Snort IDS Users Lists (thread)

[Snort-users] Snort & VPN Traffic, mpapet, 2005/11/30
[Snort-users] Number of rules in use?, snort, 2005/11/30
[Snort-users] Any issues with dup packets on snort?, Jason Haar, 2005/11/29
- Re: [Snort-users] Any issues with dup packets on snort?, G Ramon Gomez, 2005/11/30
- Re: [Snort-users] Any issues with dup packets on snort?, barryab63-ia, 2005/11/30
- Re: [Snort-users] Any issues with dup packets on snort?, Richard Bejtlich, 2005/11/30
  - Re: [Snort-users] Any issues with dup packets on snort?, Jason Haar, 2005/11/30
[Snort-users] portscan preprocessor and external net, marco turr, 2005/11/29
- Re: [Snort-users] portscan preprocessor and external net, Jason Brvenik, 2005/11/29
  - Re: [Snort-users] portscan preprocessor and external net, marco turr, 2005/11/29
    - Re: [Snort-users] portscan preprocessor and external net, Matt Kettler, 2005/11/29
    - Re: [Snort-users] portscan preprocessor and external net, marco turr, 2005/11/29
[Snort-users] Upcoming User Group Meeting in Hampton Roads, VA, Jennifer Talcott, 2005/11/28
[Snort-users] alert a list of ip source addresses, Dominik Schmid, 2005/11/28
[Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
- Re: [Snort-users] Capture Email Content / Website Activity, barryab63-ia, 2005/11/27
  - Re: [Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
- Re: [Snort-users] Capture Email Content / Website Activity, Alex Butcher, ISC/ISYS, 2005/11/28
- Re: [Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
  - Re: [Snort-users] Capture Email Content / Website Activity, G Ramon Gomez, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, G Ramon Gomez, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, G Ramon Gomez, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, stuff, 2005/11/27
    - Re: [Snort-users] Capture Email Content / Website Activity, barryab63-ia, 2005/11/28
[Snort-users] Problem with 2 barnyards in the same box logging to DB, João Mota, 2005/11/25
- [Snort-users] new version of snort - 0.4- and screenshots released, Dominik Schmid, 2005/11/25
[Snort-users] need help : (snort decoder) Bad Traffic Loopback IP, Thomas Werth, 2005/11/25
- RE: [Snort-users] need help : (snort decoder) Bad Traffic Loopback IP, Paul Melson, 2005/11/28
[Snort-users] send flex-resp through interface which has no ip-address!?, Elmar Bschorer, 2005/11/24
- RE: [Snort-users] send flex-resp through interface which has no ip-address!?, Paul Melson, 2005/11/28
  - Re: [Snort-users] send flex-resp through interface which has no ip-address!?, Jeff Nathan, 2005/11/30
- Re: [Snort-users] send flex-resp through interface which has no ip-address!?, G Ramon Gomez, 2005/11/30
[Snort-users] Re: Snort-users digest, Vol 1 #5395 - 2 msgs, sarma nmrk, 2005/11/24
[Snort-users] Libnet v1.1 vs libnet v1.0.2a, TPanaitescu, 2005/11/22
- Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, Dirk Geschke, 2005/11/22
  - Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, TPanaitescu, 2005/11/22
    - Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, Dirk Geschke, 2005/11/22
    - Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, James Lay, 2005/11/22
- Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, Jeff Nathan, 2005/11/29
  - Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, TPanaitescu, 2005/11/29
    - Re: [Snort-users] Libnet v1.1 vs libnet v1.0.2a, Jeff Nathan, 2005/11/29
[Snort-users] New Snort Mapping application...looking for feedback, Ryan Trost, 2005/11/22
- RE: [Snort-users] New Snort Mapping application...looking for feedback, Charles Heselton, 2005/11/22
- Re: [Snort-users] New Snort Mapping application...looking for feedback, Russ Starr, 2005/11/22
[Snort-users] get rid of /var/log/snort/alert, aktivists, 2005/11/22
- Re: [Snort-users] get rid of /var/log/snort/alert, Dirk Geschke, 2005/11/22
[Snort-users] Re: Snort on Linux - Witch Distro?, George Laiacona, 2005/11/22
[Snort-users] Snort on Linux - Witch Distro?, snort, 2005/11/21
- Re: [Snort-users] Snort on Linux - Witch Distro?, James Lay, 2005/11/21
- Re: [Snort-users] Snort on Linux - Witch Distro?, snort, 2005/11/22
- RE: [Snort-users] Snort on Linux - Witch Distro?, Briggs, Bruce, 2005/11/22
  - Re: [Snort-users] Snort on Linux - Witch Distro?, Jeff Kell, 2005/11/22
  - Re: [Snort-users] Snort on Linux - Witch Distro?, shane mullins, 2005/11/22
[Snort-users] snort version 2.4.3 not working properly?, Allan P. Magmanlac, 2005/11/21
- Re: [Snort-users] snort version 2.4.3 not working properly?, Dirk Geschke, 2005/11/21
[Snort-users] HW Specs, Brian J. Dyrehauge, 2005/11/21
- Re: [Snort-users] HW Specs, Rich Moffitt, 2005/11/21
  - Re: [Snort-users] HW Specs, Gulfie, 2005/11/22
- Re: [Snort-users] HW Specs, Alex Butcher, ISC/ISYS, 2005/11/23
  - Re: [Snort-users] HW Specs, Alex Butcher, ISC/ISYS, 2005/11/28
- RE: [Snort-users] HW Specs, Timothy A. Holmes, 2005/11/23
  - RE: [Snort-users] HW Specs, Alex Butcher, ISC/ISYS, 2005/11/24
[Snort-users] Console Release, Kevin Wetzel - ISP Toolz, 2005/11/21
[Snort-users] Same Problem with 64 Bit, Kevin Wetzel - ISP Toolz, 2005/11/21
- Re: [Snort-users] Same Problem with 64 Bit, Vanja Hrustic, 2005/11/21
[Snort-users] Want to run Snort on x86_64 (CentOS 4.2/RHEL4)? Think again :), Vanja Hrustic, 2005/11/20
[Snort-users] Creating a simple rule., Paul Halliday, 2005/11/19
- Re: [Snort-users] Creating a simple rule., Jason Brvenik, 2005/11/19
  - Re: [Snort-users] Creating a simple rule., Paul Halliday, 2005/11/19
    - Re: [Snort-users] Creating a simple rule., snort user, 2005/11/19
    - Re: [Snort-users] Creating a simple rule., Jason Brvenik, 2005/11/19
- Re: [Snort-users] Creating a simple rule., snort user, 2005/11/19
[Snort-users] Rules not matching, or matching without logic, Vanja Hrustic, 2005/11/19
- Re: [Snort-users] Rules not matching, or matching without logic, Jeff Kell, 2005/11/19
  - Re: [Snort-users] Rules not matching, or matching without logic, Vanja Hrustic, 2005/11/19
[Snort-users] What tool? Fastest way to generate port info to build acl protection?, Turnquist,Wayne, 2005/11/18
- Re: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, G Ramon Gomez, 2005/11/18
- Re: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, sekure, 2005/11/18
- Re: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, Jason Haar, 2005/11/18
- RE: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, Jim Hendrick, 2005/11/19
- RE: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, Briggs, Bruce, 2005/11/18
- RE: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, Bristol, Gary L., 2005/11/18
- Re: [Snort-users] What tool? Fastest way to generate port info to build acl protection?, Richard Bejtlich, 2005/11/18
[Snort-users] stream4's new config, zhaohui yin, 2005/11/18
- Re: [Snort-users] stream4's new config, Will Metcalf, 2005/11/18
  - Re: [Snort-users] stream4's new config, zhaohui yin, 2005/11/18
- Re: [Snort-users] stream4's new config, Jason Brvenik, 2005/11/18
[Snort-sigs] Changing the Community sid-msg.map, Alex Kirk, 2005/11/17
- Re: [Snort-users] Changing the Community sid-msg.map, Richard Harman, 2005/11/18
[Snort-users] Beagle traffic, Walt Rich, 2005/11/16
- RE: [Snort-users] Beagle traffic, Paul Melson, 2005/11/17
[Snort-users] Community rules archive... request (well, suggestion), Jeff Kell, 2005/11/16
- Re: [Snort-users] Community rules archive... request (well, suggestion), Nerijus Krukauskas, 2005/11/17
[Snort-users] Kansas City Snort User Group meeting information, Russ Starr, 2005/11/16
[Snort-users] Where do I go from here, Timothy A. Holmes, 2005/11/15
- RE: [Snort-users] Where do I go from here, Briggs, Bruce, 2005/11/15
  - RE: [Snort-users] Where do I go from here, Lee Clemens, 2005/11/15
- RE: [Snort-users] Where do I go from here, Briggs, Bruce, 2005/11/15
- Re: [Snort-users] Where do I go from here, Richard Bejtlich, 2005/11/15
[Snort-users] modularising snort, cynthia, 2005/11/14
- [Snort-users] Martin in Tokyo, Theodore Stout, 2005/11/14
[Snort-users] snortfocus 0.3 released, Dominik Schmid, 2005/11/13
[Snort-users] Snort 2.4.3 - Windows service fails on boot, Frank.Pikelner, 2005/11/13
- RE: [Snort-users] Snort 2.4.3 - Windows service fails on boot, Michael Steele, 2005/11/13
[Snort-users] No clue?, John Friedman, 2005/11/13
- RE: [Snort-users] No clue?, John Friedman, 2005/11/13
  - RE: [Snort-users] No clue?, John Friedman, 2005/11/15
    - Re: [Snort-users] No clue?, Matt Kettler, 2005/11/15
    - Re: [Snort-users] No clue?, John Friedman, 2005/11/15
- RE: [Snort-users] No clue?, John Friedman, 2005/11/15
- RE: [Snort-users] No clue?, Briggs, Bruce, 2005/11/15
  - RE: [Snort-users] No clue?, John Friedman, 2005/11/15
    - Re: [Snort-users] No clue?, Joel Esler, 2005/11/15
- Re: [Snort-users] No clue?, John Friedman, 2005/11/15
- Re: [Snort-users] No clue?, Joel Esler, 2005/11/15
  - Re: [Snort-users] No clue?, John Friedman, 2005/11/16
- Re: [Snort-users] No clue?, John Friedman, 2005/11/16
  - Re: [Snort-users] No clue?, Eric Maheo, 2005/11/16
    - Re: [Snort-users] No clue?, John Friedman, 2005/11/16
[Snort-users] Bug Report : Perfmonitor counter wraping : pkts_drop, pkts_recv and derived stats, Gulfie, 2005/11/13
[Snort-users] too many alerts?, John Friedman, 2005/11/13
[Snort-users] How to proceed, Timothy A. Holmes, 2005/11/13
- Re: [Snort-users] How to proceed, Ralf Spenneberg, 2005/11/13
  - Re: [Snort-users] How to proceed, Kevin Johnson, 2005/11/13
    - Re: [Snort-users] How to proceed, Ralf Spenneberg, 2005/11/13
- Re: [Snort-users] How to proceed, Nigel Houghton, 2005/11/13
[Snort-users] snort_inline about logging MACs, sake, 2005/11/13
- Re: [Snort-users] snort_inline about logging MACs, Ralf Spenneberg, 2005/11/13
[Snort-users] the better way?, John Friedman, 2005/11/13
- Re: [Snort-users] the better way?, Ralf Spenneberg, 2005/11/13
  - Re: [Snort-users] the better way?, John Friedman, 2005/11/13
    - Re: [Snort-users] the better way?, Ralf Spenneberg, 2005/11/13
- RE: [Snort-users] the better way?, Briggs, Bruce, 2005/11/13
[Snort-users] snort is becoming a dying project?, zhaohui yin, 2005/11/13
- Re: [Snort-users] snort is becoming a dying project?, G Ramon Gomez, 2005/11/13
  - Re: [Snort-users] snort is becoming a dying project?, Joel Esler, 2005/11/13
[Snort-users] modifying 5snort to add more detail to email, Kretzer, Jason R (Big Sandy), 2005/11/13
[Snort-users] report frag3 preprocess bug, zhaohui yin, 2005/11/13
[Snort-users] Snort + Microsoft ISA, Michael Miller, 2005/11/13
[Snort-users] Snort Problems -- access etc, Timothy A. Holmes, 2005/11/13
- Re: [Snort-users] Snort Problems -- access etc, Gene R Gomez, 2005/11/13
- Re: [Snort-users] Snort Problems -- access etc, Brad Lhotsky, 2005/11/13
[Snort-users] keeping threshold state, sekure, 2005/11/13
[Snort-users] Any idea?, John Friedman, 2005/11/13
[Snort-users] IDS Policy Manager 1.8.1 Released, Jeff Dell, 2005/11/13
[Snort-users] I'm Completely lost., Michael W Cocke, 2005/11/13
- Re: [Snort-users] I'm Completely lost., Kevin Johnson, 2005/11/13
- Re: [Snort-users] I'm Completely lost., Michael W Cocke, 2005/11/13
[Snort-users] Snort decoder & pass rules, Paul Melson, 2005/11/13
- Re: [Snort-users] Snort decoder & pass rules, Murali Raju, 2005/11/13
[Snort-users] Update 2: Worm/Virus related to SID 3813: "WEB-CGI awstats.pl configdir command execution attempt" and other SIDs ?, TPanaitescu, 2005/11/05
[Snort-users] Update: Worm/Virus related to SID 3813: "WEB-CGI awstats.pl configdir command execution attempt" and other SIDs ?, TPanaitescu, 2005/11/05
[Snort-users] RE: Worm/Virus related to SID 3813: "WEB-CGI awstats.pl configdir command execution attempt" and other SIDs ?, TPanaitescu, 2005/11/05
[Snort-users] Worm/Virus related to SID 3813: "WEB-CGI awstats.pl configdir command execution attempt" and other SIDs ?, TPanaitescu, 2005/11/05
[Snort-users] Snort-replay v0.5 for Snort v2.4.3 released, Andreas Östling, 2005/11/04
[Snort-users] pmgraph v0.2 released, Andreas Östling, 2005/11/04
[Snort-users] Perfmonitor preprocessor feilds, Robin Polak, 2005/11/04
- Re: [Snort-users] Perfmonitor preprocessor feilds, Jason Brvenik, 2005/11/04
[Snort-users] Portscan on an Unaddressed sniffer port, Timothy A. Holmes, 2005/11/03
- Re: [Snort-users] Portscan on an Unaddressed sniffer port, Valter Santos, 2005/11/03
- Re: [Snort-users] Portscan on an Unaddressed sniffer port, Jeff Kell, 2005/11/04
[Snort-users] Snort / Base installation problem -- Related to IPTABLES -- I think, Timothy A. Holmes, 2005/11/03
- Re: [Snort-users] Snort / Base installation problem -- Related to IPTABLES -- I think, Alejandro Flores, 2005/11/03
- Re: [Snort-users] Snort / Base installation problem -- Related to IPTABLES -- I think, Jeff Kell, 2005/11/03
  - RE: [Snort-users] Snort / Base installation problem -- Related to IPTABLES -- I think, Patrick Harper, 2005/11/03
[Snort-users] Meet Marty in Tokyo or New York, Jennifer Talcott, 2005/11/03
[Snort-users] global thresholding, sekure, 2005/11/03
Chicago2600 November Meeting Information, Steven McGrath, 2005/11/03
[Snort-users] confused by postgresql-8.0.4, sake, 2005/11/03
- Re: [Snort-users] confused by postgresql-8.0.4, Ralf Spenneberg, 2005/11/03
  - Re: [Snort-users] confused by postgresql-8.0.4, sake, 2005/11/04
    - Re: [Snort-users] confused by postgresql-8.0.4, Ralf Spenneberg, 2005/11/05
[Snort-users] Confused by pgsql8.0.4, sake, 2005/11/03
[Snort-users] Confused?, John Friedman, 2005/11/03
- Re: [Snort-users] Confused?, Dino Dragovic, 2005/11/03
- Re: [Snort-users] Confused?, Ralf Spenneberg, 2005/11/03
[Snort-users] Snort performance and maintenance, Hubert Edward kIYIMBA, 2005/11/01
- Re: [Snort-users] Snort performance and maintenance, Joel Esler, 2005/11/03
- Re: [Snort-users] Snort performance and maintenance, Ralf Spenneberg, 2005/11/03
- RE: [Snort-users] Snort performance and maintenance, Hubert Edward kIYIMBA, 2005/11/15
[Snort-users] Exclude one IP, John Friedman, 2005/11/01
- Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/01
  - Re: [Snort-users] Exclude one IP, Matt Kettler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Paul Schmehl, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Matt Kettler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Matt Kettler, 2005/11/03
    - RE: [Snort-users] Exclude one IP, Paul Melson, 2005/11/03
    - Re: [Snort-users] Exclude one IP, Joel Esler, 2005/11/03
[Snort-users] BO preproc exploit published, Paul . Melson, 2005/11/01
[Snort-users] Can't suppress "(snort decoder) Bad Traffic Same Src/Dst IP", Postmaster, 2005/11/01
- RE: [Snort-users] Can't suppress "(snort decoder) Bad Traffic Same Src/Dst IP", Paul Melson, 2005/11/01
[Snort-users] Re: Suppressing Source Messages from $HOME_NET, Steve Brown, 2005/11/01
[Snort-users] Re: [Ntsug-users] Base 1.2 Vuln, Johnny Hernandez, 2005/11/01
[Snort-users] Multiple alerts for a single packets, Hadass Harel, 2005/11/01
- RE: [Snort-users] Multiple alerts for a single packets, Paul Melson, 2005/11/01
- Re: [Snort-users] Multiple alerts for a single packets, Joel Esler, 2005/11/01
- RE: [Snort-users] Multiple alerts for a single packets, Briggs, Bruce, 2005/11/01
[Snort-users] No netmask specified for home network!, Giannis Undefined, 2005/11/01
Re: [Snort-users] CPU going very high at end of snort processing, Jason Brvenik, 2005/11/01
[Snort-users] EUSecWest/London Call for Papers and PacSec/Tokyo announcements, Dragos Ruiu, 2005/11/01
[Snort-users] Weird BASE Error..., Charles Heselton, 2005/11/01
- Re: [Snort-users] Weird BASE Error..., Kevin Johnson, 2005/11/01