Snort IDS Signatures Development (thread)

[Snort-sigs] new rule for detect ZeroDay winamp PlayList, rmkml, 2006/01/30
[Snort-sigs] new rule for detect snmp trap format string, rmkml, 2006/01/30
[Snort-sigs] vars for content?, Paul Schmehl, 2006/01/24
[Snort-sigs] use snort in mode Master in only one card, Iacopo Masi, 2006/01/24
[Snort-sigs] new rule for detect tftp32 get format string, rmkml, 2006/01/20
[Snort-sigs] OSSRC Rules Overlap Committee, Jennifer Steffens, 2006/01/20
- Re: [Snort-sigs] OSSRC Rules Overlap Committee, Blake Hartstein, 2006/01/31
  - Re: [Snort-sigs] OSSRC Rules Overlap Committee, Jeff Kell, 2006/01/31
  - [Snort-sigs] Help with Acid/Base install on Debian Testing, Casper Linux, 2006/01/31
    - Re: [Snort-sigs] Help with Acid/Base install on Debian Testing, Joel Esler, 2006/01/31
[Snort-sigs] new rule for detect Mozilla filename overflow, rmkml, 2006/01/18
[Snort-sigs] typos in current ruleset, Vyacheslav V. Burdjanadze, 2006/01/18
[Snort-sigs] different log file for each preprocessor, Iacopo Masi, 2006/01/16
[Snort-sigs] new rule for detect ASPSurvey Login_Validate.asp Password param access, rmkml, 2006/01/13
[Snort-sigs] new rule for detect SIP UDP Softphone overflow attempt, rmkml, 2006/01/13
[Snort-sigs] new rule for detect http %00 (null byte), rmkml, 2006/01/13
[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 2006/01/12
- Re: [Snort-sigs] Snort Community Rules Update, Blake Hartstein, 2006/01/12
- [Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 2006/01/13
- [Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 2006/01/24
- [Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 2006/01/25
  - Re: [Snort-sigs] Snort Community Rules Update, Frank Knobbe, 2006/01/25
    - Re: [Snort-sigs] Snort Community Rules Update, Jennifer Steffens, 2006/01/25
[Snort-sigs] FPs on 3632 ("WEB-CLIENT Mozilla bitmap width integer overflow attempt), Jeff Kell, 2006/01/11
[Snort-sigs] FPs for 4166 (Shell.Explorer) - "common" print functions, Jeff Kell, 2006/01/11
- Re: [Snort-sigs] FPs for 4166 (Shell.Explorer) - "common" print functions, Alex Kirk, 2006/01/12
[Snort-sigs] Re: Snort-sigs digest, Vol 1 #1595 - 2 msgs, Ureleet Ureleet, 2006/01/11
- [Snort-sigs] Submitting false positive reports, Nigel Houghton, 2006/01/12
[Snort-sigs] SMTP PCT Client_Hello overflow attempt sid:2528, Russell Fulton, 2006/01/11
- Re: [Snort-sigs] SMTP PCT Client_Hello overflow attempt sid:2528, Jeff Kell, 2006/01/11
[Snort-sigs] FPs for WEB-CLIENT HTML DOM invalid element creation attempt sid: 3549, Russell Fulton, 2006/01/11
[Snort-sigs] new rule for detect SMTP MIME-Type ms-tnef access, rmkml, 2006/01/11
[Snort-sigs] Intro, Ureleet Ureleet, 2006/01/10
[Snort-sigs] FPs on community sids 100000118,100000119, Jeff Kell, 2006/01/09
- Re: [Snort-sigs] FPs on community sids 100000118,100000119, Brian Caswell, 2006/01/10
[Snort-sigs] new rule for detect WEB-PHP AppServ main.php appserv_root param access, rmkml, 2006/01/06
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 2006/01/05
- [Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 2006/01/27
[Snort-sigs] Problems loading BASE, Michael Mulholland, 2006/01/05
- Re: [Snort-sigs] Problems loading BASE, Wes Young, 2006/01/05
  - Re: [Snort-sigs] Problems loading BASE, Paul Schmehl, 2006/01/05
[Snort-sigs] FPs on lsass DsRolerGetPrimaryDomainInformation unicode little endian attempt, Jason Haar, 2006/01/05
[Snort-sigs] new rule for detect PHP-Nuke admin_styles.php phpbb_root_path access, rmkml, 2006/01/02
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/01
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/02
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/05
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/06
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/07
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/08
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/11
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/12
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/15
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/17
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/18
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/19
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/20
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/21
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/24
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/25
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/26
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/27
- [Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 2006/01/28