Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

October 31, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:09
Re: [Snort-sigs] possible fix for FPs for EXPLOIT CDE dtspcd exploit attempt sid:1398, Alex Kirk, 11:29
[Snort-sigs] new rule for detect TRACE method on smc (solaris mgmt console), rmkml, 08:48

October 30, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:03

October 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:13

October 28, 2005

[Snort-sigs] new rule for detect Hasbani-WindWeb GET DoS, rmkml, 14:17
[Snort-sigs] new rule for detect Linksys apply.cgi overflow, rmkml, 14:17
[Snort-sigs] possible fix for FPs for EXPLOIT CDE dtspcd exploit attempt sid:1398, Russell Fulton, 14:16
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 14:16
[Snort-sigs] FPs for NETBIOS SMB-DS Session Setup AndX request unicode username overflow attempt sid: 2404, Russell Fulton, 14:15

October 27, 2005

[Snort-sigs] new rule for detect LPD on hpux, rmkml, 07:37

October 26, 2005

[Snort-sigs] possible FPs for EXPLOIT CDE dtspcd exploit attempt sid:1398, Russell Fulton, 22:43
RE: [Snort-sigs] Rebuilding snort server and sensors, BassPlayer, 17:49
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:10

October 25, 2005

[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 23:20
RE: [Snort-sigs] Rebuilding snort server and sensors, Thompson, Jimi, 17:36
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:08

October 24, 2005

[Snort-sigs] False Positive on SID 1983, Sam Evans, 15:42
Re: [Snort-sigs] 4 conflicts after Daily Update on snort 2.3 regular rules, Matthew Watchinski, 15:12
RE: [Snort-sigs] Rebuilding snort server and sensors, Ron Jenkins, 15:11
Re: [Snort-sigs] i want to update my snort rules but i don't know how can i do?, Murali Raju, 15:11
Re: [Snort-sigs] Rebuilding snort server and sensors, Murali Raju, 15:11
[Snort-sigs] Rebuilding snort server and sensors, Michael Mulholland, 15:11
[Snort-sigs] i want to update my snort rules but i don't know how can i do?, zahra taghikhaki, 15:11
[Snort-sigs] new rule for detect ethereal 0.10.12 crash (slimp overflow), rmkml, 15:11
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 15:11
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 15:09
[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 15:09
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 15:07
[Snort-sigs] New rule for detect Lynx nntp overflow, rmkml, 15:06
Re: [Snort-sigs] 4 conflicts after Daily Update on snort 2.3 regular rules, Andreas Östling, 15:06
[Snort-sigs] Herman Both/GENEVA/LECROY is out of the office., herman . both, 15:06
[Snort-sigs] New rule for detect RSA WebAgent Redirect oveflow, rmkml, 15:06
[Snort-sigs] 4 conflicts after Daily Update on snort 2.3 regular rules, Hugo van der Kooij, 15:06
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 15:06

October 18, 2005

[Snort-sigs] Fixes and Mitigation Instructions Available for Snort Back Orifice Vulnerability, Jennifer Steffens, 11:57
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 00:02

October 17, 2005

RE: [Snort-sigs] Snort conf file, Paul Schmehl, 13:46
[Snort-sigs] False positive for SID 3550, G. Panula, 10:45
RE: [Snort-sigs] Snort conf file, U.Chandrasekar, 10:45
[Snort-sigs] false positive for DOUBLE DECODING ATTACK, Wolfgang Rohdewald, 10:45

October 16, 2005

[Snort-sigs] New rule for detect GFI MailSecurity Header Overflow, rmkml, 16:56

October 13, 2005

[Snort-sigs] Snort Community Rules Update, Alex Kirk, 15:01
[Snort-sigs] New rule for detect Amap fingerprint (http), rmkml, 05:47
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 04:26
Re: [Snort-sigs] Warning: flowbits keys (not) set/checked (Trojan Bot/Sasser rules), Frank Knobbe, 01:15

October 12, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:44
[Snort-sigs] Warning: flowbits keys (not) set/checked (Trojan Bot/Sasser rules), Ellen L Mitchell, 23:34
Re: [Snort-sigs] New rule for detect "ICMP DoS HOD brute force", rmkml, 18:00
[Snort-sigs] Re: [Snort-devel] Call for all Snort Projects, Jeff Nathan, 15:18
Re: [Snort-sigs] New rules (2) for detect Hydra brute force auth, Alex Kirk, 13:47
Re: [Snort-sigs] New rule for detect "ICMP DoS HOD brute force", Alex Kirk, 13:47
Re: [Snort-sigs] New rules (2) for detect Hydra brute force auth, Nigel Houghton, 13:47
[Snort-sigs] New rules (2) for detect Hydra brute force auth, rmkml, 06:44

October 11, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:51
[Snort-sigs] New rule for detect "ICMP DoS HOD brute force", rmkml, 20:38
Re: [Snort-sigs] New rule for detect ftp MKD overflow, Alex Kirk, 12:33
[Snort-sigs] New rule for detect ftp MKD overflow, rmkml, 12:23
[Snort-users] Re: [Snort-devel] Call for all Snort Projects, Alex Butcher, ISC/ISYS, 08:11

October 10, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:47
[Snort-sigs] Meet Marty Roesch in NY - Learn the Future of Snort!, Jennifer Talcott, 20:45
[Snort-sigs] New rule for detect old "Sentinel LM UDP Buffer Overflow", rmkml, 19:55
RE: [Snort-sigs] Snort conf file, Adam Kliarsky, 16:44
[Snort-sigs] Snort conf file, U.Chandrasekar, 12:41
[Snort-users] RE: [Snort-devel] Call for all Snort Projects, Spiros Antonatos, 12:41

October 09, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:46

October 08, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:55

October 07, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:45
[Snort-sigs] New rule for detect "Shutdown TNS Listener via Oracle iSQL*Plus", rmkml, 19:23
Re: [Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, BassPlayer, 01:04
Re: [Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, Jennifer Steffens, 00:54
Re: [Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, BassPlayer, 00:54

October 06, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:53
Re: [Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, Jennifer Steffens, 23:33
[Snort-sigs] False +ves for WEB-CLIENT Windows Media Player 7+ ActiveX Object Access sid: 4156, Russell Fulton, 21:12
Re: [Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, Eric J. Bowser, 17:30
[Snort-sigs] False positives on rule SID 2514, Iván Laso, 10:25
[Snort-sigs] Check Point Software Technologies to Acquire Sourcefire, Jennifer Steffens, 09:55

October 05, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:50
[Snort-sigs] New win32 Installer and Source RPM for Snort 2.4.2, Jennifer Steffens, 21:29

October 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:58
[Snort-sigs] False +ves for WEB-CLIENT bitmap BitmapOffset multipacket integer overflow attempt 3685, Russell Fulton, 23:07
[Snort-sigs] False +ves for COMMUNITY WEB-IIS Remote IIS Server Name spoof attempt localhost,Sig ID,100000138, Russell Fulton, 23:07

October 03, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:46
[Snort-users] Call for all Snort Projects, Joel Esler, 21:04
Re: [Snort-sigs] [NewBie Question] Can Anyone Tell me how to write snort rules, Joel Esler, 11:59
[Snort-sigs] False Positive for -MISC weblogic/tomcat .jsp view source attempt, Mark Ryan del Moral Talabis, 11:08
[Snort-sigs] [NewBie Question] Can Anyone Tell me how to write snort rules, MUKESH KUMAR SINGH, 10:58

October 02, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 20:42
Re: [Snort-sigs] Bad escape sequence?, Alex Kirk, 15:50