12
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 01:05

September 19, 2005

[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 23:44
Re: [Snort-sigs] improvements to web-misc rules, bmc, 13:07
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:51

September 18, 2005

[Snort-sigs] new rule for detect GNU imapd search format string, rmkml, 15:57
Re: [Snort-sigs] improvements to web-misc rules, Matt Jonkman, 13:36
Re: [Snort-sigs] improvements to web-misc rules, Joel Esler, 13:15
Re: [Snort-sigs] improvements to web-misc rules, Matt Jonkman, 12:55
Re: [Snort-sigs] improvements to web-misc rules, Joel Esler, 12:35

September 17, 2005

Re: [Snort-sigs] improvements to web-misc rules, Frank Knobbe, 17:07

September 16, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:27
[Snort-sigs] Snort 2.4.1 Now Available, Jennifer Steffens, 21:56
Re: [Snort-sigs] improvements to web-misc rules, Joel Esler, 10:19
[Snort-sigs] improvements to web-misc rules, Chas Tomlin, 10:09

September 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:55
Re: [Snort-sigs] Twiki Exploit rule, Nigel Houghton, 13:28
Re: [Snort-sigs] Twiki Exploit rule, Matt Jonkman, 11:57
[Snort-sigs] Twiki Exploit rule, Chas Tomlin, 11:37

September 14, 2005

Re: [Snort-sigs] simple rule for detect ssl/ssh tunneling session, Nigel Houghton, 19:38

September 13, 2005

[Snort-sigs] simple rule for detect ssl/ssh tunneling session, rmkml, 20:02

September 12, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:21
[Snort-sigs] False +ves on WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt sid 3634, Russell Fulton, 19:29

September 11, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:19
[Snort-sigs] False +ves on EXPLOIT SIP UDP CSeq overflow attempt,Sig ID,3677, Russell Fulton, 22:59

September 08, 2005

[Snort-sigs] Upcoming Snort User Group Meetings, Jennifer Steffens, 22:52
Re: [Snort-sigs] submit new rule for Barracuda spam firewall, Joel Esler, 22:12
Re: [Snort-sigs] submit new rule for Barracuda spam firewall, Frank Knobbe, 22:02
[Snort-sigs] submit new rule for Barracuda spam firewall, rmkml, 19:21
[Snort-sigs] better buffer overflow rule (sid 306), Patrick Walsh, 18:50

September 07, 2005

[Snort-sigs] Multi-protocol flow/stateful rules?, Michael Sierchio, 12:54
[Snort-sigs] False Positive - BLEEDING-EDGE Potential MySQL bot connecting to IRC server, Chich Thierry, 10:03

September 06, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:18
Re: [Snort-sigs] False Positive - WEB-PHP modules.php access, Roger Suppona, 12:41
Re: [Snort-sigs] False Positive - WEB-PHP modules.php access, Roger Suppona, 12:31
Re: [Snort-sigs] False Positive - WEB-PHP modules.php access, BassPlayer, 12:21
[Snort-sigs] bad traffic in syn packet, John Hally, 11:30

September 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:25
Re: [Snort-sigs] I need a Windows Config file for Snort, Hugo van der Kooij, 05:58
[Snort-sigs] I need a Windows Config file for Snort, DasPadre, 02:17

September 02, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:26
Re: [Snort-sigs] False Positive - WEB-PHP modules.php access, Jason Brvenik, 14:22
[Snort-sigs] False Positive - WEB-PHP modules.php access, BassPlayer, 13:11
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:26

September 01, 2005

[Snort-sigs] Fwd: pcre in sid 3550, James Affeld, 21:44
[Snort-sigs] pcre in sid 3550, James Affeld, 20:24