Snort: by date

2504 messages starting Mar 31 02 and ending Jun 30 02
Date index | Thread index | Author index

Sunday, 31 March

Logging to Remote syslog server Terry Magee
Re: Logging to Remote syslog server Rich Adamson
RE: Logging to Remote syslog server Madziarczyk, Jonathan
Re: No alerts Chris Green
icmp: is this real? John Sage
Re: icmp: is this real? Chris Green
RE: Rules Errors Turner Ryan S CONT KPWA
Re: icmp: is this real? John Sage
snort does not log data lakshmi ramachandran
Re: icmp: is this real? Erek Adams

Monday, 01 April

BUG in stream4 reassemble Peng Yong
Re: BUG in stream4 reassemble Chris Green
Re: icmp: is this real? Chris Green
Re: snort does not log data Chris Green
Snort fails to log data janaki ramachandran
Ri: Re: rule processing. Federico
Re: Snot attacks and -z est option - regarding FAQ 1.9 counter . spy
SYN Flood preprocessor? Sheahan, Paul (PCLN-NW)
Re: icmp: is this real? John Sage
Re: Snot attacks and -z est option - regarding FAQ 1.9 counter . spy
Re: icmp: is this real? Erek Adams
IDS Policy Manager 1.2 Release jdell
Snarf will not DNS james
Re: icmp: is this real? John Sage
Spade Joint Prob table output Wilson Farrell
Re: IDS Policy Manager 1.2 Release Mike_Sands
double post of Re: Snot attacks... counter . spy
portscan log Jason Yates
Re: portscan log Erek Adams
nmap scans don't appear in portscan.log Salomon, Charlie
spp_portscan and ACID Jason Yates
stop that pesky logging Mike_Sands
Time Activated Rules Madhav Diwan
Classtype Field for Win32 Rules Andrew Blevins
Re: nmap scans don't appear in portscan.log Erek Adams
Re: nmap scans don't appear in portscan.log Jason Yates

Tuesday, 02 April

Re: Phil is coming out of the closet Jeff Nathan
Re: explicitly telling snort not to log to /var/log/snort Erik Melander
what's preferred kernel? Onie Camara
Re: Snort+flexresp Jeff Nathan
RE: nmap scans don't appear in portscan.log Estes, Matt: CPR / FCBS
Snort Working Mechanism Sonika Malhotra
RE: spp_portscan and ACID Estes, Matt: CPR / FCBS
Re: what's preferred kernel? Ralf Hildebrandt
Re: Snort+flexresp Onie Camara
Re: Snort+flexresp Jeff Nathan
RE: nmap scans don't appear in portscan.log Fallon, Benjamin
problem logging to mysql database Omolayo Salako
Re: stop that pesky logging Erek Adams
AW: problem logging to mysql database Poppi, Sandro
Problem running Snort on WinXP Grzegorz Flak
Snort, Acid, BigBrother Martin C. Walker
Re: Snort on WinXP: driver problem Dragos Ruiu
Re: Libpcap library/headers not found... Haubein, Ted
Re: acid question Michael Scheidell
pcap_loop: bogus savefile header Vincent Chen
New to Snort Whaley, Mike
how to upgrade to schema 105? Michael Scheidell
Re: Windows Warning Chris Green
Re: tcpdump and snort report 2 different TTL values Chris Green
Re: VAR and IP lists Chris Green
Demarc database schema issue Gavin O'Connor
Re: rule processing. Chris Green
Re: Snot attacks and -z est option - regarding FAQ 1.9 Chris Green
Re: Rules under SNORT_1_8 cvs tag? Chris Green
Snort and MS SQL reporting McConnon, John
Snarf will not DNS james
RE: Xp and Snort Grzegorz Flak
Re: How To Decode IPv6 Packet? Matt Watchinski
BUG in stream4 reassemble Peng Yong
Re: Demarc database schema issue Shawn Duffy
RE: Snort on WinXP: driver problem Naor
Re: BUG in stream4 reassemble Chris Green
./configure --with-mysql= ? John Sage
configure --with-mysql= ? John Sage
FW: snortdb schema update Dan Fiorito
Re: Snort+flexresp Anton A. Chuvakin
Re: ./configure --with-mysql= ? Chris Green
Re: ./configure --with-mysql= ? John Sage
Re: ./configure --with-mysql= ? John Sage
RE: ./configure --with-mysql= ? Ronneil Camara
RE: VAR and IP lists Estes, Matt: CPR / FCBS
Database event sorting Estes, Matt: CPR / FCBS
Re: Snort+flexresp Onie Camara
Re: Snarf will not DNS James Hoagland
Re: Spade Joint Prob table output James Hoagland
OT: Deciphering log entry(iptables) Scott Taylor
RE: OT what's preferred kernel? Ryan Hill
Re: Spade Joint Prob table output Wilson Farrell
Snort Solaris 8 with quad card Chris Frazier - PA
RE: how to upgrade to schema 105? Kreimendahl, Chad J
Re: OT: Deciphering log entry(iptables) Matt Kettler
Re: configure --with-mysql= ? ___cliff rayman___
Re: Snort Working Mechanism Scott Nursten
Re: Snort Solaris 8 with quad card Erek Adams
Re: configure --with-mysql= ? Jason Yates
Re: Snort Solaris 8 with quad card Scott Nursten
Re: Snort Working Mechanism Erek Adams
Re: OT: Deciphering log entry(iptables) Chris Green
unsubscribe Francois Le Bec
Re: problem logging to mysql database Mike_Sands
Re: unsubscribe Erek Adams
linux kernel? Ronneil Camara
Force a server to send fragments? Sheahan, Paul (PCLN-NW)
Re: Force a server to send fragments? Joe McAlerney
RE: Snort Solaris 8 with quad card Jason Lewis

Wednesday, 03 April

Anyone recognize this packet? Rich Adamson
RE: Anyone recognize this packet? Kjetil Laasby
Re: Snort Working Mechanism Sonika Malhotra
Anyone recognize this packet? David Bianco
AW: New to Snort Poppi, Sandro
Using Snort for Wireless Lists
Re: linux kernel? Ralf Hildebrandt
snort current doesnt run Marcello Mezzanotti
Is this a valid traffic? Onie Camara
RE: Snort Solaris 8 with quad card Chris Frazier - PA
Re: Snort Working Mechanism Phil Wood
archive snort logs? Devon Harding - GTHLA
Snort rules update Rimas
1.8.5 ? Federico Lombardo
RE: Snort rules update Kreimendahl, Chad J
FrontPage Events Bradley, Paul
Re: archive snort logs? Ralf Hildebrandt
Re: Using Snort for Wireless Mike Craik
Re: Snort rules update Erek Adams
Re: Is this a valid traffic? Skip Carter
Re: Using Snort for Wireless james
Re: Snort Working Mechanism Erek Adams
Re: Using Snort for Wireless Skip Carter
Re: Using Snort for Wireless Erek Adams
Alert but NOT log? Sheahan, Paul (PCLN-NW)
Re: Is this a valid traffic? Joe Matusiewicz
mysql schema & multiple snort versions & sensors Phil Lyons
RE: Alert but NOT log? Sheahan, Paul (PCLN-NW)
Catbird sets off alerts Kevin L Pawloski
Re: Snort Working Mechanism Sonika Malhotra
how to not to log Ronneil Camara
Re: mysql schema & multiple snort versions & sensors Phil Lyons
AW: snort activating my own script Poppi, Sandro
Re: 1.8.5 ? Chris Green
Snort Install--Win2K Whaley, Mike
Re: 1.8.5 ? Onie Camara
SPADE alerts, but doesn't log Nate S.
Re: 1.8.5 ? Chris Green
Re: Rules Errors Mike Macias
Re: snort current doesnt run Chris Green
Re: Is this a valid traffic? Chris Green
Re: 1.8.5 mysql_error ___cliff rayman___

Thursday, 04 April

Re: Alert but NOT log? james
Setting specific filters on Snort. Ashley Thomas
Re: mysql schema & multiple snort versions & sensors Erek Adams
Re: Using Snort for Wireless Aaron Richard Walters
Re: 1.8.5 ? Erek Adams
Re: archive snort logs? james
Re: archive snort logs? Skip Carter
RE: mysql schema & multiple snort versions & sensors Mike Arrison
Re: Setting specific filters on Snort. Chris Green
RE: archive snort logs? Devon Harding - GTHLA
Re: 1.8.5 mysql_error roman
RE: 1.8.5 mysql_error Steve Halligan
stop HTML post Petriz, Pablo
acid-archive-snortprob Ed Spick
Re: Using Snort for Wireless Mike Craik
Re: Using Snort for Wireless Nick Petroni
Re: FrontPage Events Roelof JT Jonkman
RE: snort current doesnt run Estes, Matt CPR / FCBS
Re: 1.8.5 mysql_error ___cliff rayman___
missing includes in large number of files Kreimendahl, Chad J
content-list rule won't work Sheahan, Paul (PCLN-NW)
Re: Alert but NOT log? Erek Adams
no UDP Denis Romanov
Re: acid-archive-snortprob ___cliff rayman___
Re: [Snort-devel] missing includes in large number of files Chris Green
Subliminal html in spam? John Sage
spp_portscan and ACID Alwin Raymundo
Re: Subliminal html in spam? Dragos Ruiu
what would be the appropriate thing to do? Onie Camara
AW: what would be the appropriate thing to do? Poppi, Sandro
Re: what would be the appropriate thing to do? Onie Camara
Re: Subliminal html in spam? J. Craig Woods
AW: what would be the appropriate thing to do? Poppi, Sandro
Re: what would be the appropriate thing to do? Onie Camara
AW: what would be the appropriate thing to do? Poppi, Sandro
maxsize of mysql db? Onie Camara

Friday, 05 April

SNMP EXCLUDE Ganu Skop
whitehats.com is online again Poppi, Sandro
RE: SNMP EXCLUDE Kjetil Laasby
Re: SNMP EXCLUDE Onie Camara
Disable spoofing ARP in kill packets Laurent Cabal
Some questions about snort Laurent Cabal
recommendations !? Hilton De Meillon
Re: content-list rule won't work Andreu . Gomez
Re: whitehats.com is online again Patrick Harper
up the snort ides Federico Rena
up the snort ides Federico Rena
RE: whitehats.com is online again Sean T. Ballard
Idea my snort database..!! kamesh_rajaram
Re: whitehats.com is online again Patrick Harper
RE: Idea my snort database..!! Steve Halligan
Re: Snort-users digest, Vol 1 #1760 - 15 msgs Denis Romanov
Re: Snort-users digest, Vol 1 #1762 - 13 msgs Denis Romanov
Snort 99% cpu utilization and no process activity Mike Ahern
ACID question Raymond Jacob
test message -- ignore Chris Eidem
Snort and the Windows Family... Benoit Clarembeau
Re: Snort 99% cpu utilization and no process activity Andreas Östling
Re: Some questions about snort Chris Green
Re: Snort and the Windows Family... Erek Adams
RE: Alert but NOT log? Sheahan, Paul (PCLN-NW)
Re: Snort and the Windows Family... Benoit Clarembeau
what does this mean Omolayo Salako
Re: what does this mean krista l merrill
RE: what does this mean McCammon, Keith
Re: what does this mean Ryan Russell
Re: what does this mean Onie Camara
TCP ******S* portscan Marcel Hauser
Re: TCP ******S* portscan Matt Kettler
RE: what does this mean Andrew Blevins
OT: RE: what does this mean Matt Kettler
RE: TCP ******S* portscan Andrew Blevins
RE: TCP ******S* portscan Hauser Marcel
RE: TCP ******S* portscan Andrew Blevins
Re: TCP ******S* portscan Hauser Marcel
update rules set automatically jianwen pi
RE: TCP ******S* portscan Marcel Hauser
Two content variables Kevin L Pawloski
Re: TCP ******S* portscan Matt Kettler
Re: update rules set automatically Erek Adams
Re: Two content variables Erek Adams
Re: Two content variables Kevin L Pawloski
Re: Two content variables Erek Adams
Re: TCP ******S* portscan Chris Keladis
Re: TCP ******S* portscan Ricardo SIGNES
Portscanning from my network Steve Ochani
what would be the effect? Onie Camara
Re: OT: RE: what does this mean Phil Wood
AW: Some questions about snort Poppi, Sandro
AW: whitehats.com is online again Poppi, Sandro

Saturday, 06 April

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
Problem with Demarc Andrea
Re: whitehats.com is online again John Sage
Re: TCP ******S* portscan "SOLVED" Marcel Hauser
Re: Subliminal html in spam? John Sage
Snort Rule Id (sid) Daniel J Camero
Re: *****SPAM***** Subliminal html in spam? Shane Williams

Sunday, 07 April

session log Peng Yong
Anomalous packet logged by Snort Bill McCarty
idmef on FreeBSD Rob Hughes
Re: Anomalous packet logged by Snort Bill McCarty
ACID: sort order for email "alerts full" John Sage

Monday, 08 April

Todays checkout fails miserably... Ralf Hildebrandt
RE: Portscanning from my network Sheahan, Paul (PCLN-NW)
RE: Anomalous packet logged by Snort Hawrylkiw, Dan G
How does one print out summary of unique addresses. Raymond Jacob
Flexresp Alwin Raymundo
RE: Portscanning from my network Ryan Hill
Re: idmef on FreeBSD Joe McAlerney
Re: Flexresp Phil Wood
Re: Flexresp Alwin Raymundo
Re: Todays checkout fails miserably... Chris Green
Re: session log Chris Green
Re: Anomalous packet logged by Snort Chris Green
RE: Snort Install--Win2K Michael Steele
private IP scans White, Stacy
RE: Flexresp Ronneil Camara
RE: Flexresp Alwin Raymundo
Re: Flexresp Phil Wood
RE: Flexresp Ronneil Camara
Re: Flexresp counter . spy
Re: Anomalous packet logged by Snort Chris Green
RE: private IP scans Sheahan, Paul (PCLN-NW)
Snort and Logwatch Shane Hickey
Re: Snort and Logwatch Ed Kasky
Snort 1.8.6 is Available! Chris Green
RE: Flexresp Sheahan, Paul (PCLN-NW)
RE: Flexresp Ronneil Camara
RE: Snort 1.8.6 is Available! Ronneil Camara
RE: private IP scans McCammon, Keith
AW: Snort and Logwatch Poppi, Sandro
Re: Anomalous packet logged by Snort Chris Green

Tuesday, 09 April

Firewall Tester 0.6 Andrea Barisani
where can i find out the meaning Fuchs Bernhard
RE: Flexresp Alwin Raymundo
Re: Flexresp Alwin Raymundo
Help-me Carlos Augusto Silva
Re: Help-me Carlos Augusto Silva
Snort 1.8.6 RPMS? Lou Spironello
Re: Help-me Chris Green
Re: what would be the effect? Andreu . Gomez
Re: Help-me Carlos Augusto Silva
Re: Snort 1.8.6 RPMS? Lou Spironello
Re: Snort 1.8.6 RPMS? Chris Green
missing declaration makes 1.8.6 to segfault Federico Lombardo
Sql syntax error logging to mysql Ian Macdonald
Re: missing declaration makes 1.8.6 to segfault Chris Green
Other Snort rulesets? krista l merrill
Snort ERROR on Kernel Carlos Augusto Silva
(no subject) Federico Rena
Re: Other Snort rulesets? Chris Green
RE: Snort ERROR on Kernel Wirth, Jeff
Re: Firewall Tester 0.6 Jim Geovedi
upgrading from 1.8.4 to 1.8.6 Tony Wong
Re: (no subject) Matt Kettler
Re: where can i find out the meaning (stealth nop) Matt Kettler
ICMP Destination Unreachable Tony Wong
SMTP rule needed Paul . Simons
Re: upgrading from 1.8.4 to 1.8.6 Ryan Russell
Re: SMTP rule needed Matt Kettler
Re: ICMP Destination Unreachable Matt Kettler
RE: ICMP Destination Unreachable Wirth, Jeff
Snort error on kernel Carlos Augusto Silva
Re: SMTP rule needed Paul . Simons
I can't logging data : My snort.conf Dino Macedo Amaral
Snort on HP-UX Taylor Lewick
Need help with a rule Sheahan, Paul (PCLN-NW)
Re: Need help with a rule Ryan Russell
RE: Need help with a rule Sheahan, Paul (PCLN-NW)
RE: Need help with a rule Ryan Russell
Error opening adapter... Thomas Schweikle
Re: Snort on HP-UX Chris Green
Re: Error opening adapter... secsnort
snort on IP-less interface mel
AW: snort on IP-less interface Poppi, Sandro

Wednesday, 10 April

Re: snort on IP-less interface 'mel'
Re: SMTP rule needed Andreu . Gomez
Re: Need help with a rule Andreas Östling
not really off topic Fuchs Bernhard
Patch for bug in Acid criteria removal Mark Vevers
Re: Error opening adapter... Thomas Schweikle
Unable to start snort version 1.8.6 in Daemon mode rakesh
RE: Need help with a rule Estes, Matt CPR / FCBS
Snort-1.8.6 on SuSE-7.2 selfmade pcap-0.7.1 dies in 'content list' ?! Chr. v. Stuckrad
Re: Unable to start snort version 1.8.6 in Daemon mode Brian
Stealth Packets Ok? Estes, Matt CPR / FCBS
RE: SMTP rule needed Wirth, Jeff
simple reporter Onie Camara
need help asap noorulsadiqin azbiya
Re: Snort on HP-UX Taylor Lewick
Re: bad priority messages Chr. v. Stuckrad
Snort error on kernel - please helpme Carlos Augusto Silva
How do I ignore portscans from everything but HOME_NET? Steve Ochani
(no subject) Federico Rena
(no subject) Federico Rena
(no subject) Federico Rena
Thoughts on internal vs. external IDS rulesets Chris Eidem
RE: (no subject) Omolayo Salako
Placement of Snort IDS Kenny D
Re: Thoughts on internal vs. external IDS rulesets Steve Ochani
RE: How do I ignore portscans from everything but H OME_NET? Slighter, Tim
Re: Snort on HP-UX Chris Green
RE: Thoughts on internal vs. external IDS rulesets Chris Eidem
Problem with a rule Tom Fischer
Libpcap library/headers not found and bigendian ? Daniel Curry
is this a bad traffic? Ronneil Camara
Re: is this a bad traffic? Matt Kettler
newbie question mike maxwell
Re: Problem with a rule Andreas Östling
Linux parameters larosa, vjay
RE: Placement of Snort IDS Sheahan, Paul (PCLN-NW)
include problem in 1.8.6 Mipam
RE: newbie question Sheahan, Paul (PCLN-NW)
Gigabit snort? Michael Cunningham
RE: Thoughts on internal vs. external IDS rulesets Sheahan, Paul (PCLN-NW)
RE: How do I ignore portscans from everything but HOME_NET? Steve Ochani
Patrick Mullen's webpage? Steve Ochani
RE: How do I ignore portscans from everything but HOME_NET? Steve Ochani
can't start snort c cheng
Re: include problem in 1.8.6 Chris Green
RE: How do I ignore portscans from everything but HOME_NET? Erek Adams
Re: can't start snort Erek Adams
Re: include problem in 1.8.6 Mipam
Re: Libpcap library/headers not found... Richard Powell
Re: can't start snort c cheng
Re: include problem in 1.8.6 Scott Fringer
Re: Snort on HP-UX Ralf Hildebrandt
Re: (no subject) John Sage
Re: Anomalous packet logged by Snort (fwd) Bill McCarty
AW: Patrick Mullen's webpage? Poppi, Sandro

Thursday, 11 April

Would you suspect? Ronneil Camara
snort_stat Ganu Skop
(no subject) rakesh
Re: can't start snort Andreu . Gomez
RE: Thoughts on internal vs. external IDS rulesets Alwin Raymundo
looks false-positive Ronneil Camara
Re: Would you suspect? Chris Green
RE: Would you suspect? Ronneil Camara
Blocking individual IP's O'Brien, James
RE: looks false-positive Ronneil Camara
looks false-positive David Bianco
acid on RH7.2 Richard Noonan
RE: Blocking individual IP's Omolayo Salako
Re: Patch for bug in Acid criteria removal roman
RE: Blocking individual IP's Sean T. Ballard
RE: Blocking individual IP's Ronneil Camara
Re: acid on RH7.2 Richard Noonan
Re: Snort 1.8.6 RPMS? Lou Spironello
Re: acid on RH7.2 Andreu . Gomez
RE: not really off topic counter . spy
Re: acid on RH7.2 Nate S.
Re: Linux parameters Phil Wood
RE: Thoughts on internal vs. external IDS rulesets Sheahan, Paul (PCLN-NW)
RE: Would you suspect? Sheahan, Paul (PCLN-NW)
RE: snort_stat Sheahan, Paul (PCLN-NW)
RE: Would you suspect? Ronneil Camara
shell code detect Omolayo Salako
RE: looks false-positive Ronneil Camara
Re: include problem in 1.8.6 Mipam
Re: Snort on HP-UX Taylor Lewick
HPUX configure question Taylor Lewick
RE: shell code detect Steve Halligan
SNMP complie question Taylor Lewick
Unified Alert Output and IP Reversal James Harrison
Re: Snort on HP-UX Chris Green
Snort database relationship info? Smith, Israel G
Re: not really off topic Tom Fischer
compiling snort with snmp Taylor Lewick
RE: Unified Alert Output and IP Reversal Steve Halligan
interface name in alert? Howell, Paul
Re: Snort database relationship info? Chris Reid
Re: can't start snort Erek Adams
Re: interface name in alert? Erek Adams
RE: Snort database relationship info? Steve Halligan
Re: Snort database relationship info? roman
RE: Snort database relationship info? Smith, Israel G
Re: interface name in alert? Andreas Östling
Snorting the MAC address Nate Haggard
Re: Snorting the MAC address Erek Adams
RE: Snorting the MAC address Turner Ryan S CONT KPWA
Re: Snorting the MAC address Jason Yates
RE: Snorting the MAC address Matt Kettler
Re: Snorting the MAC address James Hoagland
Attenion Windows Users: Latest Snort 1.86 RELEASE Binaries available Michael Steele
RE: Attenion Windows Users: Latest Snort 1.86 RELEASE Binaries available Wayne T Work

Friday, 12 April

RE: acid on RH7.2 Anthony Liberty
Source Port 0 traffic Buchanan, Randy
Re: Snorting the MAC address SkatFiend
IGMP traffic Sheahan, Paul (PCLN-NW)
RE: Source Port 0 traffic Sheahan, Paul (PCLN-NW)
Best Way To Handle New Rules Kevin L Pawloski
Re: Best Way To Handle New Rules Chris Green
Cisco PIX firwalls.. Austin Gonyou
Snort/ACID Database Cleanup krista l merrill
RE: Snort/ACID Database Cleanup Ronneil Camara
Re: Cisco PIX firwalls.. Ashley Thomas
All shellcode rules invalid Rob Hughes

Saturday, 13 April

Re: All shellcode rules invalid Andreas Östling
SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
need your help noorulsadiqin azbiya
AW: need your help Poppi, Sandro
snort & mysql Hilton De Meillon
Re: Snort-users digest, Vol 1 #1789 - 8 msgs lisuke
Re: Cisco PIX firwalls & Cisco Routers Scot Scot
Re: snort & mysql Scott Doane
Re: All shellcode rules invalid Rob Hughes
Re: Cisco PIX firwalls.. Erek Adams
RE: Blocking individual IP's Frank Knobbe
Re: Gigabit snort? Frank Knobbe
Re: snort & mysql Manuel Pompeia Santos
(no subject) Ha Hoang
Rule Sets Ha Hoang

Sunday, 14 April

tcpdump format Micha Silver
Portscans from China ? Tudor Panaitescu
Flexresp problem Tudor Panaitescu
Demarc database schema issue Gavin O'Connor
'more than one result' error messages weidong xiao
Active Firewalling Patrick Lanphier
Re: Classtype Field for Win32 Rules Dragos Ruiu
configure snort to drop payloads Lyle Sudin
SPADE alerts, but doesn't log nate
acid-archive-problem Ed Spick
RE: Anomalous packet logged by Snort Safka
Snort 99% cpu utilization and no process activity Mike Ahern
Re: maxsize of mysql db? Chris Adams
Portscanning from my network Steve Ochani
ACID Database Error Demetri Mouratis
(no subject) Chris Eidem
Re: missing declaration makes 1.8.6 to segfault Andrew R. Baker
correlation on a snort sensor Sven Humm
Re: Anomalous packet logged by Snort Dan Hawrylkiw
snort redhat 7.2 server and mysql Kenny D
Mysql dbschema changed again? How to upgrade? Alan_Kloster
Libpcap library/headers not found and bigendian ? Daniel Curry
GB Snort How ya Doin
acceptable packet drop rate for snort lpj0508
Placement of Snort IDS Kenny D
ICMP Destination Unreachable (Port Unreachable) Tony Wong
Snort/ACID PostgreSQL DB error Demetri Mouratis
Where does one find help with Acid? Raymond Jacob
RE: Portscans from China ? Mike Arrison
will barnyard output full detail for alert? Michael Scheidell
barnyard problem dotted quad backwards or corrupted? Michael Scheidell
RE: Cisco PIX firwalls.. Kent Hundley
New database plugin documentation Roman Danyliw
log ftp servers in our network Banai Zoltan
Re: ICMP Destination Unreachable (Port Unreachable) Pierre
RE: Demarc database schema issue Scott Stokes
Re: snort & mysql Alwin Raymundo
Re: tcpdump format Erek Adams
Re: Flexresp problem Erek Adams
Re: SPADE alerts, but doesn't log Erek Adams
Re: configure snort to drop payloads Erek Adams
Re: Snort 99% cpu utilization and no process activity Erek Adams
Re: Active Firewalling Erek Adams
Re: (no subject) Erek Adams
Re: correlation on a snort sensor Erek Adams
Re: Libpcap library/headers not found and bigendian ? Erek Adams
Re: ICMP Destination Unreachable (Port Unreachable) Erek Adams
Re: Placement of Snort IDS Erek Adams
Re: acceptable packet drop rate for snort Erek Adams
Re: log ftp servers in our network Erek Adams
Re: will barnyard output full detail for alert? Andrew R. Baker
Re: barnyard problem dotted quad backwards or corrupted? Andrew R. Baker
Re: log ftp servers in our network Magnus

Monday, 15 April

Re: Flexresp problem Tudor Panaitescu
Re: ACID Database Error Andreu . Gomez
Segmentation fault (core dumped) Carlos Augusto Silva
Re: Unified Alert Output and IP Reversal Michael Scheidell
Re: Portscans from China ? Michael Scheidell
WEB-ATTACKS id command attempt John-Magne Bredal
Re: snort redhat 7.2 server and mysql Andreu . Gomez
ACID + Snort 1.8.6 + Apache 2.0 + PHP 4.2.0 RC 4 Wright, Bob
Best snort list replier / contributor Petriz, Pablo
acid mike maxwell
I found a bug Ronneil Camara
RE: Best snort list replier / contributor McCammon, Keith
Re: ACID + Snort 1.8.6 + Apache 2.0 + PHP 4.2.0 RC 4 Thomas Springer
Re: ACID + Snort 1.8.6 + Apache 2.0 + PHP 4.2.0 RC 4 Andreu . Gomez
Re: Libpcap library/headers not found and bigendian? Daniel Curry
Re: Best snort list replier / contributor Andreas Östling
Too many stealth alerts Estes, Matt CPR / FCBS
Re: Libpcap library/headers not found and bigendian? Daniel Curry
Re: 'more than one result' error messages roman
Error if I start snort Ali Dogru
Re: Error if I start snort Chris Green
Ignoring all traffic from a certain network Stephen C Burns
RE: Best snort list replier / contributor Erek Adams
Re: Best snort list replier / contributor Erek Adams
Re: Flexresp problem Erek Adams
Re: Libpcap library/headers not found and bigendian? Erek Adams
RE: Ignoring all traffic from a certain network Wirth, Jeff
Re: Ignoring all traffic from a certain network piotr . bulczak
compiling with cc on hpux Taylor Lewick
Snort w/SnortSnarf index.html not showings stats Byerly, Ted
Re: log ftp servers in our network piotr . bulczak
Ignoring all traffic from a certain network Stephen C Burns
having trouble with idmef support Andrew Walther
Re: Best snort list replier / contributor Erek Adams
Re: WEB-ATTACKS id command attempt Erek Adams
Re: I found a bug Erek Adams
RE: (no subject) Chris Eidem
Re: Too many stealth alerts Erek Adams
Re: Ignoring all traffic from a certain network Erek Adams
RE: Ignoring all traffic from a certain network Tom Sevy
RE: WEB-ATTACKS id command attempt Gray . Brendan
RE: Syslog Coughs? Erek Adams
RE: Cisco PIX firwalls.. Joe Smith
Re: Segmentation fault (core dumped) Erek Adams
RE: Cisco PIX firwalls.. Erek Adams
Re: WEB-ATTACKS id command attempt Piotr Bulczak
Re: Libpcap library/headers not found and bigendian? Daniel Curry
RE: Too many stealth alerts Estes, Matt CPR / FCBS
Re: Flexresp problem Tudor Panaitescu
RE: Cisco PIX firwalls.. Austin Gonyou
How much can snort Snort? Kevin L Pawloski
snort 1.8.6 crashing when running two instances on the same interface with Openbsd Jerome Magnin
Re: need your help Matt Kettler
Re: WEB-ATTACKS id command attempt Phil Wood
Re: How much can snort Snort? Phil Wood
Re: Flexresp problem Erek Adams
Re: Cisco PIX firwalls.. counter . spy
Re: snort 1.8.6 crashing when running two instances on the same interface with Openbsd Erek Adams
Re: How much can snort Snort? Mipam
Re: How much can snort Snort? Roelof JT Jonkman
Network Adapter failed with snort ! Nguyen Thai Ha
Re: snort 1.8.6 crashing when running two instances on the same interface with Openbsd Chris Green
RE: I found a bug Ronneil Camara
Re: Flexresp problem Tudor Panaitescu

Tuesday, 16 April

Re: snort 1.8.6 crashing when running two instances on the same interface with Openbsd Andreas Östling
Re: Network Adapter failed with snort ! Andreu . Gomez
Which version should I use? 1.8.3 .4 .5 or .6 Noller, Gregory
Re: Which version should I use? 1.8.3 .4 .5 or .6 Andrew R. Baker
Duplicate sid:257; ???? Stephen Cravey
Snort, Demarc and excessive logging Ralf Hildebrandt
FW: Demarc PureSecure 1.05 may be other (user can bypass login) Ryan Hill
ICMP Redirect host Tony Wong
How to ignore scan from a host Tony Wong
Re: Duplicate sid:257; ???? Brian
Snort and MySQL ./configure problems Noller, Gregory
Re: Best Way To Handle New Rules Brian
RE: ICMP Destination Unreachable (Port Unreachable) Tony Wong
Re: How to ignore scan from a host Brian
SSH scans Manuel Pompeia Santos
snort performance Christian Kuhtz
RE: snort performance Christian Kuhtz
RE: RE: snort performance Williams Jon
snort-current rules syntax error Sean Wheeler
Re: configure snort to drop payloads Erek Adams
RE: How to ignore scan from a host Sheahan, Paul (PCLN-NW)
Re: How to ignore scan from a host Erek Adams
Re: snort-current rules syntax error Chris Green
Re: configure snort to drop payloads Lyle Sudin
a little confusion UU/ppp139352
WG: Demarc Security Update Advisory Poppi, Sandro
AW: Snort and MySQL ./configure problems Poppi, Sandro

Wednesday, 17 April

Re: a little confusion Erek Adams
easy one... J. Craig Woods
non privileged portscans Eagle_2-7
DOS MSDTC attempt Kenny D
Problems on XP Fuchs Bernhard
RV: Snort exploits Petriz, Pablo
Re: DOS MSDTC attempt Kenny D
Re: DOS MSDTC attempt Andreu . Gomez
www.snort.org down? wfenwick
RE: Snort and MySQL ./configure problems Estes, Matt CPR / FCBS
RE: RV: Snort exploits Mike Arrison
Re: RV: Snort exploits Chris Green
Re: www.snort.org down? Gerardo Gregory
Re: www.snort.org down? Phil Wood
RE: non privileged portscans Wirth, Jeff
Problem enabling flexresp bthaler
FreeBSD + Mysql + Snort Hall, Duane
Red Hat's 2.4.2 Kernel version compatibility Konstantinos Papadakis
Re: RE: snort performance james
Snort + OpenBSD3.0 "Easy" Questions Ken Schweigert
RE: RV: Snort exploits counter . spy
RE: FreeBSD + Mysql + Snort Wirth, Jeff
RE: FreeBSD + Mysql + Snort Hall, Duane
FreeBSD + Mysql + Snort Hall, Duane
Re: Red Hat's 2.4.2 Kernel version compatibility Steve Ochani
Re: Problem enabling flexresp bthaler
Re: Problem enabling flexresp Erek Adams
Setting an alert for a "connection threshold" Stephen C Burns
Re: configure snort to drop payloads Lyle Sudin
Re: Problem enabling flexresp bthaler
RE: FreeBSD + Mysql + Snort Erek Adams
RE: FreeBSD + Mysql + Snort Hall, Duane
Re: configure snort to drop payloads Erek Adams
RE: RE: snort performance Christian Kuhtz
Can I get alerts for IM Paul . Simons
RE: RV: Snort exploits counter . spy
Fw: Re: Snort exploits Dragos Ruiu
Re: RE: snort performance james
Re: Disable spoofing ARP in kill packets Jeff Nathan
Re: configure snort to drop payloads James Hoagland
Win2k and dial-up connection Christian Nesmark
Snort defining WORDS_BIGENDIAN Ashley Thomas
memory allocate error check Peng Yong
Re: Cisco PIX firwalls.. Frank Knobbe
Snort, mysql logging problems Tony Wong
Re: Gigabit snort? Jeff Nathan
fragroute vs. snort: the tempest in a teacup Dragos Ruiu

Thursday, 18 April

Re: configure snort to drop payloads Dr. Richard W. Tibbs
insertion and evasion Federico Lombardo
Re: configure snort to drop payloads Chris Keladis
Re: configure snort to drop payloads Alex Pinheiro Machado Rodrigues
Snort sendme email Carlos Augusto Silva
mysql 100% cpu utliization Redman, Ken
Re: Re: configure snort to drop payloads Dr. Richard W. Tibbs
Re: insertion and evasion Saad Kadhi
Re: mysql 100% cpu utliization Christian Kuhtz
RE: RE: snort performance Williams Jon
help! 李洪源
Snort on HPUX Taylor Lewick
Re: configure snort to drop payloads James Hoagland
Re: Snort on HPUX James Hoagland
signature for a virus Ronneil Camara
Re: fragroute vs. snort: the tempest in a teacup Dug Song
snort_stat.pl John Hally
Segfault on SMB Alert Whyte, Jesse
Addendum: Segfault on SMB Alert Whyte, Jesse
Fw: LOG DE ERRO Carlos Augusto Silva
Snort on Windows 2000 Server platform. Mikhail Koulechov
RE: Snort on Windows 2000 Server platform. Michael Steele
RE: Snort on Windows 2000 Server platform. Whaley, Mike
ERROR LOG Carlos Augusto Silva
RE: WG: Demarc Security Update Advisory Fallon, Benjamin
hp compile question Taylor Lewick
Re: ERROR LOG bthaler
RE: snort_stat.pl Sheahan, Paul (PCLN-NW)
RE: RE: snort performance Kreimendahl, Chad J
RE: snort_stat.pl Wirth, Jeff
Re: hp compile question Chris Green
Re: ERROR LOG Sam
RE: WG: Demarc Security Update Advisory Ryan Hill
RE: ERROR LOG Wirth, Jeff
RE: ERROR LOG Ronneil Camara
Re: ERROR LOG JPP
Re: Snort sendme email Erek Adams
Re: mysql 100% cpu utliization Erek Adams
Re: help! Erek Adams
Thanks a bunch, seriously Taylor Lewick
Re: Addendum: Segfault on SMB Alert Erek Adams
Re: fragroute vs. snort: the tempest in a teacup Darren Reed
Re: Fw: LOG DE ERRO bruno taranto
Re: fragroute vs. snort: the tempest in a teacup Francis Cianfrocca
Re: Re: fragroute vs. snort: the tempest in a teacup Jason Haar
Snort in Brazil Alex Pinheiro Machado Rodrigues

Friday, 19 April

make error in snort-current spo_SnmpTrap.@OBJEXT@ Mark Rowlands
Re: make error in snort-current spo_SnmpTrap.@OBJEXT@ Chris Green
Re: Snort/ACID Database Cleanup Mark Rowlands
Re: make error in snort-current spo_SnmpTrap.@OBJEXT@ Mark Rowlands
Acid Fatal error Kenny D
Re: fragroute vs. snort: the tempest in a teacup Ron DuFresne
RE: fragroute vs. snort: the tempest in a teacup Enno Rey
Re: Syslog output other file Carlos Augusto Silva
RE: Question about Demarc Andrew Blevins
Re: snort not logging to log files.. Erek Adams
Snort 1.8.4 Potts, Ross A.
Re: Syslog output other file Erek Adams
Re: Acid Fatal error roman
Re: fragroute vs. snort: the tempest in a teacup Brad Powell
Syslog output other file Carlos Augusto Silva
Snort syslog em outro arquivo Carlos Augusto Silva
Re: help! Erek Adams
Re: Syslog output other file Matt Kettler
Snort XML Report Generation Matthew J. Vinton
RE: Syslog output other file Wirth, Jeff
Re: help! 李洪源
Question about Demarc Spy Guy
RE: Question about Demarc larosa, vjay
Re: fragroute vs. snort: the tempest in a teacup Steven M. Bellovin
Re: help! Erek Adams
Re: fragroute vs. snort: the tempest in a teacup Marco Thorbruegge
Re: Snort + OpenBSD3.0 "Easy" Questions [Solved] Ken Schweigert
snort not logging to log files.. Ross Tsolakidis
Re: Syslog output other file Erek Adams
RE: Snort/ACID Database Cleanup Whaley, Mike
Re: Snort/ACID Database Cleanup Mark Rowlands

Saturday, 20 April

Re: Flexresp problem Tudor Panaitescu
Re: Flexresp problem Alwin Raymundo
Re: simple mistake in icmp payload calculation Roman Danyliw
Re: Flexresp problem Tudor Panaitescu
snort cvs complains Ralf Hildebrandt
Re: [Snort-sigs] RESP not working in rules Matt Kettler
RE: snort cvs complains Ronneil Camara
Re: snort cvs complains Ralf Hildebrandt
Re: snort cvs complains Ralf Hildebrandt
simple mistake in icmp payload calculation Oliver Friesen
Re: Flexresp problem Erek Adams
Re: fragroute vs. snort: the tempest in a teacup Crist J. Clark
Newbie question Chewie

Sunday, 21 April

AW: Newbie question Poppi, Sandro
Re: Newbie question Patrick Harper
Re: Flexresp problem Tudor Panaitescu
Re: Flexresp problem Erek Adams
what is good Onie Camara
proper usage of $SHELLCODE_PORTS ? Jon Hart
Re: what is good John Sage
RE: proper usage of $SHELLCODE_PORTS ? larosa, vjay
Re: what is good ScotScot
Re: what is good ScotScot
Re: proper usage of $SHELLCODE_PORTS ? Jon Hart
Re: what is good Onie Camara
SnortSnarf Compile error nanthan

Monday, 22 April

Re: what is good Andreu . Gomez
Re: SnortSnarf Compile error Andreu . Gomez
writing snort rules ? <newbies> Anthony Liberty
Re: writing snort rules ? <newbies> Erek Adams
Re: proper usage of $SHELLCODE_PORTS ? Jon Hart
Re: proper usage of $SHELLCODE_PORTS ? Martin Roesch
RE: proper usage of $SHELLCODE_PORTS ? larosa, vjay
LogCheck Carlos Augusto Silva
SHELLCODE x86 unicode NOOP Tony Wong
Oinkmaster v0.4 Andreas Östling
Re: SHELLCODE x86 unicode NOOP Erek Adams
HOME_NET question... Bob Hillegas
Re: HOME_NET question... Erek Adams
Re: SHELLCODE x86 unicode NOOP Dragos Ruiu
Snort installation document for review. Aidan Carty
writing to log file and running a script at once??? Lookman Fazal
RE: snort not logging to log files.. Ross Tsolakidis
SHELLCODE x86 EB OC NOOP Tony
RE: writing to log file and running a script at onc e??? Omolayo Salako
Re: writing to log file and running a script at once??? Erek Adams
RE: snort not logging to log files.. Erek Adams
fragroute related fixes need testing on real networks Chris Green
OT: ipfilter Suggestions for Snort Use Ryan Hill
Mandrake 8.0 nitewalker
Snort In the news: RE: Fragroute Greg Wright
Re: HOME_NET question... John Sage
Re: fragroute related fixes need testing on real networks Martin Roesch
Re: [Snort-devel] fragroute related fixes need testing on real networks Chris Green
regarding Snort design. Ashley Thomas
Re: Mandrake 8.0 Erek Adams
Re: regarding Snort design. Erek Adams

Tuesday, 23 April

Re: HOME_NET question... Bob Hillegas
Snort and network taps counter . spy
Re: Snort and network taps Chris Green
Snort install document for peer review. Aidan Carty
Re: Snort install document for peer review. Patrick Harper
AW: Snort and network taps Poppi, Sandro
Re: HOME_NET question... Phil Wood
RE: OT: ipfilter Suggestions for Snort Use Justin Honold
RE: Snort and network taps Wirth, Jeff
Re: [Snort-devel] fragroute related fixes need testing on real networks Chris Green
Barnyard reversing IPs Pricher Jeffrey Cntr 868CS/SCOY
Re: Snort and network taps Jeff Nathan
<no subject> Nils Michaelsen
List of explanations for methods? Lepchenske, Craig L (Raytheon)
snort 1.8.6 tarball on Red Hat 7.2 Nils Michaelsen
Re: OT: ipfilter Suggestions for Snort Use James Ainslie
unsubscribe Martin Claesson
Dynamic rule activation/deactivation. Ashley Thomas
port 135 scans Michael Anderson
Tuning snort rules. Ian Macdonald
Re: Dynamic rule activation/deactivation. Chris Green
Re: Snort installation document for review. Jon Ottar Runde
Re: Snort and network taps Jason Haar
alerts Jason Burnett
snort uberscript Jeff Nathan
Re: Snort and network taps Jeff Nathan
Re: Snort and network taps Jason Haar
Signature names Mike Macias
Re: Signature names Andrew R. Baker
snort recieved signal 3, exiting steve nutt
stream4 oddity Frank Knobbe

Wednesday, 24 April

Error initializing NIC sheabo
RE: Error initializing NIC Reinhard Doberstein
Re: Snort-users -- confirmation of subscription -- request 370109 Nanthan
confirm 370109 Nanthan
Alert Method in Snort & SnortSnarf Pathmenanthan Ramakrishna
RE: Alert Method in Snort & SnortSnarf Potts, Ross A.
howto test snort ? Hilton De Meillon
Alert File in Snort & SnortSnarf nanthan
Re: stream4 oddity Chris Green
RE: Snort and network taps Fuchs Bernhard
RE: Error initializing NIC Reinhard Doberstein
Snort Rules Database James Ainslie
RE: Tuning snort rules. Williams Jon
Re: stream4 oddity Frank Knobbe
snort logging to sybase Galappatti, Kishantha
RE: Signature names Redman, Ken
p2p bird-dog rules Mike Shaw
RE: stream4 oddity --- Update Frank Knobbe
Re: Tuning snort rules. Ian Macdonald
p2p bird-dog rules David Bianco
STEALTH ACTIVITY (NULL scan) ??? Ing. Daniel Manrique
RE: STEALTH ACTIVITY (NULL scan) ??? McCammon, Keith
Re: stream4 oddity --- Update Chris Green
Re: p2p bird-dog rules Erek Adams
RE: Tuning snort rules. Williams Jon
fragrouter missed beginning Jason Yates
snort and big brother Taylor Lewick
New options coming out in 1.8.7beta1 Chris Green
Re: Tuning snort rules. Erek Adams
Re: fragrouter missed beginning Chris Green
snort 186 does not detect/log any portscans counter . spy
Re: Snort exploits Chris Green
Re: snort and big brother Sentinel Sentinel
gigabit ids Sean A Ensz/cis/evp/Okstate
Re: gigabit ids Leigh David Heyman
Snot based attacks and the -z est option. larosa, vjay
SnortSam update Frank Knobbe
real basic starter rules Harry Putnam
RE: Buffer too small for packet.dll? (was: Error initializing NIC) John Goggan

Thursday, 25 April

Windows SNORT XML Logs Jason Withrow
RE: Buffer too small for packet.dll? (was: Error i nitializing NIC) Reinhard Doberstein
defining $external_net Metz, Tim
Re: defining $external_net Erek Adams
RE: defining $external_net Wirth, Jeff
RE: defining $external_net Tom Sevy
Re: real basic starter rules Phil Wood
Re: Buffer too small for packet.dll? (was: Error initializing NIC) Chris Reid
RE: defining $external_net Metz, Tim
Re: snort 186 does not detect/log any portscans counter . spy
FW: Snot based attacks and the -z est option. larosa, vjay
Disabling state alerts separately from evasion alerts Chris Green
Q-ICMP rule/IDS202 mike
Advice on the Network Infrastructure Side of IDS Design... Mike Ahern
RE: Q-ICMP rule/IDS202 Wirth, Jeff
ACID bug with archiving Anton A. Chuvakin
Snort dying unexpectedly John Hally
RE: Snot based attacks and the -z est option. counter . spy
Re: Snort dying unexpectedly Chris Green
RE: Snort dying unexpectedly John Hally
RE: Snort dying unexpectedly Tom Sevy
Re: Snort dying unexpectedly Chris Green
Is this a real nimda? Ronneil Camara
Re: Snort dying unexpectedly Skip Carter
RE: Snort dying unexpectedly John Hally
RE: Advice on the Network Infrastructure Side of IDS Design... counter . spy
rule question Taylor Lewick
KLEZ Alejandro Flores
RE: rule question Frank Knobbe
Re: KLEZ Onie Camara
Snort rules James Ainslie
(no subject) C Boss
Re: Snort exploits Jose Nazario
RE: Snot based attacks and the -z est option. larosa, vjay
RE: Is this a real nimda? Sheahan, Paul (PCLN-NW)
Razorback Sheahan, Paul (PCLN-NW)
SMTP RCPT TO overflow Jhumri Tilayia
Freebsd Snort starts with no errors but goes to bpf in top 0% cpu Alan_Kloster
RE: fragroute vs. snort: the tempest in a teacup Ron DuFresne
RE: fragroute vs. snort: the tempest in a teacup Craig, Scott
Re: Snort rules Erek Adams
Re: SMTP RCPT TO overflow Ralf Hildebrandt
Re: (no subject) Ralf Hildebrandt
Tag: and mysql and Demarc. Ian Macdonald
Re: Snort dying unexpectedly Chris Green
Re: SMTP RCPT TO overflow Jason Haar
HP-UX /Sparc/ Linux/weirdplatform users Chris Green
Snort Users Group IN San Francisco Bay ? Mikael Fantaye
snort-users mailinglist trigger snort Martin Forest
snort sigs for Solaris login exploit? Russell Fulton
Re: snort-users mailinglist trigger snort Jason Haar
Re: real basic starter rules Harry Putnam

Friday, 26 April

Re: [unisog] Solaris system compromised via telnet. New exploit? Andreas Östling
RE: Freebsd Snort starts with no errors but goes to bpf in top 0% cpu Wirth, Jeff
Snort user's group in NOVA ? Jhumri Tilayia
RE: Freebsd Snort starts with no errors but goes to bpf in top 0% cpu Alan_Kloster
Re: Snot based attacks and the -z est option. Chris Green
RE: Snort user's group in NOVA ? McCammon, Keith
RE: Snot based attacks and the -z est option. larosa, vjay
Re: Snot based attacks and the -z est option. counter . spy
Re: Snot based attacks and the -z est option. Chris Green
Re: Snot based attacks and the -z est option. Chris Green
RE: Snot based attacks and the -z est option. larosa, vjay
RE: Snot based attacks and the -z est option. larosa, vjay
RE: Freebsd Snort starts with no errors but goes to bpf in top 0% cpu Wirth, Jeff
Archiving Snort--mysql questions Whaley, Mike
ACTION: Snort user's group in NOVA ? McCammon, Keith
Commercial version of Snort Laurent Cabal
Snort signatures Laurent Cabal
Re: Commercial version of Snort mike maxwell
Newbie need advice ! Gabriel Zabal
AnalogX (OT) Tim Sailer
Re: Snort signatures Matt Kettler
Re: Snort signatures Chris Green
correlating alerts with action required Mike Sapsara
question about finding out about traffic Taylor Lewick
Re: Vol 1 #1833 Msg#10 Joe Pampel
Re: question about finding out about traffic Matt Kettler
got demarc 1.6? Ryan Hill
Re: real basic starter rules Harry Putnam
RE: correlating alerts with action required Wirth, Jeff

Saturday, 27 April

Re: real basic starter rules Rich Adamson
winpcap Ed McMan
Re: real basic starter rules Harry Putnam
Re: winpcap Chris Reid
Wondering if any of you have seen the following subject line Phil Wood
barnyard ignores msg text on custom rules? Michael Scheidell
Sensors and Home Net Chewie
MySQL Chewie
Re: MySQL Shawn Duffy
RE: MySQL Chewie
Hogwash Chewie

Sunday, 28 April

"Flow" problem Harald Finnaas
re: "Flow" problem Harald Finnaas
Re: "Flow" problem Phil Wood
Delete sensors from DB Harald Finnaas
Re: barnyard ignores msg text on custom rules? Andrew R. Baker
Re: "Flow" problem Chris Green
snort wont log to mysql database mnichols
Example Script for Snort Ali Dogru

Monday, 29 April

AW: Example Script for Snort Poppi, Sandro
cmd.exe Ronald Prins
RE: cmd.exe Potts, Ross A.
"id command attempt" rule Risto Vaarandi
Re: cmd.exe Martin Forest
NO UDP visibility Matt Furminger
Re: cmd.exe Grace Pittmon
Re: ACTION: Snort user's group in NOVA ? Martin Roesch
RE: ACTION: Snort user's group in NOVA ? Sean T. Ballard
Re: cmd.exe Michael Scheidell
RE: ACTION: Snort user's group in NOVA ? Jason Brvenik
any snort group in new jersey Omolayo Salako
RE: any snort group in new jersey Keith Pachulski
msql error Omolayo Salako
RE: msql error Omolayo Salako
Question about alert output configuration. Joshua Laase
Snort user groups pbsarnac
RE: winpcap Reinhard Doberstein
ACID Database Cleanup (data.MYD) krista l merrill
RE: ACID Database Cleanup (data.MYD) Michael Aylor
Re: NO UDP visibility Matt Kettler
Re: Red Hat's 2.4.2 Kernel version compatibility Leonardo Alcantara Moreira
RE: ACID Database Cleanup (data.MYD) Sentinel Sentinel
mysql archive tool Jason Monroe
Strange UDP packets from MS Exchange servers Sheahan, Paul (PCLN-NW)
RE: snort wont log to mysql database Semerjian, Ohanes
RE: Strange UDP packets from MS Exchange servers Semerjian, Ohanes
snort 1.8.6 db schema? Ryan Hill
RE: snort 1.8.6 db schema? Ryan Hill
Out of the Office Robert M Gulledge

Tuesday, 30 April

pid file, how do I create one? Vadim Pushkin
Old rule getting set off a lot lately Redman, Ken
RE: pid file, how do I create one? Jeff Dell
RE: pid file, how do I create one? Vadim Pushkin
Re: pid file, how do I create one? Michael Anderson
Re: pid file, how do I create one? Vadim Pushkin
My http server is port 8080, how do I change rules file/s? Vadim Pushkin
Re: mysql archive tool Roberto Suarez Soto
OT: workstation security assurance F.M. Taylor
OT: Workstation security assurance F.M. Taylor
Filesize limit exceeded krista l merrill
GUI Help Needed Jason Withrow
Fragments and stuff Ian Macdonald
RE: mysql archive tool Estes, Matt CPR / FCBS
Spurious Alerts? Finney Charles E
Spurious Alerts? David Bianco
Unable to compile latest with MySQL on OpenBSD Vadim Pushkin
RE: Spurious Alerts? Finney Charles E
Fragroute binaries for WindowsNT/2000 (Off- Topic) Hever C. Rocha - N.O.C
RE: Unable to compile latest with MySQL on OpenBSD Wirth, Jeff
Odd question... Martin Forest
Re: Snort Reporting Actual HTTP Destination Phil Wood
Re: Odd question... Harald Finnaas
Re: Odd question... Alejandro Flores
RE: Fragments and stuff Sheahan, Paul (PCLN-NW)
Re: Fragroute binaries for WindowsNT/2000 (Off- Topic) Frank Knobbe
RE: Fragments and stuff Ian Macdonald
RE: Unable to compile latest with MySQL on OpenBSD Vadim Pushkin
Re: Odd question... Vadim Pushkin
Rules ordering question. larosa, vjay
Snort, Stream4 State and Ethernet Taps. larosa, vjay
Can you simply merge separate Snort SQL databases? Jason Haar
Command line overrides? J. Craig Woods

Wednesday, 01 May

BUG of "config bpf_file" Peng Yong
RE: Filesize limit exceeded counter . spy
RE: Snort SNMP Variables are not consistent? Metz, Tim
RE: Unable to compile latest with MySQL on OpenBSD Vadim Pushkin
RE: Rules ordering question. Williams Jon
RE: Unable to compile latest with MySQL on OpenBSD Wirth, Jeff
RE: Snort, Stream4 State and Ethernet Taps. Wirth, Jeff
Re: BUG of "config bpf_file" Phil Wood
Errors when initiating my sensors. Vadim Pushkin
unable to compile latest with mysql on linux Hans-Cees Speel
Snort 1.8 Win32 Ernesto T. Negron
Keeping a 2 week running backup of MySQL snortdb JC
Re: Odd question... Demetri Mouratis
barnyard alert_fast not compatible with snort -A fast? Michael Scheidell
RE: Snort, Stream4 State and Ethernet Taps. counter . spy
RE: Snort, Stream4 State and Ethernet Taps. larosa, vjay
RE: Errors when initiating my sensors. Wirth, Jeff
Re: BUG of "config bpf_file" Peng Yong
RE: Can you simply merge separate Snort SQL databases? David E. Wach
Re: Errors when initiating my sensors. Andreas Östling
Broken Signature SMTP RCPT TO Ian Macdonald
RE: Snort, Stream4 State and Ethernet Taps. counter . spy
Portscan.log utility Steve Rudolph
RE: Filesize limit exceeded Erek Adams
Re: Portscan.log utility Erek Adams
RE: Portscan.log utility Dell, Jeffrey
RE: Snort 1.8 Win32 Fallon, Benjamin
RE: Snort SNMP Variables are not consistent? larosa, vjay
RE: Portscan.log utility Ryan Hill
barnyard and demarc question Omolayo Salako
Re: BUG of "config bpf_file" Phil Wood
Re: barnyard and demarc question Roelof JT Jonkman
Demarc Chewie
Re: Can you simply merge separate Snort SQL databases? Jason Haar
snortconf via web Mr. F Phat's

Thursday, 02 May

snort rule question.. Taylor Lewick
Re: Demarc Erek Adams
Re: snortconf via web Erek Adams
RE : snortconf via web Christophe Sahut
snort problem on HP-UX 11.00 and TokenRing Karl Lovink
Who Do I contact about posting something on the Snort.org website? Steve Scott
RE: Snort 1.8 Win32 Reinhard Doberstein
RE: Rules ordering question. Williams Jon
Re: Demarc Manuel Pompeia Santos
W2k - WinAt - Stopping Snort Brian Ertel
Re: snort rule question.. Matt Kettler
Snort DB configuration MOHESOWA BYAS
RE: Can you simply merge separate Snort SQL databases? David E. Wach
Apology Phil Wood
Alerting from Snort -- NOT HOW-TO, but what.... Tom Sevy
monitoring https / SSL Slade Edmonds
RE: monitoring https / SSL McCammon, Keith
SNMP Problems Leandro A Ferreira
Re: snort problem on HP-UX 11.00 and TokenRing Chris Green
Re: Who Do I contact about posting something on the Snort.org website? Chris Green
RE: monitoring https / SSL Matt Kettler
Re: Snort DB configuration Mike Macias
RE: Alerting from Snort -- NOT HOW-TO, but what.... Wirth, Jeff
newbie log question Eric Garnel
Re: SNMP Problems Matt Kettler
Automating Snort on W2k using WinAt Brian Ertel
Re: Snort DB configuration Daniel Curry
Re: SNMP Problems Richard Noonan
Re: Automating Snort on W2k using WinAt Andrew . Zielinski
RE: Snort DB configuration Wirth, Jeff
SNMP Problems Groce, Jonathan (CRTATL)
Re: monitoring https / SSL Jason Haar
Re: Automating Snort on W2k using WinAt Chris Reid
Attention Windows Users: Latest Snort 1.87b113 Binaries available - Fixed WinPcap Error Michael Steele
Database maintence scripts Ian Macdonald
Help]snort does not run in intrusion detection mode(Bus error) on OpenBSD-2.9-Sparc 김영성

Friday, 03 May

Snort IGNORES var HOME_NET counterping
HP-UX and snort still crashed Karl Lovink
RE: Automating Snort on W2k using WinAt Sylar, John
Alerting Snort (sending alert through pager) Alwin Raymundo
remove Tarek Rached
RE: Snort, MySQL, Acid Tom Sevy
Snort, MySQL, Acid Redman, Ken
Re: Snort, MySQL, Acid Tim Sailer
As a newbie, two questions Emanuele Salvador
RE: As a newbie, two questions McCammon, Keith
Re: Snort IGNORES var HOME_NET Matt Kettler
No logging from localhost? Whaley, Mike
Re: As a newbie, two questions Emanuele Salvador
RE: As a newbie, two questions McCammon, Keith
Help with tcpdump log rotation Rob Hughes
Re: Help with tcpdump log rotation Eric Garnel
RE: Alerting Snort (sending alert through pager) Wirth, Jeff
RE: snortconf via web Robert S.
Compiling snort AlinC
CONFIGURING SNORT TO USE MYSQL bfindley
Re: Snort IGNORES var HOME_NET Leonardo Alcantara Moreira
RE: Automating Snort on W2k using WinAt Brown, Bobby (US - Hermitage)
RE: Snort IGNORES var HOME_NET Ryan Hill
Detecting tunnels? Mark Horn
Re: No logging from localhost? Erek Adams
Re: remove Erek Adams
Re: As a newbie, two questions Erek Adams
Re: CONFIGURING SNORT TO USE MYSQL Bruno Taranto
Remote GUI Leandro A Ferreira
RE: snortconf via web Erek Adams
Re: Remote GUI Erek Adams
RE: snortconf via web Jeff Dell
Demarc (PureSecure) Noller, Gregory
RE: snortconf via web Tom Sevy
RE: snortconf via web Dell, Jeffrey
Re: Detecting tunnels? Chris Green
VoIP, Internet Telephony Traffic rms
RE: snortconf via web Robert S.

Saturday, 04 May

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
RE: snortconf via web Bob Walder
configuring snort 1.8.x on windows 2000 pro.. noorulsadiqin azbiya
packet generator noorulsadiqin azbiya
Re: packet generator ScotScot
RE: configuring snort 1.8.x on windows 2000 pro.. Michael Steele
(no subject) Zero Dark
Re: (no subject) Matt Kettler

Sunday, 05 May

newbie: merging rulesets Rodney Kanno
RE: newbie: merging rulesets Jeff Dell
DSL Monitoring Darren Young
Re: snortconf via web Michael Scheidell
Re: snortconf via web ed
Re: [despammed] DSL Monitoring Ed McMan
Re: Detecting tunnels? Mark Horn
Re: snortconf via web J. Craig Woods

Monday, 06 May

RE: Alerting Snort (sending alert through pager) Alwin Raymundo
Re: Snort, MySQL, Acid Anton A. Chuvakin
Re: Snort, MySQL, Acid Tim Sailer
RE: Snort, MySQL, Acid Whaley, Mike
Oinkmaster v0.5 Andreas Östling
RE: Snort, MySQL, Acid Whaley, Mike
Re: Demarc (PureSecure) Vadim Pushkin
Tap -> Hub Problem. larosa, vjay
RE: Demarc (PureSecure) Omolayo Salako
weird behaviour with Puresecure Omolayo Salako
Re: Tap -> Hub Problem. Chris Green
RE: Tap -> Hub Problem. larosa, vjay
RE: Tap -> Hub Problem. larosa, vjay
RE: weird behaviour with Puresecure Ryan Hill
Specifying SNMP Traps. larosa, vjay
Price for "vanilla Snort" (no bells and whistles) Glenn Larsson
Acid Graphing cbumpste
Re: Price for "vanilla Snort" (no bells and whistles) dr.kaos
Re: registered services John Sage
More on the "BAD TRAFFIC udp port 0" front Jason Haar
Re: SMTP RCPT TO overflow Jason Haar
AW: Price for "vanilla Snort" (no bells and whistle s) Poppi, Sandro
SnortSam update: PIX and Cisco ACLs Frank Knobbe

Tuesday, 07 May

Compile errors in Snort 1.8.6 with flexresp Baxter, John
Re: Compile errors in Snort 1.8.6 with flexresp Chris Green
Re: Snort IGNORES var HOME_NET Vadim Pushkin
Logfile Problem kai . hanisch
mysql.sock - where? Thomas Springer
IP-Field logging: Padding ? Andreas Czerniak
(no subject) Vadim Pushkin
IRC - BOT networks: RULES ? Brian Ertel
AW: mysql.sock - where? Poppi, Sandro
RE: Compile errors in Snort 1.8.6 with flexresp Baxter, John
ruletype directive doesn't work: why? Anton Chuvakin
Re: Snort, MySQL, Acid Ian Macdonald
Current Attack... Vadim Pushkin
Re: Price for "vanilla Snort" (no bells and whistles) Glenn Larsson
Possible Snort bug. Glenn Larsson
Re: AW: Price for "vanilla Snort" (no bells and whistle s) dr.kaos
running a script when a match is found Lookman Fazal
Pass rules?? R . Janaki
(no subject) Z . Qili
Re: running a script when a match is found Michael Boman
RE: Snort, MySQL, Acid Whaley, Mike
FW: RE: weird behaviour with Puresecure Ryan Hill
Re: Snort IGNORES var HOME_NET Erek Adams
ACID default sort order John Sage
REMOVE Jason Haar from the list! Martin Forest
Re: Snort, MySQL, Acid Ian Macdonald
Re: REMOVE Jason Haar from the list! Matt Kettler
RE: REMOVE Jason Haar from the list! Jason Withrow
RE: REMOVE Jason Haar from the list! Fallon, Benjamin
Semi-OT: GPL and Snort--Was Cost of Vanilla Snort Erek Adams
Re: Price for "vanilla Snort" (no bells and whistles) Martin Roesch
Semi-OT: Developer Thanks? Erek Adams
Re: REMOVE Jason Haar from the list! Jason Haar
Re: running a script when a match is found Frank Knobbe
[Fwd: Re: REMOVE Jason Haar from the list!] Martin Forest
AW: Pass rules?? Poppi, Sandro

Wednesday, 08 May

Detecting benchmarks Pawel Rogocz
Re: Snort-users digest, Vol 1 #1861 - 13 msgs Glenn Larsson
Re: Re: Snort-users digest, Vol 1 #1861 - 13 msgs Chris Green
Re: ACID default sort order Vadim Pushkin
Re: Snort IGNORES var HOME_NET Vadim Pushkin
Re: Price for "vanilla Snort" (no bells and whistles) Martin Roesch
Re: Price for "vanilla Snort" (no bells and whistles) dr.kaos
DOS MSDTC attempt false positive Kenny D
Re: DOS MSDTC attempt false positive Matt Kettler
Re: DOS MSDTC attempt false positive Kenny D
barnyard question? Omolayo Salako
Re: Snort IGNORES var HOME_NET Matt Kettler
Remove sensor from Mysql using ACID Hall, Duane
Proper Method and/or Place to Declare HTTP_SERVERS port? Vadim Pushkin
Re: Snort IGNORES var HOME_NET Vadim Pushkin
Re: Proper Method and/or Place to Declare HTTP_SERVERS port? Erek Adams
Re: Detecting benchmarks Erek Adams
Re: Proper Method and/or Place to Declare HTTP_SERVERS port? Vadim Pushkin
Re: Proper Method and/or Place to Declare HTTP_SERVERS port? Erek Adams
Re: Proper Method and/or Place to Declare HTTP_SERVERS port? Matt Kettler
HP Printing Dan Fiorito
Re: HP Printing Erek Adams
Re: Detecting benchmarks Pawel Rogocz
Re: Detecting benchmarks Erek Adams

Thursday, 09 May

Re: Pass rules?? Roberto Suarez Soto
Re: DOS MSDTC attempt false positive Roberto Suarez Soto
Re: Proper Method and/or Place to Declare HTTP_SERVERS port? Vadim Pushkin
RE: Proper Method and/or Place to Declare HTTP_SERV ERS port? Kreimendahl, Chad J
Remote Syslog John Maestrale
riddle me this.... larosa, vjay
Re: Help with tcpdump log rotation Anton A. Chuvakin
RE: Remote Syslog Michael Steele
Re: Help with tcpdump log rotation Rob Hughes
Remote Syslog Russell Fulton
snort, mysql Duplicate entry Clay Caviness
Re:Snort & Cisco Catalyst ISL limbo
Re: Remote Syslog dr.kaos

Friday, 10 May

Re: Detecting benchmarks Pawel Rogocz
SYN flood detection Pawel Rogocz
RE: Remote Syslog Rich Adamson
Looking for tool to generate isp/domain notification emails.... Kevin Riggins
Re: SYN flood detection Matt Kettler
RE: Looking for tool to generate isp/domain notific ation emails.... Potts, Ross A.
Re: Looking for tool to generate isp/domain notification emails.... René Bellora
Dynamically loading/unloading pre-processors... Ashley Thomas
Re: Help with tcpdump log rotation Erek Adams
Re: Detecting benchmarks Erek Adams
Re: Dynamically loading/unloading pre-processors... Erek Adams
sneeze.pl larosa, vjay
Re: SYN flood detection Erek Adams
Converting data_payload to a readable format Jose Luis Onis
Re: [despammed] RE: Looking for tool to generate isp/domain notific ation emails.... Ed McMan
Re: Help with tcpdump log rotation Rob Hughes
Re: SYN flood detection Pawel Rogocz
Re: SYN flood detection Erek Adams
Snort output Tommy Tsilalis
Re: Snort output Matt Kettler
modprobe error in log... Bob Hillegas
Re: DOS MSDTC attempt false positive Bill McCarty

Saturday, 11 May

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
Re: Help with tcpdump log rotation John Sage
Re: DOS MSDTC attempt false positive Matt Kettler
Re: DOS MSDTC attempt false positive Matt Kettler
Re: modprobe error in log... Matt Kettler
No more -z all? Rob Hughes
Re: Looking for tool to generate isp/domain notification emails.... James Hoagland
Re: No more -z all? Rob Hughes
Re: DOS MSDTC attempt false positive Bill McCarty
stupid question steven garrett
Another question Tommy Tsilalis
Bad Priority Error mailinglists
Re: No more -z all? Alberto Dainotti
Ignore certain packets R . Janaki
"id command attempt" malformed packet Abe Wagner
ACID slow to bring up packet details - running on W2K with MS-SQL 2000 SP2 Brian Van Benschoten
Excluding hosts from spp_unicode John Bradberry
Future features??? Paul . Fiero
Re: Another question Ashley Thomas
Re: Bad Priority Error Matt Kettler

Sunday, 12 May

Re: No more -z all? Rob Hughes
Shellcode.rules fatal error? Ed Kasky
Re: Future features??? counter . spy
NIDS newbie question Concordio M. Pajayat, Jr.
ADdRules dareen
Re: Future features??? Wayne T Work
Output questionduring FIN scan Tommy Tsilalis
spp_portscan and mysql Mikael Chambon
RE: Future features??? larosa, vjay
AW: Future features??? Poppi, Sandro
Re: Shellcode.rules fatal error? piotr . bulczak
Re: Shellcode.rules fatal error? Matt Kettler
Re: Output question during FIN scan Matt Kettler
Re: [despammed] Re: Future features??? Ed McMan
Re: No more -z all? Jeff Nathan
String matching in snort. Ashley Thomas
Re: Shellcode.rules fatal error? ed
configuration error the 1st time running acid (asap) noorulsadiqin azbiya
Re: String matching in snort. Matt Kettler
Re: ADdRules Matt Kettler
AW: [Barnyard-users] NIDS newbie question Poppi, Sandro
daemon consuming 100% memory kukulkan

Monday, 13 May

Re: No more -z all? Jeff Nathan
FAQ update regarding -z Jeff Nathan
Re: daemon consuming 100% memory Chris Green
Re: modprobe error in log... Bob Hillegas
RE: modprobe error in log... McClure Gammon
Off topic: Thousands of traceroutes ? Tudor Panaitescu
RE: spp_portscan and mysql Wirth, Jeff
snort and mysql Steven Garrett
Re: ACID slow to bring up packet details - running on W2K with MS-SQL 2000 SP2 Andreas Hasenack
Signature for Snort 1.8.x Bastian Ballmann
Snort + Demarc Remote logging? diwelf
centralized log Ganu Skop
Re: daemon consuming 100% memory Matt Kettler
mysql Duplicate entry Clay Caviness
Re: Signature for Snort 1.8.x Andreas Östling
RE: Off topic: Thousands of traceroutes ? Spitzer, Nathan
Re: Off topic: Thousands of traceroutes ? Tudor Panaitescu
Re: Off topic: Thousands of traceroutes ? Tudor Panaitescu
Re: Off topic: Thousands of traceroutes ? Tudor Panaitescu
RE: Re: Off topic: Thousands of traceroutes ? Tudor Panaitescu
Re: Re: Off topic: Thousands of traceroutes ? skill 's
Snort crashes with binary log Paweł Goleń
RE: Snort + Demarc Remote logging? Ryan Hill
Re: snort and mysql John Sage
Re: [despammed] RE: Re: Off topic: Thousands of traceroutes ? Ed McMan
Playing wavs or mp3 on intrusion detect Helderdp
Tivoli traps Leandro A Ferreira
Re: Playing wavs or mp3 on intrusion detect Chris Green
Re: Re: Off topic: Thousands of traceroutes ? John Sage
Re: Playing wavs or mp3 on intrusion detect F.M. Taylor
Re: Re: Off topic: Thousands of traceroutes ? Jeff Nathan
Re: Playing wavs or mp3 on intrusion detect John Sage
OFF-TROPIC - Boot Disk Carlos Augusto Silva
Snort loading at startup Ted Stringer
Re: Tivoli traps Martin Forest
Snort not Log D'Amato Luigi
Snort Books doug.fee () unisys com
Re: Playing wavs or mp3 on intrusion detect Jason Haar
Re: spp_portscan and mysql Mikael Chambon
Re: Tivoli traps piotr . bulczak

Tuesday, 14 May

RE: Re: Off topic: Thousands of traceroutes ? Bob Walder
AW: Snort not Log Poppi, Sandro
RE: Snort loading at startup Spitzer, Nathan
-i any ? Jev
RE: Snort loading at startup larosa, vjay
Re: IDS: SnortSam update: PIX and Cisco ACLs Ralf Hildebrandt
RE: Snort loading at startup Ted Stringer
snort & db with a low speed connection Luca Tampieri
Converting Hex to Ascii in mysql Ian Macdonald
Snort in a switched environment Bastian Ballmann
Re: Snort in a switched environment Andrew . Zielinski
RE: Snort in a switched environment McCammon, Keith
Re: Snort in a switched environment Justin M. Parker
RE: Playing wavs or mp3 on intrusion detect Hicks, John
Re: Snort not Log D'Amato Luigi
RE: Snort loading at startup larosa, vjay
RE: OFF-TROPIC - Boot Disk Hicks, John
ispy software (slightly off-topic) Paul . Simons
RE: Snort in a switched environment Matt Yackley
RE: Snort loading at startup counter . spy
ACID and PHP G Saoutine
RE: Snort in a switched environment counter . spy
Re: Snort in a switched environment Justin M. Parker
Re: ACID and PHP F.M. Taylor
RE: Snort loading at startup Ted Stringer
RE: ACID and PHP Steve Halligan
Problem getting Snort to Connect to PostgreSQL database Brian Hughes
Re: Snort in a switched environment Erek Adams
Re: -i any ? Erek Adams
SYSLOG John Maestrale
Re: Snort in a switched environment Scott McGee
RE: -i any ? McCammon, Keith
RE: Snort in a switched environment Spitzer, Nathan
Only testing... Edin Dizdarevic
Snort.conf question $HOME_NET Question V1.8.6 Rose, Jerry L SAJ Contractor
RE: Snort.conf question $HOME_NET Question V1.8.6 larosa, vjay
Schema from 1.83 to 1.86 Mike Shaw
xml plugin Juergen Fiedler
What do these errors mean? Dan D.
Re: Re: Off topic: Thousands of traceroutes ? John Sage
bug in spp_http_decode.c Peng Yong
AW: Schema from 1.83 to 1.86 Poppi, Sandro
AW: What do these errors mean? Poppi, Sandro
AW: Snort loading at startup Poppi, Sandro
AW: Snort not Log Poppi, Sandro

Wednesday, 15 May

Multiple Content (not working?) Carlos Kumbak
Re: Snort in a switched environment (Ignore this (Sorry, I have to make this test)) Edin Dizdarevic
Portscan false positives reg. DNS caching server Reckhard, Tobias
Re: Problem getting Snort to Connect to PostgreSQL database Alejandro Flores
switch Alwin Raymundo
snortsam Ralf Hildebrandt
switch? for what? Bruno Taranto
Re: switch Edin Dizdarevic
RE: switch Don McEachern
AW: switch Poppi, Sandro
Re: switch Leigh David Heyman
snort and firewall Stephan Helas
Re: Multiple Content (not working?) skill 's
RE: switch? for what? Weber Mail
SNORT newbie looking for some help with Snort on Win2k Richard Roy
Re: Problem getting Snort to Connect to PostgreSQLdatabase Brian Hughes
RE: SNORT newbie looking for some help with Snort o n Win2k Slighter, Tim
Where can i get Swatch? Kenny D
Problem getting Snort to Connect to PostgreSQL database Brian Hughes
RE: Where can i get Swatch? Wayne T Work
Re: Snort in a switched environment Bruno Taranto
Re: Snort in a switched environment Bruno Taranto
Re: Snort in a switched environment Scott McGee
RE: Where can i get Swatch? McCammon, Keith
RE: SNORT newbie looking for some help with Snort on Win2k McCammon, Keith
Re: Problem getting Snort to Connect to PostgreSQL database Bruno Taranto
RE: switch counter . spy
Problem graphing in ACID w/Snort Cloppert, Michael
Re: Snort in a switched environment Joe Pampel
SYSLOG John Maestrale
Help with monitoring sending packet rate Tu Nguyen
Re: Multiple Content (not working?) Matt Kettler
Viewing MySql Archive with Acid Ed Kasky
Upgrading DB schema Karen Marino
RE: Upgrading DB schema larosa, vjay
RE: Help with monitoring sending packet rate Spitzer, Nathan
snortrules.tar.gz Devon Harding - GTHLA
snort with acid Richard Roy
PureSecure 1.6 Ed Chen
Re: Multiple Content (not working?) F.M. Taylor
Re: PureSecure 1.6 Ian Macdonald
demarc: validate Devon Harding - GTHLA
RE: Help with monitoring sending packet rate Tu Nguyen
RE: demarc: validate larosa, vjay
RE: demarc: validate Ryan Hill
RE: PureSecure 1.6 Ryan Hill
ACID Problem John Hally
Snort Log Despoofer Glenn Larsson
RE: demarc: validate Ryan Hill
RE: demarc: validate Devon Harding - GTHLA
Rough Draft: Upgrading Snort Erek Adams
Attention WINDOWS Users! Latest Snort 1.87b119 Binaries Available NOW! Michael Steele
Re: Snort Log Despoofer ScotScot
Re: ACID Problem Alex Pinheiro Machado Rodrigues
Re: ACID Problem Piotr Bulczak
AW: Viewing MySql Archive with Acid Poppi, Sandro
AW: Upgrading DB schema Poppi, Sandro
RE: snortrules.tar.gz MOHESOWA BYAS

Thursday, 16 May

Re: Problem getting Snort to Connect to PostgreSQL database Roberto Suarez Soto
RE:ACID Problem counter . spy
Re: Snort Log Despoofer Glenn Larsson
Re: Snort Log Despoofer Chris Green
Rép. : [Snort-users] demarc: validate Ronald Beaulieu
another switch question Alwin Raymundo
RE: ACID Problem Fallon, Benjamin
AW: another switch question Poppi, Sandro
Re: another switch question Jose Luis Medina
Re: [Snort-users] Rép. : [Snort-users] demarc: validate Ian Macdonald
RE: SNORT newbie looking for some help with Snort on Win2k Michael Steele
RE: SNORT newbie looking for some help with Snort o n Win2k Richard Roy
Re: Snort-users digest, Vol 1 #1890 - 10 msgs Glenn Larsson
snort exit Steven Garrett
RE: snort exit McCammon, Keith
RE: snort exit Steven Garrett
RE: snort exit Steven Garrett
RE: snort exit Steven Garrett
Offtopic - Snort packet stats bthaler
SnortSnarf version 020516.1 now available James Hoagland
Attention WINDOWS Users: Latest 1.87b119 Binaries Available Michael Steele
Re: AW: another switch question Alwin Raymundo
Re: Multiple Content (not working?) Carlos Kumbak
RE: Offtopic - Snort packet stats BShinn
Re: [despammed] RE: Offtopic - Snort packet stats Ed McMan
blocking Ganu Skop
Re: blocking Martin Forest
RE: Snort packet stats BShinn

Friday, 17 May

Re: centralized log Risto Vaarandi
Re: Multiple Content (not working?) F.M. Taylor
Fine-tuning a rule Shane Hickey
running 2 instances of snort under Demarc SkatFiend
Re: Fine-tuning a rule Michael Scheidell

Saturday, 18 May

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
NIDS in switched environments counter . spy
Managing large IDS deployments (SecurityFocus) Moyer, Shawn
Snort rule for detecting wireless 802.11b transmissions Alan_Kloster
Don't see traffic unless have IP Jhumri Tilayia
-B option Lance Spitzner
Re: Don't see traffic unless have IP Glenn Forbes Fleming Larratt
Re: String matching in snort. C. Jason Coit
Re: -B option John Sage

Sunday, 19 May

Invalid Sig ID ESR
Automating Sensor Installation Darren Young
barnyard status? Michael Scheidell
patch to reference.config? Michael Scheidell
Re: patch to reference.config? Roman Danyliw
snort configuration using gui... Ashley Thomas
Re: Automating Sensor Installation Demetri Mouratis
Weird issue with 1.8.6 and SMTP alerts Jason Haar
RE: snort configuration using gui... Patrick Harper
RE: snort configuration using gui... Robert S.
running 2 instances of snort under Demarc Steven Williams
Excluding $HOME_NET -> $HOME_NET Alerts Ed Kasky
Re: Excluding $HOME_NET -> $HOME_NET Alerts Michael Boman
Re: Excluding $HOME_NET -> $HOME_NET Alerts Ed Kasky
Re: Excluding $HOME_NET -> $HOME_NET Alerts Michael Boman

Monday, 20 May

cavo stealth D'Amato Luigi
RE: snort configuration using gui... Fallon, Benjamin
RE: snort configuration using gui... Jeff Dell
How to configure Logwatch Kenny D
AW: Automating Sensor Installation Poppi, Sandro
Re: cavo stealth John Sage
Re: Excluding $HOME_NET -> $HOME_NET Alerts Ed Kasky
limiting memory usage Steven Garrett
(no subject) John Maestrale
Snort comparisons Tim Prendergast
Re: Snort comparisons Piotr Bulczak
RE: Snort comparisons McCammon, Keith
RE: Snort comparisons Cavey, Mark A.
Win32 Port of Snort Michael J Worden
RE: Win32 Port of Snort McCammon, Keith
Re: Win32 Port of Snort Chris Reid
RE: snort configuration using gui... McGuire, Barrett
Testing Snort Darren Young
Re: Excluding $HOME_NET -> $HOME_NET Alerts Michael Boman
RE: Win32 Port of Snort Michael Steele

Tuesday, 21 May

Highlighting an IP address in an alert/log Peter Bates
[ANN] MacNIDS Nick Zitzmann
RE: Testing Snort Potts, Ross A.
AW: [ANN] MacNIDS Poppi, Sandro
Re: snort configuration using gui... Cedric Guillotin
Alerts with Snort Brad Lisoweski
RE: Alerts with Snort Steve Halligan
RE: Alerts with Snort bthaler
Re: Weird issue with 1.8.6 and SMTP alerts Rob Hughes
Tagging and Acid Andreas Hasenack
snort_stat.pl John Hally
New version: Snort Log Despoofer. Glenn Larsson
2 questions: Timeformat + ARP Despoofing. Glenn Larsson
Getting MYSQL support compiled Cooper Arthur B Contr WCOM
Re: Getting MYSQL support compiled Erek Adams
Re: Getting MYSQL support compiled Ted Stringer
overlapping fragments Ashley Thomas
Strange mail problem Martin Forest
Re: Strange mail problem Martin Forest
SQLsnake - any able to create a sig for this one? john
SQLsnake - any able to create a sig for this one? john
RE: [Snort-sigs] SQLsnake - any able to create a sig for this one ? larosa, vjay
AW: Alerts with Snort Poppi, Sandro

Wednesday, 22 May

Re: SQLsnake - any able to create a sig for this one? Roberto Suarez Soto
Hardware Questions SkatFiend
Re: Hardware Questions Rich Adamson
snort not logging to database Devon Harding - GTHLA
snort not logging to database Devon Harding - GTHLA
Preventing Cyberattacks Webcast Joe Magee
Wireless monitoring Mitchell Henderson
1.8.6 and tcpdump format Jeremy
Barnyard dumps core when using acid_log (but not acid_alert) M. Toren
Rule to log Instant Messaging connections Spy Guy
RE: Wireless monitoring Spitzer, Nathan
RE: snort not logging to database Estes, Matt CPR / FCBS
Re: 1.8.6 and tcpdump format Erek Adams
Re: SQLsnake - any able to create a sig for this one? counter . spy
RE: snort not logging to database Devon Harding - GTHLA
Re: Wireless monitoring Greg Robinson
Re: SQLsnake - any able to create a sig for this one? Matt Kettler
RE: 1.8.6 and tcpdump format Slighter, Tim
Re: Wireless monitoring Alex Pinheiro Machado Rodrigues
Re: Don't see traffic unless have IP Ian Macdonald
spp_portscan behavior is 1.8.6 Ryan Hill
Snort with -b option and alerts to syslog.. C Boss

Thursday, 23 May

Re: spp_portscan behavior is 1.8.6 Edwin Eefting
Connecting snort bidirectionnal. Patrice . Arnal
AW: Connecting snort bidirectionnal. Poppi, Sandro
not logging portscans Fage Martin
RE: not logging portscans McCammon, Keith
compilation problem for mySQL tech
Re: running 2 instances of snort under Demarc SkatFiend
snort email alert Math
2 NICS John Maestrale
ACID help Michael S. Boyd
RE: 2 NICS Tom McComb
Re: snort email alert Matt Kettler
spp_stream4 alerts "un-disable-able" ? :-) Edwin Eefting
alert by email. Carles Xavier Munyoz Baldó
Snort upgrade Hugo Ferr
2 more questions: Glenn Larsson
logging to remote syslog Ronneil Camara
RE: logging to remote syslog Keith Pachulski
Re: logging to remote syslog Ted Stringer
Re: spp_stream4 alerts "un-disable-able" ? :-) Chris Green
Too many events in logs spyguy703
RE: ACID help Brad Lisoweski
RE: ACID help Michael S. Boyd
Re: 2 NICS Ian Macdonald
Re: Too many events in logs Matt Kettler
Cron Script Schlotterer, Matthew
RE: Cron Script McCammon, Keith
CSV Output problems... Glenn Larsson
Re: 2 more questions: Glenn Larsson
Re: 2 more questions: Tim Prendergast
Re: not logging portscans Matt Kettler
RE: logging to remote syslog Ronneil Camara
FYI: New ucd agent && snort !good Rob Hughes
Re: Connecting snort bidirectionnal. Jeff Nathan
Re: 2 more questions: Jeff Nathan
AW: alert by email. Poppi, Sandro
AW: Cron Script Poppi, Sandro

Friday, 24 May

Snort reports, PureSecure Jari Pirhonen
Sensor automated signature updates Guy Bruneau
AW: spp_portscann don't work Poppi, Sandro
spp_portscann don't work Stephan Helas
ignore ping Jim Williams
1.8.6 RPMS?? Kristopher Czachor
Regarding latest snort rules. Ashley Thomas

Saturday, 25 May

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
Same question again.. C Boss
where can I find Ntwdblib.dll y q
No UDP by nmap scan tino . brandt
Re: Same question again.. John Sage
Re: Same question again.. Bamm Visscher
Re: Same question again.. Erek Adams
Not Compiled for MySQL Matt Richter
Re: Not Compiled for MySQL John Sage

Sunday, 26 May

Mandrake 8.2 laurent didier
Tap traffic reassembly using OpenBSD bridge? Douglas
Re: Mandrake 8.2 John Sage
Re: Snort-users digest, Vol 1 #1914 - 6 msgs john
new function and references in sql tech

Monday, 27 May

Re: ignore ping Roberto Suarez Soto
snort_stat.pl Jevoš Peter
SETTING UP SNORT Somak S
SNORT rule Mr. F Phat's
RE: SNORT rule John Stroud
Rép. : Re: [Snort-users] running 2 instances of snort under Demarc Ronald Beaulieu
RE: SETTING UP SNORT Hicks, John
snort rules mostafa rrrrrr
Barnyard 0.1.0 beta5 released Andrew R. Baker
Stubbourn Pcap Error Hicks, John
snortpp missing? Michael Scheidell
barnyard-0.1.0-beta5 and mysql Michael Scheidell
Re: Stubbourn Pcap Error Chris Reid
Re: snortpp missing? John Sage
[Re: snortpp missing?: Mail System Error - Returned Mail] John Sage
upgrade Hugo Ferr
Re: barnyard-0.1.0-beta5 and mysql Andrew R. Baker
Barnyard 0.1.0 beta6 released Andrew R. Baker
What's the fuss about string matching ? Pawel Rogocz
Re: Stubbourn Pcap Error CJATeck
Re: What's the fuss about string matching ? Jason Haar
Portscan not logging Ed Kasky
Re: What's the fuss about string matching ? Andreas Östling

Tuesday, 28 May

Logging Problem Stephan Helas
Re: Portscan not logging Mike Macias
snort 1.87beta5 still holds some fds on HUP Michael Scheidell
cannot compile snort on Freebsd 4.5 or 4.6 from cvs.....snort 1.8.6 compiles ok Mark Rowlands
Re: Portscan not logging ed
Re: cannot compile snort on Freebsd 4.5 or 4.6 from cvs.....snort 1.8.6 compiles ok Chris Green
RE: SSL CodeRed et al Sean T. Ballard
SSL CodeRed et al bthaler
RE: SSL CodeRed et al bthaler
Re: SSL CodeRed et al Ryan Russell
Re: SSL CodeRed et al Phil Wood
Bonding - has anyone gotten it to work with an ether tap quentyn
RE: SSL CodeRed et al East, Bill
Re: cannot compile snort on Freebsd 4.5 or 4.6 from cvs.....snort 1.8.6 compiles ok Rob Hughes
RE: SSL CodeRed et al Frank Knobbe
Re: What's the fuss about string matching ? Frank Knobbe
RE: SSL CodeRed et al bthaler
Re: Portscan not logging Ed Kasky
sorry...upgrade question again Hugo Ferr
Re: sorry...upgrade question again Erek Adams
RE: SSL CodeRed et al Jim Grossl
Re: Same question again.. Erek Adams
snort signatures on www.snort.org Russell Fulton
(ot) how to get alert size? mel
RE: (ot) how to get alert size? Abe L. Getchell
AW: Bonding - has anyone gotten it to work with an ether tap Poppi, Sandro

Wednesday, 29 May

alert Mr. F Phat's
Re: AW: Bonding - has anyone gotten it to work with an ether tap quentyn
snort_stat.pl Jevoš Peter
Alpha4 Accounty Mike Meredith
How to Craft a rule that negates multiple ports?? Alan_Kloster
Re: Same question again.. C Boss
RE: SSL CodeRed et al Wilcoxon, Steve
acid and udp ports Jason Yates
Re: How to Craft a rule that negates multiple ports?? Michael Scheidell
Snort doesnt detect traffic. Magnus.M.Glantz
Re: Snort doesnt detect traffic. Erek Adams
(no subject) John Maestrale
Bandwidth Information Cooper Arthur B Contr WCOM
Re: Bandwidth Information Erek Adams
RE: Bandwidth Information Spitzer, Nathan
RE: Bandwidth Information Kreimendahl, Chad J
Re: sorry...upgrade question again Hugo Ferr
Snort > mysql > acid - timestamp troubles Rose, Jerry L SAJ Contractor
RE: sorry...upgrade question again Adam Migus

Thursday, 30 May

AW: Snort > mysql > acid - timestamp troubles Poppi, Sandro
AW: (no subject) Poppi, Sandro
AW: Same question again.. Poppi, Sandro
RE: 1.8.6 RPMS?? Kristopher Czachor
Re: 1.8.6 RPMS?? Chris Green
Firewall Tester 0.7 Andrea Barisani
Re: 1.8.6 RPMS?? Mark Wormgoor
Re: [despammed] Snort > mysql > acid - timestamp troubles Ed McMan
Constantly displaying the event on the console Chang, Andre
Re: sorry...upgrade question again Hugo Ferr
RE: Constantly displaying the event on the console bthaler
help Lance Barisdale
Attention: Win32 Users - Snort 1.8.6b121 Ready - W/Run As Service Michael Steele
RE: Attention: Win32 Users - Snort 1.8.6b121 Ready - W/Run As Service Hicks, John
barnyard over TCP Michael Anderson
snort + mysql dweise
Re: SV: Snort doesnt detect traffic. Erek Adams
SV: Snort doesnt detect traffic. Magnus.M.Glantz
portscan Petriz, Pablo
flexresp on 1.8.6 with red hat 7.2 Hugo Ferr
shellcode error Hugo Ferr
RE: shellcode error bthaler
schema version 104 Hugo Ferr
Re: shellcode error Hugo Ferr
Re: shellcode error matt
RE: barnyard over TCP ChandlerH
excluding a host from rule Chang, Andre
Re: barnyard over TCP Michael Anderson
Re: excluding a host from rule Alex Pinheiro Machado Rodrigues
Re: flexresp on 1.8.6 with red hat 7.2 Chris Green
Re: flexresp on 1.8.6 with red hat 7.2 Ryan Russell
Re: Re: excluding a host from rule Joe McAlerney
q about alerts Weber Mail
Re: SV: SV: Snort doesnt detect traffic. Erek Adams
Re: snort + mysql Erek Adams
Re: shellcode error Erek Adams

Friday, 31 May

Ignore ICMP ping Math
Re: barnyard over TCP Andrew R. Baker
SV: SV: Snort doesnt detect traffic. Magnus.M.Glantz
Re: snort 1.87beta5 still holds some fds on HUP (fixed) Rob Hughes
Re: schema version 104 roman
OT: Sourceforge (Was: Re: flexresp on 1.8.6 with red hat 7.2) Chris Green
Snort & Prelude counter . spy
Re: shellcode error Hugo Ferr
Re: shellcode error john
Re: schema version 104 Hugo Ferr
Barnyard? Tom Sevy
RE: Barnyard? bthaler
Snort Database and ODBC Clients Matt Richter
Re: q about alerts Phil Wood
Re: shellcode error Erek Adams
Re: shellcode error Erek Adams
snort-stable-snapshot.tar.gz & snort-daily.tar.gz Slighter, Tim
RE: excluding a host from rule Don
Re: schema version 104 roman
Re: shellcode error Hugo Ferr
Re: schema version 104 Hugo Ferr
Re: shellcode error Matt Kettler
AW: Ignore ICMP ping Poppi, Sandro
AW: barnyard over TCP Poppi, Sandro
product description Hugo Ferr
some policy rules missing in 1.8.7 beta5? Michael Scheidell
(no subject) Hugo Ferr
RV: portscan Petriz, Pablo
Re: (no subject) Rich Adamson
Re: RV: portscan Hugo Ferr
RE: (no subject) Wirth, Jeff
Re: Snort-users digest, Vol 1 #1929 - 1 msg Joe Pampel
RE: (no subject) John Stroud
Compiling snort on Win32 Ian Macdonald
Re: (no subject) Hugo Ferr
Stable Snort Rules fails? Juan Pablo Villaverde
Re: Compiling snort on Win32 Chris Reid
Re: Stable Snort Rules fails? Erek Adams
Re: Ignore ICMP ping Joe McAlerney
RE: Compiling snort on Win32 Don
Pretty Reports for Management Donna MacLeod
RE: Compiling snort on Win32 Michael Steele
Re: Pretty Reports for Management Mark Rowlands
Re: Pretty Reports for Management CJATeck
Email alert and porscan.log on a daily basis JEFF Collins
portscsan.log summary. Chris Keladis
Multiple IP Salvatore Basso

Saturday, 01 June

RE: Email alert and porscan.log on a daily basis Don
Re: portscsan.log summary. Phil Wood
SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
Re: Compiling snort on Win32 Chris Reid
Re: snort 1.87beta5 still holds some fds on HUP(fixed) Michael Scheidell
Re: snort-stable-snapshot.tar.gz & snort-daily.tar.gz James Hoagland
ACID mostafa rrrrrr
Re: ACID John Sage
Re: Email alert and porscan.log on a daily basis matt
Re: Multiple IP matt
Re: Stable Snort Rules fails? matt
Unix sockets Nick Zitzmann
external_net and home_net questions thelupine
Re: How to ignore scan from a host Adrian Voinea
I'd rather not get the message Phil Wood

Sunday, 02 June

Strange logging problem Ed McMan
RE: Compiling snort on Win32 Jason Withrow
Re: I'd rather not get the message John Sage
Re: Snort & Prelude Krzysztof Zaraska
Which rules to use for snort ? Ronald Nutter
RE: external_net and home_net questions Don
AW: external_net and home_net questions Poppi, Sandro

Monday, 03 June

RE: Compiling snort on Win32 Frank Knobbe
Tagging and Packet Payload Roshen Chandran
A tool to Archive & delete mysql ( snortdb ) records .. K.S.NARAYANAN
Snort on Win32 Potts, Ross A.
Re: Tagging and Packet Payload Chris Green
RE: I'd rather not get the message McCammon, Keith
Re: snort 1.87beta5 still holds some fds on HUP(fixed) Rob Hughes
RE: A tool to Archive & delete mysql ( snortdb ) re cords .. John Maestrale
Re: Unix sockets Dr. Richard W. Tibbs
RE: RV: portscan Petriz, Pablo
bpf filter Omolayo Salako
Re: I'd rather not get the message matt
RE: bpf filter Ashley Thomas
Re: A tool to Archive & delete mysql ( snortdb ) records .. Hugo Ferr
RE: Ignore multiple hosts with command line arguments McCammon, Keith
Re: Ignore multiple hosts with command line arguments Chris Green
Ignore multiple hosts with command line arguments McKim, Tim
RE: Ignore multiple hosts with command line argumen ts Tom Sevy
Re: Multiple IP (ethernet switches vs hubs) Matt Kettler
Re: Which rules to use for snort ? matt
Re: Which rules to use for snort ? John Sage
Preprocessors COULOMBE, TROY
Re: Ignore multiple hosts with command line argumen ts Phil Wood
RE: Which rules to use for snort ? Ronald Nutter
mysql config error Omolayo Salako
Re: Preprocessors matt
Order of preprocessing... Ashley Thomas
RE: Multiple IP (ethernet switches vs hubs) Semerjian, Ohanes
Re: [Snort-devel] Order of preprocessing... Chris Green
unsubscribe Markt

Tuesday, 04 June

(no subject) Eduard San Anselmo
AW: (no subject) Poppi, Sandro
RE: (no subject) McCammon, Keith
1.8.6 problem: Misdetection and hangup Jesus Couto
snort 1.9.x would not compile on FreeBSD 4.5 Henk Wevers
Re: 1.8.6 problem: Misdetection and hangup Chris Green
port 22 scan Gongya Yu
RE : port 22 scan Christophe Sahut
RE: port 22 scan Wirth, Jeff
Re: snort 1.9.x would not compile on FreeBSD 4.5 (snapshot build?) matt
Snort Implementation Guide - ACID-MySQL-Redhat7.2 Steve Scott
Re: snort 1.9.x would not compile on FreeBSD 4.5 (snapshot build?) Henk Wevers
Re: port 22 scan Muhammad Faisal Rauf Danka
Re: snort 1.9.x would not compile on FreeBSD 4.5/4.6 (confirm) Peter Johnson
FW: (no subject) ChandlerH
Re: Snort Implementation Guide - ACID-MySQL-Redhat7.2 Piotr Bulczak
Re: snort 1.9.x would not compile on FreeBSD 4.5 Chris Green
Re: snort 1.9.x would not compile on FreeBSD 4.5 Henk Wevers
Snort Logs to MySQL, ACID Sees the Alerts, But Queries Don't Work Robinson, Eric R.
Re: Snort Implementation Guide - ACID-MySQL-Redhat7.2 Hugo Ferr
Best real-time alerting tool Sheahan, Paul (PCLN-NW)
Re: Multiple IP Salvatore Basso
snort 1.9.x would not compile on FreeBSD 4.5 Henk Wevers
Solaris checksum problem Hector Urdaneta
portscan-ignorehosts question Joseph Inserra
RE: I'd rather not get the message Jeff Anderson
RE: (no subject) Richard Silver
Re: snort 1.9.x would not compile on FreeBSD 4.5 Peter Johnson
RE: Best real-time alerting tool Don

Wednesday, 05 June

snort 1.8.7 and fragroute Peter . VE
smtp rcpt to overflow Hugo Ferr
RE: smtp rcpt to overflow Hugh Brown
RE: smtp rcpt to overflow Ted Stringer
Re: snort 1.8.7 and fragroute Chris Green
ATTN: Michael Scheidell Rob Hughes
Re: smtp rcpt to overflow Edwin Eefting
RE: Best real-time alerting tool Tom Sevy
RE: Best real-time alerting tool Sheahan, Paul (PCLN-NW)
Re: Best real-time alerting tool CJATeck
Re: Snort Implementation Guide - ACID-MySQL-Redhat7.2 Steve Scott
RE: Best real-time alerting tool Ryan Hill
Re: Snort Implementation Guide - ACID-MySQL-Redhat7.2 Steve Scott
NOVA snort user's group meeting Chris Green
RE: NOVA snort user's group meeting McCammon, Keith
icmp i want to ignore Don
Re: icmp i want to ignore Steve Scott
Snort & Acid on OpenBSD 3.1? arlenf
Re: Snort Implementation Guide - ACID-MySQL-Redhat7.2 Hugo Ferr
LaBrea Hugo Ferr
Re: LaBrea Frank Knobbe
Re: LaBrea Fyodor
Re: LaBrea Frank Knobbe
Re: portscan-ignorehosts question Scot Scot
Re: portscan-ignorehosts question Erek Adams
Re: icmp i want to ignore Erek Adams

Thursday, 06 June

Problem with ACID and Solution. Federico Rena
ACID enhancement Kristopher Czachor
RE: Best real-time alerting tool Fraser Hugh
Re: LaBrea Hugo Ferr
Re: LaBrea Hugo Ferr
Re: LaBrea Gianluca Marcari
matching logs.. Ashley Thomas
RE: matching logs.. Ashley Thomas
Re: matching logs.. Erek Adams
Re: Snort & Acid on OpenBSD 3.1? Addam Schroll
New Forums Jim Forster
Re: Snort & Acid on OpenBSD 3.1? arlenf
Re: syslog Erek Adams
syslog Don
RE: syslog Jeff Dell
RE: syslog Don

Friday, 07 June

SQL login attempts Don
Ignore Hosts How-To Erek Adams
RE: ACID enhancement Hicks, John
Dr. Watson when Logging in Binary Mode Parker, Ian
Core dumping with more then 1 rule enabled Frank Lewandowski
RE: Best real-time alerting tool Fraser Hugh
Re: LaBrea Hugo Ferr
Re: ACID enhancement Michael Scheidell
RE: LaBrea Paul Hem
Description of snort plugins Darrin Powell

Saturday, 08 June

Packet payload Ashley Thomas
SNORT USAGE Brian (Automail)
RE: Core dumping with more then 1 rule enabled - SUMMARY Frank Lewandowski
redworm sanity check John Hally
Re: Core dumping with more then 1 rule enabled Chris Green
flags James Ashton
SNORT FAQ Brian (Automail)
Re: Core dumping with more then 1 rule enabled Chris Green
Re: Core dumping with more then 1 rule enabled James Hoagland
Re: flags Rob Hughes
RE: Packet payload Wayne T Work
Re: Packet payload Erek Adams
snort not logging steve nutt
Alerts Darren Young
portscan ? Ashley Thomas
Re: flags James Ashton
snort not logging steve nutt

Sunday, 09 June

Re: LaBrea Hugo Ferr
RE: Best real-time alerting tool John Ruff
RE: flags James Ashton
Exclude Source? Darren Young
Re: flags Rob Hughes
Re: snort not logging Rob Hughes
RE: flags Erek Adams
Re: Exclude Source? John Sage
Practical Limits on Snort/MySQL? Michael J Worden
Re: snort not logging steve nutt
Questionnaire for FAQ on 'how many alerts does snort receive'. Imran William Smith
use of BPF in 1.8.7beta6 might be broken Michael Scheidell
barnyard James Ashton
Re: snort not logging Rob Hughes

Monday, 10 June

[Snorting 2 NICs] Gregory D Hough
RE: [Snorting 2 NICs] McCammon, Keith
Re: [Snorting 2 NICs] Petr Ruzicka
FW: [Snorting 2 NICs] McCammon, Keith
Re: Compilation Error Chris Green
Compilation Error Alwin Raymundo
AW: [Snorting 2 NICs] Poppi, Sandro
Demarc Plugins Darren Young
Compile problems on solaris 2.6 Walgamotte, David
Re: Compile problems on solaris 2.6 Erek Adams
Re: Compile problems on solaris 2.6 Ryan Russell
solaris 8 compile Roger
Auditing Snort Rules (Signatures) D W
RE: portscan ? Estes, Matt PEO EIS CPR / FCBS
Session data, alerts, and barnyard Ed Quackenbush
Setting the nic up ?? Walgamotte, David
Re: Setting the nic up ?? D W
Current Rule Set Hall, Duane
Re: Current Rule Set D W
Re: Current Rule Set Erek Adams
RE: Setting the nic up ?? COULOMBE, TROY
RE: Setting the nic up ?? Walgamotte, David
RE: Current Rule Set McCammon, Keith
Re: Setting the nic up ?? Glenn Forbes Fleming Larratt
RE: Setting the nic up ?? Erek Adams
Re: FW: heya - Glenn Mansfield Keeni
Re: Current Rule Set Matt Kettler
RE: [Snorting 2 NICs] K.S.NARAYANAN

Tuesday, 11 June

Re: Compilation Error Alwin Raymundo
Re: [Snorting 2 NICs] Gregory D Hough
Re: Session data, alerts, and barnyard Martin Roesch
AW: [Snorting 2 NICs] Poppi, Sandro
Mandrake setup Ben Whittaker
(no subject) john
RE: [Snorting 2 NICs] COULOMBE, TROY
RE: flags Brenda A. Bell
spp_portscan msg DICEJ
Re: [despammed] Dr. Watson when Logging in Binary Mode Ed McMan
acid alert group Maarten
Help greg
PostgreSQL Indexes Gfm
RE: Session data, alerts, and barnyard Ed Quackenbush
unsubscribe Taylor Lewick
Re: [Snorting 2 NICs] Erek Adams
I need some serious help Don
Re: Help Erek Adams
Re: I need some serious help Erek Adams
RE: flags Erek Adams
Re: unsubscribe Erek Adams
Re: spp_portscan msg Erek Adams
RE: I need some serious help Erek Adams
Snort and MRTG Shane Hickey
RE: I need some serious help Don
ACID Hall, Duane
Logging payload to syslog jromariz
use of tables DoL
Re: use of BPF in 1.8.7beta6 might be broken Chris Green
Syslog on W2K Steven Williams
RE: [Snorting 2 NICs] K.S.NARAYANAN

Wednesday, 12 June

Re: Current Rule Set Elinus Liga
RE: PostgreSQL Indexes Hutchinson, Andrew
Re: use of tables roman
Patch for Time criteria handling in ACID Mark Vevers
Re: use of tables DoL
Detecting concurrent connections Renato Ara�jo
linker cannot find mysqlclient Tilo Schneider <T.Schneider () tfh-berlin de>
RE: Syslog on W2K Don
snort with mysql and acid C White
Re: Detecting concurrent connections Chris Green
Re: snort with mysql and acid roman
(no subject) Richard Houston
Re: Detecting concurrent connections matt
Re: (no subject) Erek Adams
Configuration HELP! Jason Martin
Dies Bravard, Paul
Re: Configuration HELP! (understanding alerts and proxies) matt
: Configuration HELP! (understanding alerts and pro xies) Jason Martin
RE: Syslog on W2K Michael Steele
RE: Syslog on W2K Steven Williams
Re: : Configuration HELP! (understanding alerts and proxies) Matt Kettler
RE: Snort-users digest, Vol 1 #1962 - 13 msgs Jessup, Justin
Snort and 802.1Q larosa, vjay
Snort front ends jas
FYI - Possible cause for false positive - ICMP L3retriever Ping Michael Gargiullo
RE: Syslog on W2K Blake Fithen
acidlab: restoring snort_archive to snort_log Dmitry Glushenok
Re: : Configuration HELP! (understanding alerts and proxies) Scot Scot
Re: Syslog on W2K Scot Scot

Thursday, 13 June

Re: FYI - Possible cause for false positive - ICMP L3retriever Ping Chris Green
RE: Snort front ends jas
Re: Dies roman
IDS126/X11_OUTGOING_XTERM ? Hilton De Meillon
RE: Snort front ends jas
RE: IDS126/X11_OUTGOING_XTERM ? Jordi Vila
newbie - excluding an IP Address Anthony Scott
RE: newbie - excluding an IP Address McCammon, Keith
Empty alert records in unified spool for portscan and bo preproce ssors... Ed Quackenbush
Re: Alerts Ian Macdonald
select rules DoL
OT: IP Blocks by country/region? Tom Sevy
RE: select rules McCammon, Keith
RE: OT: IP Blocks by country/region? Hicks, John
RE: OT: IP Blocks by country/region? McCammon, Keith
SELECT RULES John Maestrale
RE: OT: IP Blocks by country/region? Tom Sevy
My Webservers Are Showing Up In My Alerts Vadim Pushkin
Re: My Webservers Are Showing Up In My Alerts Matt Kettler
Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin
[ANN] HenWen 1.0 for Snort Nick Zitzmann
RE: Syslog on W2K Don
Re: My Webservers Are Showing Up In My Alerts matt
Exploit? Michael Northup
Re: Exploit? (RCPT overflow) matt
Curse of the cmd.exe Sam Evans
Re: My Webservers Are Showing Up In My Alerts matt
Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin
OT: Common services signatures Patrick McHardy
RE: Exploit? Don
snort, mysql, acid C White
RE: Snort front ends Jerry Shenk
Patch for Time criteria handling in ACID Mark Vevers
RE: OT: IP Blocks by country/region? Tony Carothers
Snort front ends Jerry Shenk
Count option WAS smtp rcpt to overflow Greg Wright
RE: snort with mysql and acid Damien Hart
packet drops Unteregger Ruben
RE: PostgreSQL Indexes Hutchinson, Andrew
Re: [Snorting 2 NICs] Martin Forest
RE: Snort front ends Jerry Shenk
Re: Snort front ends Shawn Duffy
Re: OT: IP Blocks by country/region? Imran William Smith
error initializing the network interface on win2k cwhite
Re: select rules DoL
RE: error initializing the network interface on win 2k Hicks, John
RE: error initializing the network interface on win2k Don
Re: My Webservers Are Showing Up In My Alerts Muhammad Faisal Rauf Danka
RE: Exploit? Hilton De Meillon

Friday, 14 June

Re: Alerts Ed Spick
Re: Curse of the cmd.exe Chris Keladis
Re: Snort front ends Stefan Dens
RE: Curse of the cmd.exe Matt Yackley
Changing the filename format for alerts McKim, Tim
Applolgy for the HTML email- Snort Filename format McKim, Tim
OT E-mail Viruses Madziarczyk, Jonathan
Re: SMTP Virus Gateway Joshua James
testing snort john
RE: SMTP Virus Gateway McCammon, Keith
Re: SMTP Virus Gateway Joe Matusiewicz
Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin
Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin
Re: Changing the filename format for alerts Frank Knobbe
RE: SMTP Virus Gateway matt
How can I Verify That I am performing UDP de-fragging? Vadim Pushkin
Re: SMTP Virus Gateway Ralf Hildebrandt
RE: Running 2 instances of snort Michael Steele
RE: Snort on Acid instructions Michael Steele

Saturday, 15 June

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
RE: Curse of the cmd.exe Andreas Östling
RE: Running 2 instances of snort Michael Steele
Testing tools DoL
RE: RE: Snort on Acid instructions Michael Steele
Re: Patch for Time criteria handling in ACID Roman Danyliw
Re: Problem with ACID and Solution. Roman Danyliw

Sunday, 16 June

snort CVS checkout fails to build Ralf Hildebrandt
Re: Testing tools Scot Scot
Re: testing snort counter . spy
Re: Testing tools Andrea Barisani
Re: Testing tools Marnix Petrarca
Re: Testing tools Marnix Petrarca
RE: SMTP Virus Gateway K.S.NARAYANAN
rule for Yahoo or Hotmail messengers Ronneil Camara

Monday, 17 June

Re: rule for Yahoo or Hotmail messengers Imran William Smith
Re: Snort-users #1972 OT Email/AV Ranting Joe Pampel
EXPLOIT ssh CRC32 false alerts Jean Michel BARBET
Outgoing FTP Rule? Brad Merluzzi
Problem emailing alerts from ACID Bradley, Paul
what's the best setup? c white
RE: what's the best setup? Chris Eidem
Message: 5 - What's the best setup Joe Pampel
Re: Tying alerts to hostnames? Chris Green
Re: Tying alerts to hostnames? Erek Adams
Tying alerts to hostnames? Scott Phippen
Installing Snort on Win 2K Raoul Armfield
Re: Installing Snort on Win 2K Byron
RE: Installing Snort on Win 2K Rodney Wise
RE: Problem emailing alerts from ACID Ronneil Camara
WinPcap 2.3 and Win2k Madziarczyk, Jonathan
PureSecure is crazy François Jan
RE: Problem emailing alerts from ACID Michael Steele
RE: Installing Snort on Win 2K Michael Steele
RE: Installing Snort on Win 2K Michael Steele
RE: WinPcap 2.3 and Win2k Michael Steele
RE: Problem emailing alerts from ACID Bradley, Paul
RE: Problem emailing alerts from ACID Ronneil Camara
snort occupy all cpu time? Vincent Chen
RE: Exploit? Michael Brown
RE: Count option WAS smtp rcpt to overflow Andy McLeod
RE: Curse of the cmd.exe MOLLOY, Brendan, GCM
RE: Curse of the cmd.exe M. Burnett
RE: Curse of the cmd.exe Andy McLeod
Re: Tying alerts to hostnames? John Sage
DoS Alert in Snort Pathmenanthan Ramakrishna

Tuesday, 18 June

Tom Lyne is out of the office. Tom Lyne
unsubscribe Andreas Krassek
RE: PureSecure is crazy Robin Brown
RE: Installing Snort on Win 2K Rodney Wise
RE: Problem emailing alerts from ACID Robin Brown
RE: Problem emailing alerts from ACID Bradley, Paul
RE: Tying alerts to hostnames? Hicks, John
Re: Tying alerts to hostnames? - Windowz Tools Scot Scot
Re: snort occupy all cpu time? Ian Macdonald
Re: PureSecure is crazy Ian Macdonald
newbie pass rule question Eric Garnel
RE: WinPcap 2.3 and Win2k Madziarczyk, Jonathan
RE: WinPcap 2.3 and Win2k Hicks, John
problema with snort for linux Salvatore Basso
IDS and traffic monitor in one Milan Kubala
Re: WinPcap 2.3 and Win2k Marnix Petrarca
RE: WinPcap 2.3 and Win2k Hicks, John
RE: problema with snort for linux Slighter, Tim
More WinPcap 2.3 and Win2k Madziarczyk, Jonathan
RE: WinPcap 2.3 and Win2k Madziarczyk, Jonathan
BO pre-processor larosa, vjay
RE: BO pre-processor larosa, vjay
RE: Installing Snort on Win 2K Raoul Armfield
Re: IDS and traffic monitor in one Erek Adams
Re: newbie pass rule question Erek Adams
Re: BO pre-processor Beno Chapman
unsubscribe Robbie Lee
Re: More WinPcap 2.3 and Win2k Chris Reid
RE: RE: BO pre-processor larosa, vjay
Re: RE: BO pre-processor Larc
RE: RE: BO pre-processor Claude Bailey
Snort send mail on alert Salvatore Basso
Resp/React Firing Problem/Bug MASM
Snort and ACID on separate systems? Djinn D'Angel
Re: Snort send mail on alert Erek Adams
Re: Snort and ACID on separate systems? Greg Robinson
Re: Snort and ACID on separate systems? Erek Adams
built with mysql, but snort says I didn't tbasilio
Re: PureSecure is crazy François Jan
OT queries on acid in confusion... Jon Quiros
RE: More WinPcap 2.3 and Win2k Michael Steele
Snort at boot Zutroi Zatatakowski
RE: Snort at boot McCammon, Keith
Re: Snort at boot Andreas Östling
RE: Snort at boot Robert Schwartz

Wednesday, 19 June

Help with where to place a Snort sensor! -newbie questions- Daniel Lopez
AW: Help with where to place a Snort sensor! -newbi e questions- Poppi, Sandro
Re: OT queries on acid in confusion... roman
Re: OT queries on acid in confusion... John Sage
Re: OT queries on acid in confusion... Jon Quiros
Where are portscans stored ? Hilton De Meillon
snort 1.8.6 and AIX 4.3.3 gilles . lami
Re: snort 1.8.6 and AIX 4.3.3 Chris Green
Problems logging to syslog and mysql simultaneously dlpassport
Hotmail John Maestrale
RE: Hotmail Kreimendahl, Chad J
RE: More WinPcap 2.3 and Win2k Don
RE: More WinPcap 2.3 and Win2k Don
FW: ERROR: OpenPcap Michael Steele
RE: Problems logging to syslog and mysql simultaneously Michael Steele
Re: FW: ERROR: OpenPcap Chris Reid
FW: FW: ERROR: OpenPcap Michael Steele
RE: Problems logging to syslog and mysql simultaneously Michael Steele
RE: Problems logging to syslog and mysql simultaneously dlpassport
FW: FW: ERROR: OpenPcap Michael Steele
spp_portscan to ignore a port? Kevin L Pawloski
New Install Infinity
RE: Problems logging to syslog and mysql simultaneously Michael Steele
Re: OT queries on acid in confusion... Jon Quiros
RE: New Install Michael Steele
RE: Problems logging to syslog and mysql simultaneously Michael Steele
RE: Problems logging to syslog and mysql simultaneously Don
RE: New Install Infinity
RE: Problems logging to syslog and mysql simultaneously Michael Steele
RE: Problems logging to syslog and mysql simultaneously Steven Williams
RE: New Install Michael Steele
RE: New Install Infinity

Thursday, 20 June

Acid MySQL problem Larry Taylor
alert file problem Ganu Skop
Réf. : Re: [Snort-users] snort 1.8.6 and AIX 4.3.3 LAMI, Gilles - DSIA
[spp_portscan] Gregory D Hough
Snort Questions Sandy Martin
Re: Where are portscans stored ? Kevin Riggins
RE: Problems logging to syslog and mysql simultaneously dlpassport
Re: OT queries on acid in confusion... roman
Re: Snort Questions Mike Shaw
Snort & multi-port ethernet cards Tom Sevy
AW: Snort & multi-port ethernet cards Poppi, Sandro
RE: Snort & multi-port ethernet cards McCammon, Keith
RE: Snort Questions Michael Steele
Re: [spp_portscan] Matt Kettler
RE: Problems logging to syslog and mysql simultaneo usly LaRose, Dallas
RE: Problems logging to syslog and mysql simultaneo usly Robbins, Mark
Re: Snort & multi-port ethernet cards Erek Adams
multiple HTTP_PORTS Chris Connelly
Re: multiple HTTP_PORTS Erek Adams
RE: Snort & multi-port ethernet cards larosa, vjay
HELP Port 1080 only DThomaz
Snort 1.8.6 and PPPoE links C.J.O.
RE: Problems logging to syslog and mysql simultaneously Michael Steele
Snort and SysLogging, warning Don
Re: Snort and SysLogging, warning Imran William Smith
portscan.log empty despite nmap scan? systemic
Snort ---> syslog spy

Friday, 21 June

RE: portscan.log empty despite nmap scan? Slighter, Tim
RE: Snort ---> syslog Michael Steele
RE: Snort ---> syslog Don
Snort & multi-port ethernet cards -- PART II Tom Sevy
Snort rules touble. Jason Gauthier
Snort IDScenter 1.09 beta 2 is out Kistler Ueli
RE: Snort ---> syslog Michael Steele
RE: Snort rules touble. Slighter, Tim
Re: Snort rules touble. Ryan Russell
Re: Snort rules touble. Matt Kettler
RE: Snort Michael Steele
RE: Snort rules touble. Jason Gauthier
RE: Snort rules touble. Erek Adams
RE: Snort rules touble. Jason Gauthier
RE: Snort rules touble. Slighter, Tim
RE: Snort rules touble. Slighter, Tim
RE: Snort rules touble. Erek Adams
RE: Snort rules touble. Slighter, Tim
RE: Snort rules touble. Erek Adams
RE: Snort rules touble. Matt Kettler
RE: Snort rules touble. Jason Gauthier
RE: Snort rules touble. Andreas Östling
RE: Snort rules touble. Erek Adams
RE: Problems logging to syslog and mysql simultaneously Frank Knobbe
Real Time Alert sensor Pathmenanthan Ramakrishna
RE: Problems logging to syslog and mysqlsimultaneously Michael Steele
RE: RE: Snort Michael Steele

Saturday, 22 June

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
AW: Snort & multi-port ethernet cards -- PART II Poppi, Sandro
snort 1.8.6 and AIX 4.3.3 gilles . lami
Mysql problem Steve Moran
IDScenter 1.09 beta 2 released -- New features like Snort configuration wizard, MySQL alert detection, etc.. Kistler Ueli
Re: Mysql problem Alex Pinheiro Machado Rodrigues
Re: Re: Mysql problem roman
OpenBSD, snort, Two nic's outside network Jonathan
EXTERNAL_NET Ashley Thomas
Re: EXTERNAL_NET Phil Wood
RE: Problems logging to syslog and mysqlsimultaneously Don

Sunday, 23 June

RE: EXTERNAL_NET Don
RE: EXTERNAL_NET Ashley Thomas
ACID url Links on IIS Ross Draper
Re: snort 1.8.6 and AIX 4.3.3 Martin Roesch
Re: Real Time Alert sensor Martin Roesch
Out of the office kg
Re: Mysql problem Imran William Smith
Re: Mysql problem Michael Gargiullo
Re: EXTERNAL_NET Phil Wood
Rules problem on dual nic vpn server... Bryce Stenberg
AW: Rules problem on dual nic vpn server... Poppi, Sandro

Monday, 24 June

RE: A couple more questions Michael Steele
Snort 1.8.7 and fragroute Peter V.E.
Snort Interfaces problem (Win32) Paul J. Smith
RE: Snort 1.8.7 and fragroute Slighter, Tim
RE: Snort Interfaces problem (Win32) Michael Steele
Re: Snort Interfaces problem (Win32) John Sage
RE: OpenBSD, snort, Two nic's outside network Robert Schwartz
RE: Snort Interfaces problem (Win32) Michael Steele
RE: Snort Interfaces problem (Win32) Michael Steele
Snort performance (was Re: Help with where to place ...) Bennett Todd
snort and puresecure problem Omolayo Salako
Snort Topology Configuration DThomaz
Re: Snort Topology Configuration Jon Quiros
RE: Snort Topology Configuration McCammon, Keith
Re: Snort Topology Configuration Jon Quiros
undefined reference to `dlopen' Daniel Curry
*NIX ping alerts Jason Gauthier
RE: Snort Topology Configuration Hutchinson, Andrew
RE: *NIX ping alerts McCammon, Keith
RE: *NIX ping alerts Jason Gauthier
RE: *NIX ping alerts McCammon, Keith
RE: *NIX ping alerts Jason Gauthier
Snort not loggin max valdez
ASCII logging Bill McCarty
RE: Snort performance (was Re: Help with where to place ...) Ashley Thomas
Re: Snort not loggin Chris Green

Tuesday, 25 June

Snort not loggin hack attempts Paul J. Smith
Re: Snort not loggin hack attempts Roberto Suarez Soto
Re: Snort not loggin hack attempts DataShark
Re: undefined reference to `dlopen' Roman Danyliw
Stupid question, as in I ought to know the answer to this. Phil Wood
Should I worry?? Anthony Scott
Snort getting overloaded by http traffic: Ashley Thomas
False positives with SMTP RCPT TO overflow rule Nels Lindquist
RE: Snort getting overloaded by http traffic: McCammon, Keith
Snort not loggin hack attempts Santoro, David
Re: False positives with SMTP RCPT TO overflow rule Matt Kettler
Re: Stupid question, as in I ought to know the answer to Phil Wood
RE: False positives with SMTP RCPT TO overflow rule Slighter, Tim
RE: False positives with SMTP RCPT TO overflow rule Nels Lindquist
Re: Snort getting overloaded by http traffic: hackerwacker
RE: Snort getting overloaded by http traffic: Matt Kettler
snort-mysql installation - not logging Cearns Angela
port lists for 1.8 Ryan Hill
Re: Snort getting overloaded by http traffic: Jason Haar
Re: Snort getting overloaded by http traffic: Imran William Smith
RE: Snort getting overloaded by http traffic: Ashley Thomas
newbie snort user on windows xp needs help please Scott Weeks
Re: Should I worry?? Chris Adams
HTTP-Proxy scan attempts Dave Packham
Preventing Attacks David Alexandre M. de Carvalho

Wednesday, 26 June

EXTERNAL_NET = any - HOME_NET Serge Leschinsky
RE: EXTERNAL_NET = any - HOME_NET Ashley Thomas
RE: EXTERNAL_NET = any - HOME_NET Tom Sevy
Re[2]: EXTERNAL_NET = any - HOME_NET Serge Leschinsky
Re[2]: EXTERNAL_NET = any - HOME_NET Serge Leschinsky
3 Snort, 1 MySQL Jason Gauthier
Snort / SnortSnarf question about packet capture filenames Matt Yackley
RE: False positives with SMTP RCPT TO overflow rule Slighter, Tim
RE: Preventing Attacks McCammon, Keith
RE: Snort / SnortSnarf question about packet captur e filenames Slighter, Tim
RE: Preventing Attacks Hicks, John
RE: Snort / SnortSnarf question about packet captur e filenames Matt Yackley
RE: Problems logging to syslog and mysql simultaneo usly LaRose, Dallas
[ANN] HenWen 1.0.2 for Snort Nick Zitzmann
I think I know the answer to this, but not 100% sure Eric Garnel
Re: snort-mysql installation - not logging Roman Danyliw
RE: Snort / SnortSnarf question about packet captur e filenames Slighter, Tim
RE: I think I know the answer to this, but not 100% sure McCammon, Keith
Re: Preventing Attacks Jeffrey Taylor
RE: Snort / SnortSnarf question about packet captur e filenames Matt Yackley
Re: port lists for 1.8 Jeffrey Taylor
RE: Snort getting overloaded by http traffic: larosa, vjay
Issue with List/Sourceforge Jason Gauthier
Re: port lists for 1.8 Chris Green
RE: Problems logging to syslog and mysql simultaneo usly LaRose, Dallas
Rules troubles in startup Juan Pablo Villaverde
Stoopid port syntax question Kristopher Czachor
snort and puresecure problem Robin Brown
RE: Issue with List/Sourceforge Hicks, John
Why only detecting host-based attacks? Terry J Dunlap Jr
RE: Why only detecting host-based attacks? David Chait
Re: Rules troubles in startup steveg
RE: Preventing Attacks Slighter, Tim
RE: Problems logging to syslog and mysql simultaneously Don
RE: Snort / SnortSnarf question about packet captur e filenames Slighter, Tim
FreeBSD, Apache, and ACID Cloppert, Michael
List of IP Address DThomaz
RE: List of IP Address McCammon, Keith
Re: Stoopid port syntax question Erek Adams
Re: List of IP Address Erek Adams
Re: I think I know the answer to this, but not 100% sure Mike_Sands
RE: snort and puresecure problem Omolayo Salako
Re: Snort / SnortSnarf question about packet capture filenames K. A. Steensma
RE: Snort / SnortSnarf question about packet captur e filenames - FIXED Matt Yackley
Re: I think I know the answer to this, but not 100% sure Scot Scot
Network World IDS report Jason Haar
not detecting common intrusion Cearns Angela
Re: not detecting common intrusion Erek Adams
Re: not detecting common intrusion Cearns Angela
Re: not detecting common intrusion Erek Adams
Re: not detecting common intrusion Cearns Angela
Lost in the config file K. A. Steensma
RE: newbie snort user on windows xp needs help please Michael Steele
Re: Lost in the config file John Sage
Re: Lost in the config file K. A. Steensma
ACID - Alert Group email problem Frank
RE: newbie snort user on windows xp needs help please Michael Steele

Thursday, 27 June

Lost in the config file and searchable archives Ross Draper
Re: not detecting common intrusion Erek Adams
Re: not detecting common intrusion Jeff Nathan
Re: Lost in the config file Erek Adams
Re: Lost in the config file Erek Adams
Rman - 0.0.4 Alpha is out Mark Vevers
Re: port lists for 1.8 Jeffrey Taylor
RE: newbie snort user on windows xp needs help please Scott Weeks
How to create the DB indices with postgresql Daniel Lang
Re: Preventing Attacks Jeffrey Taylor
Re: Lost in the config file K. A. Steensma
Re: Lost in the config file John Sage
RE: How to create the DB indices with postgresql Hutchinson, Andrew
Re: Lost in the config file Michael Boman
RE: port lists for 1.8 Kristopher Czachor
Re: How to create the DB indices with postgresql Daniel Lang
RE: not detecting common intrusion Steve Halligan
re: 1. Network World IDS report (Jason Haar) Joe Pampel
RE: How to create the DB indices with postgresql Hutchinson, Andrew
Re: port lists for 1.8 Andrew R. Baker
Re: Preventing Attacks Jeff Taylor
Barnyard 0.1.0 RC1 available Andrew R. Baker
SNORT GUI Carles Xavier Munyoz Baldó
verification test? Daniel Curry
RE: Setting up Snort on Windows Michael Steele
Re: False positives with SMTP RCPT TO overflow rule Nels Lindquist
Re: How to create the DB indices with postgresql Ben
Re: SNORT GUI Kistler Ueli
Re: SNORT GUI Kevin L Pawloski
RE: re: 1. Network World IDS report (Jason Haar) Hicks, John
RE: not detecting common intrusion Cearns Angela
Re: False positives with SMTP RCPT TO overflow rule Matt Kettler
Re: Stoopid port syntax question Bennett Todd
Re: Stoopid port syntax question Chris Green
Re: False positives with SMTP RCPT TO overflow rule Chris Green
RE: re: 1. Network World IDS report (Jason Haar) Detmar Liesen
RE: not detecting common intrusion Cearns Angela
RE: Stoopid port syntax question Kristopher Czachor
snort and slackware.. radus
Re: Stoopid port syntax question Chris Green
Re: snort and slackware..(logging question) Matt Kettler
Setting up a Windowz Interface to monitor with no IP Address Scot Scot
[Slightly OT]: what syslog daemon actually ignores the client timestamp? Jason Haar
Re: SNORT GUI Larc
arp spoof john
RE: Setting up a Windowz Interface to monitor with no IP Address Michael Steele
Re: [Slightly OT]: what syslog daemon actually ignores the client timestamp? Andreas Östling
OT: decoding a packet to port 1433 Ashley Thomas

Friday, 28 June

Snort External Alert Sensors Pathmenanthan Ramakrishna
Re: Preventing Attacks John Sage
Snort installation Ha Hoang
Re: arp spoof John Sage
Snort installation Ha Hoang
Re: Snort installation Ralf Hildebrandt
RE: Snort installation Hicks, John
Re: Snort installation Gregory D Hough
RE: Setting up a Windowz Interface to monitor with no IP Address Slighter, Tim
Re: 3 Snort, 1 MySQL Beno Chapman
Re: Snort installation Kistler Ueli
Re: Setting up a Windowz Interface to monitor with no IP Address CJATeck
RE: Setting up a Windowz Interface to monitor with no IP Address Detmar Liesen
RE: Setting up a Windowz Interface to monitor with no IP Address McCammon, Keith
RE: Setting up a Windowz Interface to monitor with no IP Address Mike Shaw
RE: Setting up a Windowz Interface to monitor with no IP Address Slighter, Tim
Re: Setting up a Windowz Interface to monitor with no IP Address CJATeck
RE: Setting up a Windowz Interface to monitor with no IP Address Slighter, Tim
RE: Setting up a Windowz Interface to monitor with no IP Address McCammon, Keith
RE: Setting up a Windowz Interface to monitor with no IP Address Chavez Chris Contr 411 FLTS/TSF
RE: Setting up a Windowz Interface to monitor with no IP Address Hicks, John
RE: Setting up a Windowz Interface to monitor with no IP Address McCammon, Keith
Re: Setting up a Windowz Interface to monitor with no IP Address CJATeck
Re: Setting up a Windowz Interface to monitor with no IP Address Scot Scot
RE: 3 Snort, 1 MySQL Jason Gauthier
RE: Setting up a Windowz Interface to monitor with no IP Address Michael Steele
RE: newbie snort user on windows xp needs help please Scott Weeks
Network traffic forwarder (hardware device) Lee, Mike (BlackBoard Support)
RE: Network traffic forwarder (hardware device) McCammon, Keith
Lost ACID database queries KyleGinney
Re: How to create the DB indices with postgresql Daniel Lang
Re: arp spoof Jeff Nathan
Re: Network traffic forwarder (hardware device) Erek Adams
Re: Lost ACID database queries roman
mismatch. Ashley Thomas

Saturday, 29 June

SNORT USAGE Brian (Automail)
SNORT FAQ Brian (Automail)
Re: mismatch. Ryan Russell
unsubscribe Mark Palmer, CCNA

Sunday, 30 June

snort 99%cpu..not hanging Jonathan
XP / Snort / Error opening device Robert Spinelli
Re: XP / Snort / Error opening device Chris Reid
Snort architecture- How Detection Engine works? Daniel Lopez

Previous period

Next period