Snort: by date

• RSS Feed
• About List
• All Lists

Previous period

Next period

3034 messages starting Mar 31 03 and ending Jun 30 03
Date index | Thread index | Author index

Monday, 31 March

RE: ACID Bill Frank
RE: Snort 2.0 libnet config --cflags broken still? Jeff Nathan
RE: Same src/dst Brei, Matt
RE: Same src/dst Brei, Matt

Tuesday, 01 April

RE: [output] Log application data into the database Emmanuel Dardaine
DF and MF Clayton Mascarenhas
Snort Error Ali
Stealth Scan Master Brian
Re: ACID Master Brian
Question regarding Openbsd 3.3 Bridge diwelf
Snort Advisory - Security Bit Mitigation Brian
RE: snort 2.0 RC1 runs commented out rules? Scheidell
RE: Question on database for Snort FWAdmin
Re: "Saving State" in Snort Chris Green
RE: Question on database for Snort Erek Adams
Sniffer setup. ANTONIO GUTIERREZ
Re: "Saving State" in Snort Phil Wood
Re: "Saving State" in Snort Chris Green
ACID Concerns Slighter, Tim
snortcenter ccomunication. edison marques
RE: ACID Concerns Matt Yackley
var HOME_NET question Rolf Brusletto
Re: Snort Error Erick Mechler
Re: snortcenter ccomunication. Erick Mechler
Question -- spp_stream4 STEALTH ACTIVITY (unknown) detection Matt Yackley
Re: Question -- spp_stream4 STEALTH ACTIVITY (unknown) detection Chris Green
Re: Question on database for Snort Paul Schmehl
RE: Question on database for Snort Kreimendahl, Chad J
RE: var HOME_NET question SRH-Lists
Snort 2.0.0 RC2 Available! Chris Green
RE: var HOME_NET question Steve Halligan
snort-2.0rc1 xml support ktimm
RE: Question on database for Snort FWAdmin
new snort.conf Kreimendahl, Chad J
ACID Email Alert Configuration FWAdmin
RE: new snort.conf Kreimendahl, Chad J
Re: [Snort-announce] Snort 2.0 rc1 available Martin Roesch
Re: ACID Email Alert Configuration Erick Mechler
classification.config Keg
RE: var HOME_NET question SRH-Lists
webmin Keg
Same source/dest Keg
Re: "Saving State" in Snort Phil Wood
RE: webmin Matt Yackley
Larry Lopez/ahg/IRCorp is out of the office. Laurence Lopez
IPv6 and snort v2rc2 Ted Llewellyn
Snortcenter Beta Gary Borgeson
RE: Question on database for Snort Paul Schmehl
Re: "Saving State" in Snort Michael L. Artz
RE: ACID Concerns Slighter, Tim
Hi Steve Rahman
Educational Incident Data Comparison Pilot (X-Post) Alfred Huger
Re: Same source/dest james

Wednesday, 02 April

Re: Sniffer setup. Ueli Kistler
Barnyard log directory Roberto Suarez Soto
RE: Question on database for Snort Erek Adams
RE: Question on database for Snort FWAdmin
RE: ACID Email Alert Configuration FWAdmin
Re: IPv6 and snort v2rc2 Chris Green
Re: IPv6 and snort v2rc2 Ted Llewellyn
Re: Question on database for Snort David Alonso De La Vega Tapage
Snort installation again Andrzej Wisniewski
Jose Ramon Hernandez Macias/Sistemas/Megacentro/Alestra is out of the office. Jose Ramon Hernandez Macias
Re: webmin Keg
ACID inconsistencies? Keg
Re: Snort installation again Erek Adams
Portscan setup ANTONIO GUTIERREZ
RE: Same source/dest Brei, Matt
RE: Same source/dest Hutchinson, Andrew
Re: Same source/dest Keg
Re: Re: snortcenter ccomunication. edison marques
snort 2.0.0 rc2 and libnet Michael Scheidell
Re: Same source/dest Erek Adams
help with regular expressions Julio E. Gonzalez P.
email address not specified Philip Davidson
RE: Snort installation again Jan van den Berg
RE: help with regular expressions SRH-Lists
Re: Same source/dest James-lists
sorry, more info about the email error Philip Davidson
Re: snort installation probs Jill Tovey
Re: help with regular expressions Erek Adams
RE: Same source/dest Brei, Matt
RE: Same source/dest Erek Adams
RE: email address not specified Matt Yackley
Web hosting with DHCP Goutam Dastider
Web hosting with DHCP Goutam Dastider
Re: Same source/dest Keg
Re: Same source/dest Erek Adams
You caught them, what next? Tobias Rice
Re: Re: snortcenter ccomunication. Erick Mechler
Re: Web hosting with DHCP Erick Mechler
Snort and Sneeze Jan van den Berg
logsnorter and shorewall Rolf Brusletto
RE: Same source/dest Brei, Matt
RE: Same source/dest Erek Adams
RE: Same source/dest Brei, Matt
Re: You caught them, what next? Joe Matusiewicz
RE: Same source/dest Erek Adams
IDS Placement ideas for inside and outside a firewall. Brei, Matt
RE: You caught them, what next? Drew Stockman
RE: You caught them, what next? L. Christopher Luther
RE: You caught them, what next? Brei, Matt
RE: You caught them, what next? L. Christopher Luther
RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin
Re: You caught them, what next? Matt Kettler
RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt
RE: IDS Placement ideas for inside and outside a firewall. Drew Stockman
RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin
RE: You caught them, what next? Gordon Cunningham
RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt
RE: IDS Placement ideas for inside and outside a fi rewall. Philip Davidson
Re: Same source/dest Keg
RE: You caught them, what next? FWAdmin
RE: You caught them, what next? Brei, Matt
RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt
RE: (OT) You caught them, what next? L. Christopher Luther
FATAL ERROR: /etc/snort/rpc.rules:19: Unknown Flow Option: 'to_sever' DLittle
Re: You caught them, what next? Jason Haar
RE: FATAL ERROR: /etc/snort/rpc.rules:19: Unknown Flow Option: 'to_sever' Schmehl, Paul L
Snort and Brdiging Firewall Allan Dover
Run as user? Joe Hill
Re: Same source/dest Erek Adams
Re: Run as user? Alberto Gonzalez
Re: Run as user? Joe Hill
Re: Run as user? Alberto Gonzalez
Re: Run as user? Erek Adams
Re: Snort and Brdiging Firewall Alberto Gonzalez
Re: IDS Placement ideas for inside and outside a firewall. David Glosser
Re: Run as user? Joe Hill
Re: Run as user? Joe Hill

Thursday, 03 April

RE: Snort installation again Andrzej Wisniewski
RE: MySQL 4 Johan Sunnerstig
Re: Run as user? Erek Adams
RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin
RE: IDS Placement ideas for inside and outside a fi rewall. FWAdmin
Re: Run as user? Chris Green
RE: Snort installation again Jakub Molek
Re: Re: snortcenter ccomunication. edison marques
Re: webmin Scheidell
(spp_portscan2) lines in alert file Julio E. Gonzalez P.
SNORT AND HENWEN FOR NEWBIES DAFKA
Re: Sniffer setup. Andrew R. Baker
RE: You caught them, what next? L. Christopher Luther
Crystal Reports from MySQL Ed Vazquez
RE: ACID Chris Eidem
RE: Snort installation again twig les
RE: You caught them, what next? Erek Adams
Gnutella Keg
Re: [Snort-sigs] Sendmail Signature Matt Kettler
udated curl problem edison marques
RE: You caught them, what next? bmcdowell
Re: Run as user? Matt Kettler
RE: IDS Placement ideas for inside and outside a firewall. Brian Laing
RE: Gnutella Bob Dehnhardt
Re: Re: [Snort-sigs] Sendmail Signature Matt Kettler
Re: Gnutella Matt Kettler
Byte_test and Byte_jump Shadi Rostami
2.0.0rc3 Available! Chris Green
Re: SNORT AND HENWEN FOR NEWBIES Nick Zitzmann
Snort setup Stigers, David
snort as a service on Windows 2000 August . K . Kunnecke
Is Oracle supported on Win2k? Jalil Feghhi
snort 2.rc2 xml output ktimm
Gigabit NIC Recommendations... Dusty Hall
Re: Run as user? Joe Hill
RE: IDS Placement ideas for inside and outside a firewall. Brei, Matt
RE: Snort setup L. Christopher Luther
RE: Snort setup L. Christopher Luther
Help with a config file please? snort
Re: Snort setup Joe Hill
Re: Gigabit NIC Recommendations... David Alonso De La Vega Tapage
Re: You caught them, what next? Jason Haar
RE: IDS Placement ideas for inside and outside a firewall. Brian Laing
RE: [Snort-sigs] Questions 101 Matt Kettler
Script to cleanup ACID/Snort Alerts in MySQL DB... Dusty Hall
Snort Mysql Tables Schema.... Rolf Brusletto
Unknown alert Joe Hill
Snort setup problems dky
Log everything for billing purposes Ross Davis - DataAnywhere
RE: Log everything for billing purposes Matt Yackley
Re: Log everything for billing purposes twig les
Re: Log everything for billing purposes Matt Kettler
SnortDB Extra Dusty Hall
Snort ouput format Michael L. Artz
RE: IDS Placement ideas for inside and outside a fi rewall. Ponte, Paul F
Re: Log everything for billing purposes Jason Romo
Re: IDS Placement ideas for inside and outside a firewall. David Glosser
Passive or Active Joe Hill
Re: IDS Placement ideas for inside and outside a firewall. David Glosser
AW: Gigabit NIC Recommendations... Poppi, Sandro
idscenter Troy Evers
Re: Snort Mysql Tables Schema.... Chris Reid

Friday, 04 April

Re: idscenter Ueli Kistler
./setup.sh Jill Tovey
Re: ./setup.sh Joerg Weber
Re: ./setup.sh Jim Burwell
curl error Jill Tovey
adding additional sensor to ACID John Hally
RE: adding additional sensor to ACID Brei, Matt
RE: adding additional sensor to ACID John Hally
Re: curl error Joerg Weber
Re: adding additional sensor to ACID sunzi
Re: You caught them, what next? Michael Boman
calllogfuncs() decoded length does not compute! jcvaraillon
adding additional sensor to ACID Ghercoias, Catalin
RE: IDS Placement ideas for inside and outside a firewall. Brian Laing
alert file Keg
(no subject) saud
RE: Help with a config file please? L. Christopher Luther
Re: Passive or Active Erick Mechler
RE: alert file Jan van den Berg
Re: (no subject) (how to unsubscribe) Matt Kettler
RE: Help with a config file please? snort
RE: Help with a config file please? L. Christopher Luther
Off topic: ActiveScout? Rich Adamson
RE: Help with a config file please?] snort
RE: Help with a config file please? snort
RE: Help with a config file please? L. Christopher Luther
RE: Help with a config file please? snort
RE: Help with a config file please? snort
RE: Help with a config file please? snort
Re: Off topic: ActiveScout? JP Vossen
Re: You caught them (RR TZ issue) JP Vossen
RE: Help with a config file please? L. Christopher Luther
Curious FTP access, possible information gathering? Travis Farmer
Re: Log everything for billing purposes Andrew R. Baker

Saturday, 05 April

OT: French Snort Users, Please Read. Erek Adams
RE: snort as a service on Windows 2000 Michael Steele
Re: snort 2.0.0 rc2 and libnet Jeff Nathan
Re: DF and MF Jeff Nathan
ICMP PING NMAP to 149.1.1.1 Kenneth G. Arnold
Re: ICMP PING NMAP to 149.1.1.1 Joe Hill
Re: ICMP PING NMAP to 149.1.1.1 Kenneth G. Arnold

Sunday, 06 April

Frag2 timeout parameter Paweł Goleń
(no subject) fjy
Possible error with the "-L" flag? Dave Garn (UUNET)
Re: ICMP PING NMAP to 149.1.1.1 Jeff O'Neal
snort plugins / add-ons Ronan Horgan
Help w/ ODBC Setup Jalil Feghhi
Re: ICMP PING NMAP to 149.1.1.1 Joe Hill
Re: (no subject) Joe Hill
ASN.1 Clayton Mascarenhas
$HOME_NET Keg
Only *nix alerts? Keg
Re: $HOME_NET Erek Adams
Re: Only *nix alerts? Erek Adams
rule chains Derya Sezen
/etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes
RE: adding additional sensor to ACID SecurityAdmin
Do 1.9 rules work with 2.0? Jesse W. Asher
Re: /etc/init.d/snort file, Snort 1.9.1 Erek Adams
Re: rule chains Erek Adams
(no subject) shuuichi_numazawa
Re: Do 1.9 rules work with 2.0? Kenneth G. Arnold
Re: Do 1.9 rules work with 2.0? Erek Adams
RE: (no subject) Paul D. Shaffer
RE: (no subject) shuuichi_numazawa
Anyone integrated HIDS-style alerts into Snort DB? Jason Haar
unable to open //.snortrc Chia Alan

Monday, 07 April

Re: DF and MF Andreas Östling
Too many alerts Egal A Egal - SA
Re: Too many alerts Joerg Weber
Snort memory management routines Conrad Morgan
RE: adding additional sensor to ACID Wayne . Freeman
connect failed Jill Tovey
Re: $HOME_NET Keg
Re: Only *nix alerts? Keg
GUI interface Stigers, David
Re: $HOME_NET Erek Adams
Re: Only *nix alerts? Erek Adams
Re: connect failed Erek Adams
Re: GUI interface Erek Adams
ppd files for Time-Module Hobgood, Frankie
ICMP rule not behaving as expected Neil Dickey
Email alerts Sudhakar Gummadi
RE: ICMP rule not behaving as expected Tobias Rice
New guy. Mike
RE: New guy. L. Christopher Luther
RE: ICMP rule not behaving as expected Neil Dickey
Re: Email alerts Matt Kettler
stealth interface d_greenjr
RE: New guy. Potts, Ross A.
Re: $HOME_NET Keg
SMTP From Comment Overflow rule problems Ron Shuck
Re: Only *nix alerts? Keg
Network placement / using a VLAN Brian McIntyre
RE: stealth interface Matt Yackley
Re: stealth interface Matt Kettler
Newbie questions are as newbie questions does Geoff Craig
Re: Do 1.9 rules work with 2.0? Chris Green
Portscan False Positives From My IP Range Vintinner, M. Scott
RE: GUI INTERFACE William_Metcalf
Re: stealth interface Keg
RE: Portscan False Positives From My IP Range Tobias Rice
RE: Network placement / using a VLAN JP Vossen
RE: stealth interface Vanish Pattni (DSL AK)
alert file XRef URL's Chapman, Justin T
Re: Newbie questions are as newbie questions does Michael L. Artz
WEB-MISC long basic authorization string Semerjian, Ohanes

Tuesday, 08 April

Snort Installation problem Aaron Babalola
Re: connect failed Jill Tovey
Priority codes Philip Davidson
Bug Report Slighter, Tim
RE: WEB-MISC long basic authorization string Matt Yackley
Re: Email alerts Erek Adams
Re: New guy. Erek Adams
Re: $HOME_NET Erek Adams
Re: Network placement / using a VLAN Erek Adams
OT: Help with Barnyard Gordon Cunningham
Re: Newbie questions are as newbie questions does Erek Adams
certificate verify error Jill Tovey
sorry about that Erek Philip Davidson
Re: certificate verify error Erick Mechler
Re: certificate verify error Jill Tovey
Re: certificate verify error Jill Tovey
Re: $HOME_NET Keg
Re: sorry about that Erek Erek Adams
Re: $HOME_NET Erek Adams
Snort behavior Slighter, Tim
Re: $HOME_NET Keg
Re: certificate verify error Erick Mechler
ACID name resolution Keg
UPNP alerts Keg
Re: ACID inconsistencies? Keg
question Joe Hdez
Re: ACID name resolution Erick Mechler
(no subject) ryan stangl
Question Joe Hdez
Re: (no subject) Erek Adams
RE: (no subject) Don Weber
RE: stealth interface Eric Baur
Re: stealth interface Tom Culpepper
RE: stealth interface Chris Mann
Re: stealth interface d_greenjr
RE: WEB-MISC long basic authorization string Semerjian, Ohanes
Re: stealth interface Tom Culpepper
RE: Help with a config file please? snort
About idmef xml lucy lee
Re: OT: Help with Barnyard Ralf Spenneberg
RE: stealth interface Michael Steele

Wednesday, 09 April

Re: certificate verify error Jill Tovey
RE: stealth interface bmcdowell
RE: OT: Help with Barnyard Gordon Cunningham
RE: (no subject) Slighter, Tim
RE: OT: Help with Barnyard Gordon Cunningham
How to set WINDOWS up for a Stealth Interface... Michael Steele
Capturing only specific data quantum
HOME_NET and EXTERNAL_NET snort.conf Allan Dover
RE: stealth interface Donnie Green
Re: How to set WINDOWS up for a Stealth Interface... Ueli Kistler
RE: $HOME_NET Snow Jacob C KPWA
Small n00b question Snow Jacob C KPWA
/var/log/snort/some.ip.addr.dir/ permissions problem Donnie Green
Re: /var/log/snort/some.ip.addr.dir/ permissions problem Erek Adams
Firewalls on IDS Tom Culpepper
Quick Question McBurnett, Jim
RE: Firewalls on IDS Miller, Eoin
Alert messages in packet dumps Neil Dickey
How to Use Throttle when using Swatch for duplicate email alerts Sudhakar Gummadi
(no subject) Cory D.
Re: Quick Question Erick Mechler
RE: stealth interface Sanderson, Josh
Re: certificate verify error Erick Mechler
Re: How to Use Throttle when using Swatch for duplicate email alerts Sam Evans
Re: How to set WINDOWS up for a Stealth Interface... snort
Re: How to Use Throttle when using Swatch for duplicate email alerts Erek Adams
OT- Can anyone recommend a log parser for cisco? David Gianndrea
RE: Firewalls on IDS Don Weber
P2P rule not working Jimmy Hernandez
Problems with Snort 2.0rc4 Anderson Johnston
Re: P2P rule not working Jeff
stream5? raybo
(A little off topic but not really) Connection dropping. Brei, Matt
RE: Firewalls on IDS Brian Laing
sending snort output to a database OFFLINE Rakesh Kumar
RE: OT: Help with Barnyard Ralf Spenneberg
RE: Firewalls on IDS Robert Reid

Thursday, 10 April

Does snort support cygwin? Tay Chuan
snortdb-extra Paulo Gomes
New Rules Question Sh J
getting error when using -s snort snort
Re: getting error when using -s Erek Adams
Re: New Rules Question Erek Adams
RE: snortdb-extra Hutchinson, Andrew
Re: getting error when using -s snort snort
Snort inline configuration Ueli Kistler
RE: How to Use Throttle when using Swatch for duplicate email alerts Hutchinson, Andrew
Re: OT- Can anyone recommend a log parser for cisco? James Hoagland
Re: OT- Can anyone recommend a log parser for cisco? Erek Adams
Re: OT- Can anyone recommend a log parser for cisco? Dusty Hall
RE: OT: Help with Barnyard Gordon Cunningham
ACID issue Slighter, Tim
RE: OT: Help with Barnyard Ralf Spenneberg
Re: ACID issue Michael Anderson
Re: New Rules Question Matt Kettler
stream4 Steven Rudolph
RE: RE: stealth interface Eric Baur
Re: stream4 Erek Adams
RE: OT: Help with Barnyard Gordon Cunningham
RE: ACID issue Slighter, Tim
RE: Firewalls on IDS Brian Laing
RE: OT: Help with Barnyard Ralf Spenneberg
SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Sadanapalli, Pradeep Kumar (MED, TCS)
RE: OT: Help with Barnyard Gordon Cunningham
RE: ACID issue Mike
Re: alert file XRef URL's Chris Green
RE: Does snort support cygwin? Michael Steele
Acid and PHP Redhat 8.0 Tom Morgan
snort+mysql+acid question Harish S
aswer to snort Francisco Javier Gonzalez Gonzalez
How to centralize traffic Gustavo Santos
Re: SMTP From Comment Overflow rule problems Scheidell
OT- Can any one recommend a turnkey log parser for cisco. David Gianndrea
help li wei
Re: OT: Help with Barnyard Ralf Spenneberg
snmp traps for snort Ronan Horgan
RE: ACID issue Slighter, Tim
Re: SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Jeff
Re: aswer to snort David Alonso De La Vega Tapage
Re: Acid and PHP Redhat 8.0 David T Hollis
Snort inline configuration - Additional informations Ueli Kistler
RE: snort+mysql+acid question Matt Yackley
Re: snort+mysql+acid question Mike Mentges
FW: Acid and PHP Redhat 8.0 SecurityAdmin
SnortCenter - Problem with sensor Retry Connecting Jeff Bolden
Re: stream4 Chris Green
Re: /var/log/snort/some.ip.addr.dir/ permissions problem Donnie Green Jr
Re: stealth interface Keg
Re: Acid and PHP Redhat 8.0 Keg
Re: SNORT-1.9.0 problem with wireless network interface - network ge ts disabled Bennett Todd
ignored 1 duplicate alert(s) ipwitch
RE: SNORT-1.9.0 problem with wireless network inte rface - network ge ts disabled Sadanapalli, Pradeep Kumar (MED, TCS)
RE: /var/log/snort/some.ip.addr.dir/ permissions pr oblem Matt Yackley
RE: help Chapman, Justin T
Re: /var/log/snort/some.ip.addr.dir/ permissions pr oblem David Alonso De La Vega Tapage
Re: /var/log/snort/some.ip.addr.dir/ permissions pr oblem ipwitch
What have I screwed up on this SQL call? Jason Haar
are the Snort Signature Database or arachNIDS downloadable? snort

Friday, 11 April

Re: Snort inline configuration - Additional informations Erek Adams
Re: stream5? Erek Adams
Re: Acid and PHP Redhat 8.0 Franklin Rierson
RE: [Snort-sigs] SMTP From Comment Overflow rule problems Ron Shuck
[Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Cory D.
Snort_inline and MySQL compile problems pieter claassen
RE: What have I screwed up on this SQL call? Hutchinson, Andrew
OT: The Signature from Hell Erek Adams
RE: Snort_inline and MySQL compile problems Slighter, Tim
Ignore host David Scott
Re: Ignore host Erek Adams
Sensor Config Creation in SnortCenter Shlomo Dubrowin
Re: Ignore host Kenneth G. Arnold
Understanding spp_portscan2 results Domingos Costa
Re: Ignore host David Alonso De La Vega Tapage
RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on wi nXp SecurityAdmin
Re: Ignore host Erek Adams
RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Cory D.
Re: Ignore host David Alonso De La Vega Tapage
interpreting logs... Bruyere, Michel
RE: OT: The Signature from Hell Schmehl, Paul L
RE: OT: The Signature from Hell Bob Dehnhardt
Snort & RHL 9 Brian M. Diehl
SNMP request UDP Andrade, Leonardo F. Buonsanti de (IT - Brasil)
RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on wi nXp SecurityAdmin
capturing arp Patrick Amirian
Re: Snort & RHL 9 David T Hollis
Re: What have I screwed up on this SQL call? Jason Haar
RE: [Snort-users]SNORT, +MySQL, +Acid, Apache on winXp Michael Steele
RE: snort as a service on Windows 2000 Michael Steele
Question Joe Hdez
Web Session Capture and Replay Suwarna Patel
RE: Snort & RHL 9 Paul D. Shaffer
Best OS Ryan Finnesey

Saturday, 12 April

Re: Web Session Capture and Replay Edin Dizdarevic
Re: Best OS Edin Dizdarevic
Applied Watch for the Snort IDS is Now Available for Free Download Eric Hines
DROP connections? /dev/null
Re: Best OS Jeff
RE: Best OS Ryan Finnesey
Re: DROP connections? Alberto Gonzalez
How can I stop checking for Truncated Tcp Options? Jacques
RE: Snort & RHL 9 Patrick S. Harper
RE: Best OS Patrick S. Harper
Re: How can I stop checking for Truncated Tcp Options? Jacques
Re: DROP connections? Derya Sezen
RE: Best OS SecurityAdmin
RE: Applied Watch for the Snort IDS is Now Availabl e for Free Download SecurityAdmin
RE: Applied Watch for the Snort IDS is Now Available for Free Download Michael Steele

Sunday, 13 April

Snort 1.9.1, 1.9.1 chrooted and 2.0 rc4, Barnyard, Mudpit RPMs for RedHat 7.3, 8.0 and 9 Ralf Spenneberg
Time-modules problem in PPM victor.lee
RE: Time-modules problem in PPM Michael Steele
Re: Sensor Config Creation in SnortCenter Shlomo Dubrowin
Re: Best OS Bruno Benchimol a.k.a. Misty MSt
Where and when do snort decide which CID to give to a event? jkv
RE: Applied Watch for the Snort IDS is Now Available for Free Download Eric Hines
Re: Where and when do snort decide which CID to give to a event? Paul Schmehl
Re: Where and when do snort decide which CID to give to a event? jkv
Dual Alerts ? David Markle
About IDMEF XML lucy lee
Snort-inline and MySQL pieter claassen
MY SQL, SNORT. rehanann
snort 2.0.0rc4 openbsd 3.2 short udp packet complaints robin
Inaccurate info !! KD Rajkumar
(no subject) KD Rajkumar
Re: capturing arp Sergio Aldo Casas
Trouble reading snort.log.* Jacques
RE: (no subject) Ryan Finnesey
Re: Trouble reading snort.log.* Michael Boman

Monday, 14 April

AW: About IDMEF XML Poppi, Sandro
Can snort detect the SYN flood? Wei Nan
RE: capturing arp Spencer, Arthur
Snort-inline and MySQL pieter claassen
RE: MY SQL, SNORT. David Markle
RE: capturing arp Rich Adamson
Re: Alert messages in packet dumps Neil Dickey
Re: capturing arp Jacques
Re: MY SQL, SNORT. Jacques
ODBC+TDS woes Jeff
Re: capturing arp Edin Dizdarevic
(no subject) John Sage
Snort Windows - not working with ISDN Adapter Mirko Matytschak
Re: Alert messages in packet dumps Edin Dizdarevic
Re: snort 2.0.0rc4 openbsd 3.2 short udp packet complaints Chris Green
ODBC+TDS woes Jeff
Snort Windows - not working with ISDN Adapter Mirko Matytschak
snort 1-9-1 W2K ISDN not working Mirko Matytschak
snort a Gbps? Bennett Todd
Re: MY SQL, SNORT. Patrick S. Harper
Re: snort 2.0.0rc4 openbsd 3.2 short udp packetcomplaints (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: ODBC+TDS woes Paul Schmehl
RE: Snort Windows - not working with ISDN Adapter Joe Lawson
Snort 2.0 Released! Martin Roesch
RE: Snort Windows - not working with ISDN Adapter Michael Steele
Re: Snort Windows - not working with ISDN Adapter snort
Re: ODBC+TDS woes Jeff
RE: stealth interface Wilhelm, Brent
Re: Question Brian
RE: Dual Alerts ? L. Christopher Luther
Too many links error Jaya Shankar
RE: capturing arp L. Christopher Luther
RE: Snort Windows - not working with ISDN Adapter L. Christopher Luther
RE: snort 1-9-1 W2K ISDN not working L. Christopher Luther
RE: snort as a service on Windows 2000 Michael Steele
Snort on Windows 2003 server Robert Reid
Snortcenter and windows Snow Jacob C KPWA
RE: Snort on Windows 2003 server Michael Steele
RE: Snortcenter and windows Michael Steele
snort rules flow option Michael Goodman
Re: [Snort-devel] Snort 2.0 Released! Kevin J. Schmidt
Frag2 Blake Frantz
Re: Best OS Mike Mentges
Re: capturing arp Chris Green
Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay
RE: Snortcenter and windows Michael Steele
A little pass rule help Keg
RE: A little pass rule help L. Christopher Luther
RE: Dual Alerts ? David Markle
RE: Dual Alerts ? L. Christopher Luther
Applied Watch is now FREE for Non-Commercial Use after overwhelming Demand! Eric Hines

Tuesday, 15 April

old version of snort? Liuhy
No output to ACID Jill Tovey
writing rules for snort 1.6 Liuhy
Portscan with ICMP? Edin Dizdarevic
snortrules.tar.gz Grime, Richard S
Re: No output to ACID Edin Dizdarevic
Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic
Clean DB && Barnyard Start Joerg Weber
Re: No output to ACID Jill Tovey
AW: writing rules for snort 1.6 Poppi, Sandro
Re: No output to ACID Edin Dizdarevic
Re: No output to ACID Joerg Weber
Re: A little pass rule help Keg
Re: A little pass rule help Keg
Re: No output to ACID Edin Dizdarevic
Help Needed: i want to make a firewall Junaid
Help Needed: i want to make a firewall Junaid
Help Needed: i want to make a firewall Junaid
Re: Re: [Snort-devel] Snort 2.0 Released! Chris Green
[Fwd: Re: No output to ACID] Jill Tovey
[Fwd: Re: No output to ACID] Jill Tovey
Re: Re: [Snort-devel] Snort 2.0 Released! (Absent jusqu'au 29/07/2002) Pascal Painparay
RE: Help Needed: i want to make a firewall Philip Davidson
spp_stream4 possible EVASIVE RST KD Rajkumar
Windump doesn't work now. LucAdmin
RE: Re: [Snort-devel] Snort 2.0 Released! larosa, vjay
Re: Windump doesn't work now. Rich Adamson
Re: Re: [Snort-devel] Snort 2.0 Released! Kevin J. Schmidt
Snort 2.0 and SnortCenter Reda Hicham
SNMP plugin removed from Snort Jose Vicente Nunez Z
logsnorter Rolf Brusletto
Re: Can snort detect the SYN flood? Chris Green
Re: No output to ACID Jill Tovey
Re: How can I stop checking for Truncated Tcp Options? Chris Green
Re: Can snort detect the SYN flood? (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: How can I stop checking for Truncated TcpOptions? (Absent jusqu'au 29/07/2002) Pascal Painparay
Still Help Needed: i want to make a firewall Junaid
Still Help Needed: i want to make a firewall Junaid
Re: Still Help Needed: i want to make a firewall Mike Mentges
Re: {SPAM} Still Help Needed: i want to make a firewall Matt Kettler
SID 1042 and WebDAV Scott, Joshua
Re: Still Help Needed: i want to make a firewall Paul Schmehl
Re: snortrules.tar.gz Erick Mechler
Re: snortrules.tar.gz Paul Schmehl
[Fwd: CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability] Jose Vicente Nunez Z
FW: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes
Re: old version of snort? Patrick S. Harper
Re: Still Help Needed: i want to make a firewall Patrick S. Harper
Re: Still Help Needed: i want to make a firewall Jason
stream4 vulnerability Erick Mechler
RE: Windump doesn't work now. L. Christopher Luther
RE: A little pass rule help L. Christopher Luther
RE: Still Help Needed: i want to make a firewall bmcdowell
New stream 4 messages in 2.0 Russell Fulton
RE: {SPAM} Still Help Needed: i want to make a fire wall Robert Reid
RE: Still Help Needed: i want to make a firewall Robert Reid
Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler
some strange alerts dawnshade
Re: snortrules.tar.gz Andreas Östling

Wednesday, 16 April

Need to MAKE/DEVELOP my own firewall Junaid
some strange alerts dawnshade
How to handle BPDU packet in Snort? Mzhuzeus
RE: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes
can I remove asn1_decode preprocessor? Clayton Mascarenhas
plz help preethi suvarna
False positives portscan2 bob gunzel
AW: plz help Poppi, Sandro
what version of SPADE to use with Snort? BHR Hana
Confiremation of BO needed! Edin Dizdarevic
Re: old version of snort? Brian
no portscan traffic Gosswiler Bjoern
Re: Confiremation of BO needed! Edin Dizdarevic
AW: no portscan traffic Poppi, Sandro
snort-inline error Kathy A
Re: FW: /etc/init.d/snort file, Snort 1.9.1 John Sage
Re: can I remove asn1_decode preprocessor? Paul B. Poh
RE: Understanding spp_portscan2 results Sasa Jusic
snort, postgres, acid Jason
snort 2.0 errors michaeltone1975
Acid vs Fwlogwatch Drew Cutter
Oracle Compromise (Tftp + Netcat) Dusty Hall
Re: what version of SPADE to use with Snort? James Hoagland
OpenPcap( ) error with snort 2.0 Storment, Brandon
Re: snortrules.tar.gz Paul Schmehl
RE: Still Help Needed: i want to make a firewall Horta, Benny
Acid slowness Comcast
portscan target filter ? Charles Gillet
Re: Acid slowness Mike Mentges
Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release David Benham
Re: Your message to Snort-users awaits moderator approval smitha rao
Portscan2 ignorehosts Artur Bittencourt
Snort Advisory: Integer Overflow in Stream4 Brian Caswell
Re: Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release] Jason
Re: Acid slowness Dusty Hall
install snort on RH linux victor
Re: capturing arp (Absent jusqu'au 29/07/2002) Chris Green
Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic
RE: Still Help Needed: i want to make a firewall Michael Steele
RSA Conference 2003 Michael Steele
Re: install snort on RH linux Mike Mentges
RE: FW: /etc/init.d/snort file, Snort 1.9.1 Elvira_Byrnes
RE: Still Help Needed: i want to make a firewall Mike Mentges
RE: Still Help Needed: i want to make a firewall Matt Kettler
Re: {SPAM} Need to MAKE/DEVELOP my own firewall Matt Kettler
about idmef xml lucy lee
RE: Still Help Needed: i want to make a firewall Michael Steele
Re: Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release Frank Knobbe
Securing a Snort machine Elvira_Byrnes
Re: install snort on RH linux Ty Bodell
Re: Acid slowness JP Vossen
RE: Securing a Snort machine Elvira_Byrnes
Re: Securing a Snort machine Patrick S. Harper
RE: Securing a Snort machine Elvira_Byrnes

Thursday, 17 April

RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Elvira_Byrnes
RE: Still Help Needed: i want to make a firewall Mirko Matytschak
Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Martin Olsson
Re: Acid slowness Dusty Hall
udpflood attack ! Liuhy
RE: Still Help Needed: i want to make a firewall Rich Adamson
emty logs Bart Decker
Creating a new rule David Cintron
Installations of Snort on linux hu ming
RE: plz help Semerjian, Ohanes
RE: Securing a Snort machine Semerjian, Ohanes
RE: Securing a Snort machine Semerjian, Ohanes
Snort on Wireless Sadanapalli, Pradeep Kumar (MED, TCS)
empty logs..how come ?? Bart Decker
Re: Securing a Snort machine Michael Anderson
Re: Securing a Snort machine M M
Two items that are hard to digest... Michael Steele
RE: Still Help Needed: i want to make a firewall Robert Reid
Re: udpflood attack ! Matt Kettler
Re: Snort on Wireless Jason
Snort 2.0 Ma, Kenneth K.
Re: Two items that are hard to digest... Sam Evans
Re: RSA Conference 2003 mcmurry jim
Re: empty logs..how come ?? Matt Kettler
Re: Two items that are hard to digest... Edin Dizdarevic
Re: Snort on Wireless Michael Santos
RE: Two items that are hard to digest... Michael Steele
Re: Snort 2.0 Mike Mentges
Re: Two items that are hard to digest... Michael Anderson
Re: Two items that are hard to digest... Jose Vicente Nunez Z
RE: Snort 2.0 Michael Steele
RE: Still Help Needed: i want to make a firewall James Bly
Re: Snort 2.0 Mike Mentges
Re: Snort 2.0 Michael Anderson
RE: Securing a Snort machine Matt Kettler
RE: RSA Conference 2003 Michael Steele
Editing rules within Webmin Paul Jacobs
RE: Two items that are hard to digest... Michael Steele
Re: Two items that are hard to digest... Matt Kettler
RE: Two items that are hard to digest... Michael Steele
Alert file exceeds 2GB Dusty Hall
RE: Two items that are hard to digest... Matt Kettler
Re: Snort on Wireless Bennett Todd
RE: Two items that are hard to digest... Michael Steele
RE: Still Help Needed: i want to make a firewall Robert Reid
RE: Two items that are hard to digest... Matt Kettler
RE: Two items that are hard to digest... Michael Steele
Snort Alert Content Telnet kaihansen
RE: Still Help Needed: i want to make a firewall Donofrio, Lewis
Configure Error in snort 2.0.0 David Alonso De La Vega Tapage
RE: Two items that are hard to digest... Matt Kettler
RE: Still Help Needed: i want to make a firewall Michael Steele
Re: Configure Error in snort 2.0.0 Neil Dickey
Editing rules within Webmin Robin Brown
Re: Two items that are hard to digest... Chris Reid
Re: Two items that are hard to digest... Erick Mechler
RE: Still Help Needed: i want to make a firewall Paul Schmehl
RE: Two items that are hard to digest... Matt Kettler
Procedure to upgrade snort 1.9.1 to 2.0 on linux 8.0 Sudhakar Gummadi
Re: Alert file exceeds 2GB Erick Mechler
Re: Configure Error in snort 2.0.0 David Alonso De La Vega Tapage
FW: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors Vicky Rode
Fw: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors James-lists
Re: Two items that are hard to digest... Sam Evans
RE: Two items that are hard to digest... Michael Steele
Re: Two items that are hard to digest... Chris Reid
Re: Configure Error in snort 2.0.0 David Alonso De La Vega Tapage
RE: Configure Error in snort 2.0.0 Schmehl, Paul L
RE: Still Help Needed: i want to make a firewall Matt Kettler
Cert Advisory and now no SNMP traps. larosa, vjay
Re: Cert Advisory and now no SNMP traps. Kevin J. Schmidt
RE: (Off List) Two items that are hard to digest... Michael Steele
RE: (Off List) Two items that are hard to digest... L. Christopher Luther
RE: Securing a Snort machine Dean Scott
RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler
unknown preprocessor "asn1_decode" Kit Massengill
Clarification: Two items that are hard to digest... Michael Steele
Re: unknown preprocessor "asn1_decode" Matt Kettler
RE: unknown preprocessor "asn1_decode" SRH-Lists
Email Alert for Windows - Testers Needed Michael Steele
RE: Snort on Wireless Philip Davidson
Users and Groups for Snort rules - files Kit Massengill
Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Glenn Forbes Fleming Larratt
Re: Users and Groups for Snort rules - files Neil Dickey
Re: Clarification: Two items that are hard to digest... Matt Kettler
Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Chris Reid
Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Matt Kettler
generating an alert Rick S.
Upgrade snort 1.9.1 to 2.0 on Linux 8 (No alerts) Sudhakar Gummadi
RE: Upgrade snort 1.9.1 to 2.0 on Linux 8 (No alerts) Michael Steele
RE: generating an alert Michael Steele
RE: generating an alert Rick S.
Re: "Saving State" in Snort Michael L. Artz
Benchmarking snort Michael L. Artz
Re: Benchmarking snort Bennett Todd

Friday, 18 April

Re: Securing a Snort machine Saad Kadhi
Performance Bottleneck Daniel R. Miessler
snort 2.x.x RPM Michael Mansour
Re: Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? Rich Adamson
time problem TAYLAN KIRAN
(spp_stream4) TTL LIMIT Exceeded John Hally
Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Martin Roesch
Re: time problem Matt Kettler
Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Erick Mechler
Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Kevin J. Schmidt
Upgrade, 1.8.6->2.0.0rc5 - new version won't alert to syslog? (fwd) Glenn Forbes Fleming Larratt
strange behavior with ACID Slighter, Tim
Re: MySql-Acid logging Rolf Brusletto
RE: MySql-Acid logging Michael Steele
MySql-Acid logging Cilin
Re: MySql-Acid logging Shawn Duffy
Re: SNMP plugin removed from Snort + stream4 patch for 1.9.1 Jose Vicente Nunez Zuleta
RH8 + Snort 2.0.0 Segmentation Fault on startup James Garrison
Re: RH8 + Snort 2.0.0 Segmentation Fault on startup James Garrison
Attention Windows Users : Install Complete IDS Solution on Windows - New Updates! Michael Steele
historical records of Snort logs? Ryan Finnesey
Snort 2.0.0 RPMs? Ty Bodell

Saturday, 19 April

Re: snort 2.x.x RPM (Michael Mansour) Ralf Spenneberg
multiple files off of stdin? Michael L. Artz
Re: historical records of Snort logs? Paul Schmehl
snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Mike Chandler
Re: multiple files off of stdin? Phil Wood
RE: historical records of Snort logs? Toby Miller
RE: snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Paul D. Shaffer
RE: snort: relocation error: /usr/lib/libmysqlclient.so.10 symbol error with Redhat 9 Mike Chandler
Re: multiple files off of stdin? Michael L. Artz
Re: historical records of Snort logs? Skip Carter
Snort and MySQL - Do they benefit from multiple processors ??? Daniel R. Miessler
PureSecure using Snort 2.x now... Daniel R. Miessler
RE: PureSecure using Snort 2.x now... Robert Reid

Sunday, 20 April

Sample Pass rules Always Bishan
Snort Security ? How to ? Always Bishan
Pass rule not passing preprocessors Always Bishan
Snort 2.0 dropping packets Always Bishan
Byte_jump & byte_check mjanssens
Re: Snort Security ? How to ? d_greenjr
Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Ian S. Nelson
new features of snort 2.0 fa007883
Snort 2.0.0 upgraded failed miserably Bill Frische
Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Roman Danyliw
Re: Pass rule not passing preprocessors Bennett Todd
Re: Snort 2.0 dropping packets Bennett Todd
mrtg machine Ben Whittaker
Re: Snort 2.0 dropping packets Edin Dizdarevic
detecting http-tunnel traffic Derya Sezen
iptables vs snort vs portsentry order Sonia Hamilton

Monday, 21 April

BPF filter Liuhy
Re: BPF filter Chris Reid
snort -r output Tay Chee Yong
Re: BPF filter Edin Dizdarevic
Re: New stream 4 messages in 2.0 Chris Green
Re: Snort 2.0 dropping packets Gary Flynn
Re: How to handle BPDU packet in Snort? Chris Green
Re: A little pass rule help Chris Green
Re: snort rules flow option Chris Green
Re: Pass rule not passing preprocessors Chris Green
Re: New stream 4 messages in 2.0 (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: How to handle BPDU packet in Snort? (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: New stream 4 messages in 2.0 (test) Alex Polevoy
Re: A little pass rule help (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: Cert Advisory and now no SNMP traps. Chris Green
threaded Matt Schillinger
Re: Cert Advisory and now no SNMP traps. (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: Pass rule not passing preprocessors (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: snort rules flow option (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: Re: [Snort-users] SNMP plugin removed from Snort + stream4 patch for 1.9.1 Kevin J. Schmidt
Rule help Please Ben Whittaker
RE: mrtg machine Slighter, Tim
Re: Snort 2.0 dropping packets Bennett Todd
RE: New stream 4 messages in 2.0 Slighter, Tim
Re: Snort 2.0 dropping packets Neil Dickey
RE: Acid slowness francisv
Problems with ACID Slighter, Tim
Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes
Re: snort -r output John Sage
Re: Installing Snort with PHP, MySQL, ACID,etc David Alonso De La Vega Tapage
Re: Snort on Wireless Chris Green
Re: "Saving State" in Snort Chris Green
Snort 2.0 and Barnyard 0.1.0 Francis Vidal
Re: "Saving State" in Snort (Absent jusqu'au 29/07/2002) Pascal Painparay
Re: Snort on Wireless (Absent jusqu'au 29/07/2002) Pascal Painparay
RE: Installing Snort with PHP, MySQL, ACID,etc Slighter, Tim
Snort on an Voice over IP Network Snow Jacob C KPWA
Re: Snort on Wireless Bennett Todd
snort 2.0.0 with mysql .. David Alonso De La Vega Tapage
Re: Installing Snort with PHP, MySQL, ACID,etc David Alonso De La Vega Tapage
ERROR: Please activate spp_conversation before trying to activate spp_portscan2 Kit Massengill
Re: ERROR: Please activate spp_conversation before trying to activate spp_portscan2 Neil Dickey
RE: snort 2.0.0 with mysql .. Slighter, Tim
Re: Snort 2.0 dropping packets Edin Dizdarevic
Re: snort 2.0.0 with mysql .. David Alonso De La Vega Tapage
re: snort 2.0.0 with mysql Mike Chandler
Re: How to handle BPDU packet in Snort? twig les
RE: Installing Snort with PHP, MySQL, ACID,etc Slighter, Tim
Re: snort -r output twig les
Re: Alert file exceeds 2GB Erek Adams
Newbie question Chris
Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage
Re: Where's Waldo^H^H^H^H^HErek Erek Adams
Re: Re: Where's Waldo^H^H^H^H^HErek David Alonso De La Vega Tapage
Re: Pascal Painparay [pascal.painparay () tdf fr] Slighter, Tim
Re: Newbie question Erick Mechler
Re: Newbie question (FAQ 4.3 update requested) Matt Kettler
Re: Re: Pascal Painparay [pascal.painparay () tdf fr] Matt Kettler
Re: Snort 2.0 dropping packets Bennett Todd
preprocessor definition in snort manual!?!?!? Derya Sezen
Re: snort -r output (Absent jusqu'au 29/07/2002) twig les
snort breakdown Hanumantha R. Manchala
Updated Snort Enterprise Implementation Guide Steven J. Scott
Re: preprocessor definition in snort manual!?!?!? Matt Kettler
Re: snort 2.0.0 with mysql Mike Chandler
Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage
Define sealth eth0 David Alonso De La Vega Tapage
unscribe BENZ LEE
Re: snort breakdown Bennett Todd
Re: Problems with ACID Marc Spitzer
Re: Installing Snort with PHP, MySQL, ACID,etc Patrick S. Harper

Tuesday, 22 April

flexresp problem Reet
Re: flexresp problem Muenz, Michael
snot Jill Tovey
Re: Acid slowness Dusty Hall
Re: flexresp problem Reet
Re: flexresp problem Muenz, Michael
Re: flexresp problem Reet
Re: Installing Snort with PHP, MySQL, ACID,etc Patrick S. Harper
snort + email + alert Mario Karcevski
Strange ICMP Log Ron Shuck
Re: snort 2.0.0 with mysql Mike Chandler
Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage
Snort DB schema for Postgresql has wrong data type "datetime" Roberto Suarez Soto
snort 2 / mysql / static/ undefined reference to uncompress Mike Caughran
Re: Snort on Wireless Brent Wrisley
Re: Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes
Fuzzy Matching in Snort Thoplaop
Re: Snort 2.0 and Barnyard 0.1.0 Andrew R. Baker
Re: Installing Snort with PHP, MySQL, ACID,etc Gary and El Byrnes
smb alerts Chris
Invalid Iterface... Mohammad Alimohammadi
Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi
SNMP? larosa, vjay
Re: snort 2 / mysql / static/ undefined reference to uncompress David Alonso De La Vega Tapage
Re: German Book covering Snort Ralf Spenneberg
RE: Invalid Iterface with snort 2.0.0... Michael Steele
RE: Invalid Iterface... L. Christopher Luther
RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther
Kazaa P2P Rules Allan Dover
Re: snort + email + alert Matt Kettler
RE: Invalid Iterface... Mohammad Alimohammadi
re: snort 2.0.0 with mysql David Powell
Re: Kazaa P2P Rules Sam Evans
RE: Invalid Iterface... Michael Steele
re: snort 2.0.0 with mysql twig les
RE: Invalid Iterface... L. Christopher Luther
RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi
RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther
Snort 2.0 as a Windows Service?? kerberos K
RE: Invalid Iterface with snort 2.0.0... Mohammad Alimohammadi
Re: Snort Security ? How to ? {correctios} d_greenjr
RE: Snort 2.0 as a Windows Service?? Uhte, Russ
Re: snort 2.0.0 with mysql David Alonso De La Vega Tapage
RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther
snort/syslog/Win2k Julian Brown
Re: Invalid Iterface with snort 2.0.0... Chris Reid
options for consideration Slighter, Tim
RE: snort/syslog/Win2k Michael Steele
RE: snort/syslog/Win2k Julian Brown
RE: Snort 2.0 as a Windows Service?? Michael Steele
RE: Invalid Iterface with snort 2.0.0... Michael Steele
FW: Strange ICMP Log Ron Shuck
RE: Invalid Iterface with snort 2.0.0... Michael Steele
RE: snort/syslog/Win2k L. Christopher Luther
RE: Snort 2.0 as a Windows Service?? kerberos K
new user, great product, but ... Allen, Garrett
RE: Invalid Iterface with snort 2.0.0... L. Christopher Luther
RE: options for consideration L. Christopher Luther
Re: new user, great product, but ... twig les
snort logs timestamp Romildo Wildgrube
RE: new user, great product, but ... Allen, Garrett
RE: new user, great product, but ... twig les
Re: new user, great product, but ... Michael Anderson
Re: new user, great product, but ... Neil Dickey
RE: Portscan2 ignorehosts L. Christopher Luther
RE: portscan target filter ? L. Christopher Luther
Re: Invalid Iterface... Thomas Schweikle
RE: new user, great product, but ... Allen, Garrett
RE: Snort 2.0 and Barnyard 0.1.0 Francis Vidal
RE: MySql-Acid logging Elvira_Byrnes
RE: Securing a Snort machine Elvira_Byrnes
plz help smitha rao
RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Elvira_Byrnes

Wednesday, 23 April

Snortcenter 1.0 + Snort 2.0 Michael
RE: Newbie question Potts, Ross A.
upgrade Rajagopal, Sriram(TSD)
RE: Snort 2.0 as a Windows Service?? Erek Adams
RE: Problem with Snort 2.0.0 and MySQL Client with Redhat 9 Patrick S. Harper
Re: plz help Tantravahi Venkata Aditya
Taking out the traffic on ports 22 and 443 suggestive? Edin Dizdarevic
Re: snort logs timestamp Roman Danyliw
Strange Alerts Brett . Gillett
RE: Snort 2.0 as a Windows Service?? Uhte, Russ
Re: options for consideration Allan Dover
Re: snort 2 / mysql / static/ undefined reference to uncompress Mike Caughran
HTTP traffic not being scanned after upgrade from 1.9.1 to 2.0.0 Kevin Van Der Hart
Re: SNMP? Glenn Mansfield Keeni
Re: upgrade Neil Dickey
Re: Strange Alerts Neil Dickey
Re: Taking out the traffic on ports 22 and 443 suggestive? Erek Adams
RE: Snort 2.0 as a Windows Service?? Michael Steele
Re: Taking out the traffic on ports 22 and 443 suggestive? Edin Dizdarevic
Re: HTTP traffic not being scanned after upgrade from 1.9.1 to 2.0.0 Erek Adams
Re: Taking out the traffic on ports 22 and 443 suggestive? Alberto Gonzalez
Protocol/Service/Source Bytes/Dest bytes needed Malcolm Rodgers
RE: Snort 2.0 as a Windows Service?? Michael Steele
RE: Snort 2.0 as a Windows Service?? Uhte, Russ
Barnyard writing cleartext MySQL-password to /var/log/messages!!! Edin Dizdarevic
Re: Strange Alerts Artur Bittencourt
Re: Strange Alerts Neil Dickey
RE: Snort 2.0 as a Windows Service?? Erek Adams
RE: Snort 2.0 as a Windows Service?? Erek Adams
Re: Strange Alerts Erek Adams
Re: plz help Matt Schillinger
Re: Strange Alerts Brett . Gillett
Re: Strange Alerts David Alonso De La Vega Tapage
Re: Protocol/Service/Source Bytes/Dest bytes needed Bamm Visscher
RE: portscan target filter ? L. Christopher Luther
swatch alternatives? Chris
RE: Strange Alerts Allen, Garrett
RE: swatch alternatives? Nelson, Ben
Recall: Question about Snort/ACID/MySQL and how they play togethe r Snow Jacob C KPWA
Re: portscan target filter ? Charles Gillet
Question about Snort/ACID/MySQL and how they play together Snow Jacob C KPWA
RE: SNMP? larosa, vjay
Question about Snort/ACID/MySQL and how they play together Snow Jacob C KPWA
RE: swatch alternatives? Slighter, Tim
RE: Question about Snort/ACID/MySQL and how they pl ay together L. Christopher Luther
Re: multiple files off of stdin? Chris Green
Re: swatch alternatives? Jim Prewett
Re: Snort 2.0 Upgrade - Sensor is very chatty Brett . Gillett
Snort 2.0 Upgrade - Sensor is very chatty Pacheco, Michael F.
FW: Snort 2.0 Upgrade - Sensor is very chatty Pacheco, Michael F.
Snort not seeing all traffic? Patrick Jones
chroot problems with Red Hat Advanced server Chapman, Justin T
Relation between events and rules set. Julio Jaime
RE: Justin Chapman Sanderson, Josh
RE: Snort 2.0 as a Windows Service?? Michael Steele
home_net and ext_net question Mike Zupan
Re: snort logs timestamp Erek Adams
Re: home_net and ext_net question Neil Dickey
Too little traffic being seen! Adrian . Mink
RE: home_net and ext_net question L. Christopher Luther
Re: new user, great product, but ... Erek Adams
Re: Snort not seeing all traffic? Matt Kettler
Fixed My Problems with Snort 2.0.0 and MySQL Client with Redhat 9 Mike Chandler
[Fwd: Snort <=1.9.1 exploit] Jose Vicente Nunez Z
RE: chroot problems with Red Hat Advanced server Chapman, Justin T
Re: Strange Alerts Brett . Gillett
Re: Too little traffic being seen! Matt Kettler
Re: Too little traffic being seen! John Sage
Re: Relation between events and rules set. John Sage
WARNING: Not IPv4 datagram! Jeremia d.
Only Smtp traffic Sh J
upgrading snort version Rajagopal, Sriram(TSD)
RE: Question about Snort/ACID/MySQL and how they play together Michael Steele
Snort v2 rule order help (long) JP Vossen
Re: chroot problems with Red Hat Advanced server Charles Philip Chan

Thursday, 24 April

tag keyword for TCP sessions Emmanuel Dardaine
portscan preprocessor and scan rules Fabrizio Tivano
Problem logging to postgres Roger D. Vargas
Re: Question about Snort/ACID/MySQL and how they play together Erek Adams
Re: Only Smtp traffic Chris Green
Fw: problem with snort inline -unknown option -Q parikshit
RE: Snort not seeing all traffic? PJ-ML
Re: upgrading snort version David Alonso De La Vega Tapage
Hogwash x Redhat Luiz Alberto Cataldo Jr
RE: Problem logging to postgres Emmanuel Dardaine
Re: Snort not seeing all traffic? Erick Mechler
SnortSam Firewall Port Lance Worthington
Re: Snort not seeing all traffic? PJ
RE: Too little traffic being seen! Adrian . Mink
Re: Snort not seeing all traffic? Erick Mechler
search method lowmem Gerhard Brauer
Re: Taking out the traffic on ports 22 and 443 suggestive? Brian
RE: Problem logging to postgres Roger D. Vargas
Re: SnortSam Firewall Port Frank Knobbe
[ANN] HenWen 2.0! Nick Zitzmann
RE: Problem logging to postgres Frank Knobbe
Mike Sands/ITS/Element K is out of the office. Mike_Sands
VPN and UDP alerts Allan Dover
Re: Taking out the traffic on ports 22 and 443 suggestive? Brian
Re: search method lowmem Chris Green
RE: Problem logging to postgres Frank Knobbe
segmentation fault... Filipe Dantas
RE: chroot problems with Red Hat Advanced server Chapman, Justin T
Re: Snort not seeing all traffic? PJ
snort 2.0.0 on Tru64 5.1 Darryl Cook
Port for MYsql David Alonso De La Vega Tapage
RE: Fw: problem with snort inline -unknown option - Q Slighter, Tim
RE: Relation between events and rules set. Julio Jaime
RE: WARNING: Not IPv4 datagram! Petriz, Pablo
Win32 Misconfiguration Julian Brown
Re: Relation between events and rules set. David Alonso De La Vega Tapage
Question about Snort/ACID/MySQL and portscans Snow Jacob C KPWA
RE: Relation between events and rules set. bmcdowell
RE: Win32 Misconfiguration Michael Steele
RE: Question about Snort/ACID/MySQL and portscans Michael Steele
Mike Sands/ITS/Element K is out of the office. Mike_Sands
RE: Relation between events and rules set. Julio Jaime
RE: Relation between events and rules set. Julio Jaime
RE: home_net and ext_net question Everist, Benjamin S. (NASWI)
Re: Relation between events and rules set. David Alonso De La Vega Tapage
RE: home_net and ext_net question Matt Kettler
OT - Spam bmcdowell
Re: OT - Spam Matt Kettler
Re: OT - Spam mikem
PHP install David Powell
stream4 reassembly seems to lose last packet Daniel OKeefe
Re: chroot problems with Red Hat Advanced server Charles Philip Chan
Re: OT - Spam JP Vossen
Re: Snort not seeing all traffic? Erick Mechler
Re: Fw: problem with snort inline -unknown option -Q parikshit
Re: Fw: problem with snort inline -unknown option -Q parikshit

Friday, 25 April

Automatic Update of the Rule-base using SnortCenter Atul Shrivastava
Test data logs available? Shwaine
AW: Test data logs available? Poppi, Sandro
pass rule Gosswiler Bjoern
spp_portscan / unknown IP Gosswiler Bjoern
AW: pass rule Poppi, Sandro
Snort Rules Bajamundi, Ricardo P
swatch alternatives - sec raft na
No longer seeing exploit traffic on version 2.0.0 Lloyd_Ardoin
snort 2.0.0 on Tru64 5.1 Darryl Cook
OT: list archives and e-mail addresses (Re: OT - Spam) Andrew R. Baker
Netbios rules and keeping snort quiet about them ;) James Nonya
Re: snort rules flow option Brian
snmp support under rh 8 Roger D. Vargas
RE: Problem logging to postgres Roger D. Vargas
segmantation fault Filipe Dantas
Re: swatch alternatives? Andreas Östling
Re: snort + email + alert Patrice . Arnal
what is rstatd? Shashank Bhide
RE: Problem logging to postgres Frank Knobbe
Re: OT - Spam Julian Brown
RE: Problem logging to postgres Roger D. Vargas
snort -A unsock feature Yuri Leikind
RE: Problem logging to postgres Hutchinson, Andrew
RE: Problem logging to postgres Roger D. Vargas
RE: Question about Snort/ACID/MySQL and portscans Slighter, Tim
RE: Fw: problem with snort inline -unknown option - Q Slighter, Tim
RE: home_net and ext_net question L. Christopher Luther
RE: Problem logging to postgres Frank Knobbe
is there a 2.0 build that is mysql compatible Allen, Garrett
RE: Problem logging to postgres Roger D. Vargas
RE: home_net and ext_net question Matt Kettler
Re: what is rstatd? Matt Kettler
RE: home_net and ext_net question L. Christopher Luther
Re: VPN and UDP alerts Neil Dickey
RE: Problem logging to postgres Roger D. Vargas
RE: Problem logging to postgres Frank Knobbe
RE: home_net and ext_net question Neil Dickey
RE: is there a 2.0 build that is mysql compatible David Markle
Re: OT - Spam Thomas Templin
RE: VPN and UDP alerts Slighter, Tim
Newbie Question Wilcoxen, Scott
RE: Question about Snort/ACID/MySQL and how they play together Michael Steele
RE: OT - Spam Michael Steele
Allow me to field a question Slighter, Tim
RE: Problem logging to postgres Frank Knobbe
RE: MySQL & ACID Issues Slighter, Tim
RE: Newbie Question Pacheco, Michael F.
Re: snmp support under rh 8 Florin Andrei
RE: Relation between events and rules set. Julio Jaime
Book soon available Slighter, Tim
RE: home_net and ext_net question Matt Kettler
It worked! Roger D. Vargas
FreeBSD-5 / Snort 2.0 Installation Document David Markle
Re: snmp support under rh 8 Roger D. Vargas
Snort (any version) with Barnyard logging payload in hex Edin Dizdarevic
RE: Question about Snort/ACID/MySQL and how they pl ay together L. Christopher Luther
Mysql question jared
Re: Relation between events and rules set. David Alonso De La Vega Tapage
RE: Mysql question David Markle
Re: VPN and UDP alerts Neil Dickey
Re: snmp support under rh 8 Florin Andrei
RE: Mysql question David Markle
Re: Book soon available twig les
Hi Im new to Snort and I keep getting wierd errors....please help ! Gill, Rob
Re: Hi Im new to Snort and I keep getting wierd errors....please help ! Matt Kettler
A Friday afternoon hoho Michael Northup
RE: Question about Snort/ACID/MySQL + Barnyard and how they play together Matt Yackley
RE: is there a 2.0 build that is mysql compatible JP Vossen

Saturday, 26 April

trying snort as nids of prelude smitha rao
setting up a mirroring port at switch smitha rao
snort architecture... Mohammad Alimohammadi
RE: setting up a mirroring port at switch Matt Yackley
Re: setting up a mirroring port at switch d_greenjr
Snort 2.0 isn't alerting Lloyd_Ardoin
(snort_decoder): Truncated Tcp Options Jason Beveridge
snort.conf problems stormshadow
Is there a program to test snort rules? Joe Horton
RE: Is there a program to test snort rules? Michael Steele
Re: snort architecture... twig les
Barnyard Shell Script Jason Linden

Sunday, 27 April

Re: (snort_decoder): Truncated Tcp Options MH
Barnyard Shell Script Jason Linden
RE: snort.conf problems L. Christopher Luther
unsubscribe Lieberg, Mark
Re: Snort 2.0 isn't alerting John Sage
what does this command do? stormshadow
Need Help Installing snort on OpenBSD JOE & ANGIE
Snort and Bastille Linux Elvira_Byrnes
RE: Newbie Question Wilcoxen, Scott
log file Tom Murdock

Monday, 28 April

Re: Need Help Installing snort on OpenBSD MH
Re: Need Help Installing snort on OpenBSD Andy Sutton
Demarc Bart Decker (DCS)
Re: Demarc (Bart Decker (DCS) (Snort-users digest, Vol 1 #3115 - 5 msgs) Ralf Spenneberg
RE: what does this command do? L. Christopher Luther
Re: Is there a program to test snort rules? Paul B. Poh
Flex Resp Is Resetting The Wrong Port Andy Wood
Tutorial on Bpf filters Always Bishan
Realtime alerts Always Bishan
Firewall vs IDS Always Bishan
Automated snort tuner Always Bishan
Snort upgrade from 1.9.1 to 2.0.0 Lloyd_Ardoin
Re: Book soon available Chris Green
Re: No longer seeing exploit traffic on version 2.0.0 Chris Green
New Release of snort_inline! Rob McMillen
Re: VPN and UDP alerts Allan Dover
newbie question on Stream4 preprocessing - missing last packet Dan O'Keefe
RE: Is there a program to test snort rules? Brian Laing
RE: Book soon available Slighter, Tim
Re: Snort upgrade from 1.9.1 to 2.0.0 Neil Dickey
Re: Firewall vs IDS Neil Dickey
Looking for opinions... Wilcoxen, Scott
Re: Tutorial on Bpf filters Edin Dizdarevic
RE: Looking for opinions... L. Christopher Luther
postgres schema error Martin A. Brooks
Snort-inline Slighter, Tim
RE: Firewall vs IDS Brian M. Diehl
Re: postgres schema error Frank Knobbe
one other item Slighter, Tim
Re: Tutorial on Bpf filters twig les
Re: postgres schema error Martin A. Brooks
how to get snort to ignore kazaa peter moody
Stumped larosa, vjay
Net_SSLeay updated Makefile.PL for RH9 David Powell
No memory error Sutton, Andrew
RE: Stumped larosa, vjay
RE: Stumped Friesz, Ross
Re: Automated snort tuner Bennett Todd
Re: Automated snort tuner Matt Kettler
false alarm with snort 2.0, why? Holger Marzen
RE: No memory error SRH-Lists
Re: Tutorial on Bpf filters MH
RE: No memory error Sutton, Andrew
Noob question about different parts of a rule stormshadow
Re: Net_SSLeay updated Makefile.PL for RH9 David T Hollis
RE: Noob question about different parts of a rule Schmehl, Paul L
Re: Noob question about different parts of a rule Matt Kettler
RE: Noob question about different parts of a rule L. Christopher Luther
Re: false alarm with snort 2.0, why? Matt Kettler
Re: Snort (any version) with Barnyard logging payload in hex Andrew R. Baker
Re: Barnyard Shell Script Andrew R. Baker
Making snort smarter... Tobias Rice
Re: Making snort smarter... Paul Schmehl
Trouble with pass rule Carl
log the content Derya Sezen
RE: Need Help Installing snort on OpenBSD Andy Sutton
Alert.ids log file not being created Michael Steele

Tuesday, 29 April

Re: setting up a mirroring port at switch smitha rao
Re: false alarm with snort 2.0, why? Holger Marzen
Re: Making snort smarter... Jason Haar
false alarm or not ? Liuhy
Re: Firewall vs IDS Simon Gray
Snort 2.0.0 & syslog MLH
Re: Snort 2.0.0 & syslog Simon Gray
(spp_conversation) Bad IP protocol Mike Koponick
Disabling two alert messages Jukka Juslin
FW: Not logging to MYSQL Jeremy Campbell
Alert.ids log file not being created Michael Steele
Difference between distance and within Madhu Joshi
Setting up snort to syslog diffrent priority's Jason A. Kates
New to Snort Yijia_Zhou
Disabling two alert messages Jukka Juslin
Re: Snort 2.0.0 & syslog MLH
Not logging to MYSQL Jeremy Campbell
sidestep Jill Tovey
RE: Barnyard Shell Script Jason Linden
Re: Not logging to MYSQL Snort-users digest, Vol 1 #3122 - 13 msgs Ralf Spenneberg
Re: Alert.ids log file not being created Snort-users digest, Vol 1 #3122 - 13 msgs Ralf Spenneberg
XML output support for snort 2.0 David Stubblefield
Re: VPN and UDP alerts Allan Dover
RE: Alert.ids log file not being created Snow Jacob C KPWA
Re: Disabling two alert messages Erick Mechler
Re: Difference between distance and within Erick Mechler
Re: Not logging to MYSQL Erick Mechler
RE: log the content Snow Jacob C KPWA
RE: No memory error Erek Adams
Snort 2.0.0 logging everything when using (session: printable) McKim, Tim
Re: Making snort smarter... Paul Schmehl
RE: VPN and UDP alerts SRH-Lists
Re: segmantation fault Erek Adams
Re: Trouble with pass rule Neil Dickey
RE: Alert.ids log file not being created Michael Steele
RE: Setting up snort to syslog diffrent priority's L. Christopher Luther
Re: sidestep Matt Kettler
RE: Making snort smarter... Paul Schmehl
Re: segmantation fault Filipe Dantas
Re: Setting up snort to syslog diffrent priority's Erek Adams
RE: Making snort smarter... bmcdowell
Re: Trouble with pass rule Carl
RE: Making snort smarter... bmcdowell
re: Snort 2.0.0 logging everything when using (session:printable) Gary Flynn
RE: Making snort smarter... Paul Schmehl
php is too old !?!? Filipe Dantas
Frag Preprocessor Preventing Log Parsing Gary Flynn
Re: php is too old !?!? David Alonso De La Vega Tapage
porno rules Bryan Irvine
Re: php is too old !?!? Filipe Dantas
Re: php is too old !?!? David Alonso De La Vega Tapage
Question on /var/log/snort directory stormshadow
RE: php is too old !?!? SRH-Lists
Re: porno rules Matt Kettler
Re: Question on /var/log/snort directory Neil Dickey
catch the http-tunnel traffic with snort Derya Sezen
RE: porno rules [OT] bmcdowell
Snort Filtering Michale
Re: Making snort smarter... Jason Haar
Re: Making snort smarter... Jason Haar
Re: porno rules Neil Dickey
Re: porno rules Matt Kettler
Re: Question on /var/log/snort directory Matt Kettler
Re: Snort Filtering Neil Dickey
RE: Snort Filtering L. Christopher Luther
Re: porno rules -- portscan2 &c Neil Dickey
Re[2]: Snort Filtering Michale
Re: Snort Filtering Matt Kettler
Re: porno rules Bryan Irvine
RE: Question on /var/log/snort directory Slighter, Tim
Re: Re[2]: Snort Filtering twig les
OT: Drinking game - Content filter replies? Matt Kettler
Broken config directive? or just me? Sam Evans
Re: Re[2]: Snort Filtering Neil Dickey
APPLET catching Derya Sezen
Re: porno rules -- portscan2 &c Skip Carter
False positives due to stream4 issue? Jason Haar
Re: Making snort smarter... JP Vossen
Re: Broken config directive? or just me? Matt Kettler
Re: porno rules Bryan Irvine
Re: False positives due to stream4 issue? Matt Kettler
Re: portscan2 effectiveness. Matt Kettler
Installing Snort2.0 w/ MySQL support snort
regex support problem Derya Sezen
Re: False positives due to stream4 issue? Jason Haar
Re: regex support problem Matt Kettler
Re: OT: Drinking game - Content filter replies? Skip Carter
Re: porno rules Matt Kettler
Re: Making snort smarter... Jason
Role of snort.conf regarding rules? (noob) stormshadow

Wednesday, 30 April

Unable to open rules file: snort.conf error stormshadow
Re: Unable to open rules file: snort.conf error d_greenjr
Re: Snort 2.0.0 & syslog MLH
Re: Broken config directive? or just me? Chris Green
Re: Snort 2.0.0 & syslog (solved) Hubert Adgié
Quick(noob) question on rules. Role of snort.conf? Ryan C. Sebastian
snort 2.0.0 under visual C++ Ronan Horgan
RE: php is too old !?!? Filipe Dantas
RE: Quick(noob) question on rules. Role of snort.co nf? Bruyere, Michel
Can snort add a rule to iptables? Eduardo Faria
Re: portscan2 effectiveness. Neil Dickey
Re: Snort 2.0 isn't alerting Glenn Forbes Fleming Larratt
Re: OT: Drinking game - Content filter replies? Erek Adams
Re: Role of snort.conf regarding rules? (noob) Erek Adams
RE: Quick(noob) question on rules. Role of snort.co nf? L. Christopher Luther
Re: snort 2.0.0 under visual C++ Erek Adams
Re: Unable to open rules file: snort.conf error Erek Adams
Re: Can snort add a rule to iptables? Erek Adams
RE: Role of snort.conf regarding rules? (noob) L. Christopher Luther
RE: re: Snort 2.0.0 logging everything when using ( session:printable) McKim, Tim
Re: OT: Drinking game - Content filter replies? Matt Kettler
Re: porno rules [OT] David Alonso De La Vega Tapage
Re: snort 2.0.0 under visual C++ Chris Reid
Re: Difference between distance and within Brian
sql.rules and instanat messenging James Nonya
Snort 2.0 changes? Joseph Gresham
Re: Installing Snort2.0 w/ MySQL support David Alonso De La Vega Tapage
Sid 466 David Powell
Re: Can snort add a rule to iptables? Matt Kettler
RE: Installing Snort2.0 w/ MySQL support SecurityAdmin
Re: Snort 2.0 changes? Demetri Mouratis
Wrong port numbers - Snort or ACID bug - how to fix? Jerry . L . Rose
Help with Hogwash on OpenBSD JOE & ANGIE
Re: Sid 466 Matt Kettler
Re: Sid 466 Erick Mechler
Re: Help with Hogwash on OpenBSD Matt Kettler
Snort 2.0 not logging any alerts stormshadow
Email for Michael Steele - Please redirect - Read Inside Michael Steele
Re: Snort 2.0 not logging any alerts Matt Kettler

Thursday, 01 May

RE: Wrong port numbers - Snort or ACID bug - how to fix? Semerjian, Ohanes
RE: Sid 466 Semerjian, Ohanes
Acid user security Jason Linden
Promiscuous interface hacks? Paul Schmehl
How config Preprocessor (other than the portscan PP) to ignore c ertain hosts? Brad . Watkins
SQL ALert Logging Wilcoxen, Scott
Re: How config Preprocessor (other than the portscan PP) to ignore c ertain hosts? Erek Adams
Re: Promiscuous interface hacks? Frank Knobbe
Re: Promiscuous interface hacks? Paul Schmehl
RE: Promiscuous interface hacks? Slighter, Tim
snort decoder /dev/null
RE: snort decoder Andy Wood
Rule Order Ron Shuck
Win32, output alert_syslog: host=xxxx broken? JP Vossen
NEWBIE-Using Enterprise Snort document el_wyrm
Re: Win32, output alert_syslog: host=xxxx broken? Rich Adamson
False Positives on POP3 USER & PASS overflow attempt? James M. Driskell
Snort - Logsurfer examples Matt Howell
Re: Promiscuous interface hacks? Matt Kettler
Re: Promiscuous interface hacks? Paul Schmehl
snort_decoder Bryan Irvine
Re: Promiscuous interface hacks? Matt Kettler
Fixed: Win32, output alert_syslog: host=xxxx broken? JP Vossen
Re: Snort - Logsurfer examples Matt Howell
T/TCP resources -- answer for Andy Wood Richard Bejtlich
Re: snort_decoder Erick Mechler
RE: T/TCP resources -- answer for Andy Wood Andy Wood
Re: Promiscuous interface hacks? Frank Knobbe

Friday, 02 May

Re: Promiscuous interface hacks? Carl
Packet Contents using IDS Mode Tay Chee Yong
RE: T/TCP resources -- answer for Andy Wood MH
Re: snort_decoder MH
packet traces to test snort Budi Rahardjo
RE: Rule Order Ron Shuck
Re: Rule Order Allan Dover
Re: packet traces to test snort Erek Adams
Re: Promiscuous interface hacks? Paul Schmehl
Re: Promiscuous interface hacks? Paul Schmehl
RPC + snort Jill Tovey
Anyone know of a Snort signature for the Deborm worm? Gill, Rob
Portscan2 woes Robin Brown
What NICs are people using? Gordon Cunningham
FW: Portscan2 woes Gavin Lowe
Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS)
Archieving Snort Data - Best time David Alonso De La Vega Tapage
Re: What NICs are people using? Terence Runge
Re: Snort with DHCP Erek Adams
RE: What NICs are people using? Gordon Cunningham
Lightweight Intrusion Detection for Networks paper Phillip Lynn
Re: Portscan2 woes Matt Kettler
Re: What NICs are people using? Terence Runge
Re: Snort with DHCP David Alonso De La Vega Tapage
RE: Sid 466 (Semerjian, Ohanes) David Powell
FW: Portscan2 woes Robin Brown
RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS)
RE: Snort with DHCP Erek Adams
RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS)
Re: Portscan2 woes Erek Adams
Re: Lightweight Intrusion Detection for Networks paper Erek Adams
RE: Snort with DHCP Erek Adams
RE: Snort with DHCP Sadanapalli, Pradeep Kumar (MED, TCS)

Saturday, 03 May

RE: What NICs are people using? JP Vossen
RE: Snort with DHCP Erek Adams
snort 2.0 on redhat 9.0 Anthony Watters
Re: snort 2.0 on redhat 9.0 Patrick S. Harper

Sunday, 04 May

Merging Snort capture files (take 2) JP Vossen
Snort 1.9.1 logging to mysql 3.23 ERROR Ron Hartmann
What are the possible search-method directives? JP Vossen

Monday, 05 May

Re: What are the possible search-method directives? Erek Adams
snort 2.0: is icmp type missing from syslog format? Michael Scheidell
ssp_conversion BAD IP protocol, why? Mike Koponick
snort v2.0 logging to mysql database Semerjian, Ohanes
Re: packet traces to test snort snort-users-admin
Re: ssp_conversion BAD IP protocol, why? Erek Adams
Re: ssp_conversion BAD IP protocol, why? Neil Dickey
Updated install document for RedHat 9 and Snort 2 Patrick S. Harper
Re: snort v2.0 logging to mysql database Erek Adams
http decoding Derya Sezen
ACID Error: Error (p) connecting to DB Paul Pearston
Re: What are the possible search-method directives? JP Vossen
Snort sensor on a Firewall sireesha gaddipati
Send data to MySQL and Alert file Anthony Seung
RE: Send data to MySQL and Alert file Rafeeq Rehman
Re: Send data to MySQL and Alert file Erek Adams
Re: What are the possible search-method directives? Erek Adams
RE: Send data to MySQL and Alert file L. Christopher Luther
Re: Snort - Logsurfer examples Matt Howell
RE: snort 2.0 on redhat 9.0 LAKHANI, AAMIR
RE: Snort sensor on a Firewall Michael Steele
RE: ACID Error: Error (p) connecting to DB Michael Steele
RE: Snort sensor on a Firewall sireesha gaddipati
RE: Snort sensor on a Firewall Rafeeq Rehman
RE: Snort sensor on a Firewall Rafeeq Rehman
Sensor agent in SnortCenter David Powell
SNORT On IIS 6.0 and windows 2003 Enterprise Cory D.
RE: Snort sensor on a Firewall Matt Kettler
RE: ACID Error: Error (p) connecting to DB Paul Pearston
SnortCenter (Php issue-?) Kuriscak, Ronald
RE: ACID Error: Error (p) connecting to DB Slighter, Tim
RE: ACID Error: Error (p) connecting to DB Paul Pearston
RE: ACID Error: Error (p) connecting to DB David Powell
RE: Snort-users digest, Vol 1 #3147 - 3 msgs David Powell
snortcenter question James M. Driskell
Re: What NICs are people using? Bennett Todd
RE: snort 2.0 on redhat 9.0 Patrick S. Harper
Multiple snorts same monitoring point bacolod85
RE: What NICs are people using? Gordon Cunningham
it's a test mail. Liuhy

Tuesday, 06 May

RE: Automated snort tuner - IDEA? Scott, Joshua
unsubscribe <benz=me> [liqs () neusoft com] BENZ LEE
Re: unsubscribe <benz=me> [liqs () neusoft com] BENZ LEE
Portscan Traffic (0%) Gosswiler Bjoern
Re: Sensor agent in SnortCenter Shawn Truax
Re: What NICs are people using? David Alonso De La Vega Tapage
RE: ssp_conversion BAD IP protocol, why? Mike Koponick
Re: Send data to MySQL and Alert file Yijia_Zhou
Re: packet traces to test snort snort-users-admin
RE: snort v2.0 logging to mysql database Semerjian, Ohanes
Re: ACID Error: Error (p) connecting to DB Yijia_Zhou
RE: snort v2.0 logging to mysql database Semerjian, Ohanes
Re: ACID Error: Error (p) connecting to DB David Powell
making a rule for passing data on a source network David Powell
SMTP ETRN overflow attempt NO JUNK MAIL
SNORTCENTER connecting to MySQL!!!! Pedro Cunha
Re: packet traces to test snort snort-users-admin
tcpreplay Hanumantha R. Manchala
Re: SMTP ETRN overflow attempt Matt Kettler
Snort/Linux Newbie Mark Kirkbride
Re: Snort/Linux Newbie Michael Hughes
Re: tcpreplay Matt Kettler
Re: tcpreplay Edin Dizdarevic
Re: tcpreplay Edin Dizdarevic
disable /var/log/snort logging Nick White
Re: disable /var/log/snort logging Anderson Johnston
Re: Snort/Linux Newbie Patrick S. Harper
Rule Type view David Powell
New Snort Book - Snort 2.0 Intrusion Detection Brian Caswell
Re: packet traces to test snort Eric Arnoth

Wednesday, 07 May

test mail Liuhy
Snort 2 inline, demarc -puresecure ? Christophe Zwecker
Solaris/hme problems Paul Carroll
Sourcefire and ACID DeBerry, Casey
problem in setting up snort Anu Raz
RE: tcpreplay Matt Foster
RE: problem in setting up snort L. Christopher Luther
DNS Help/ SID 1948 Everist, Benjamin S. (NASWI)
Apache for snort LAKHANI, AAMIR
Re: Apache for snort David Alonso De La Vega Tapage
Re: {SPAM} Re: unsubscribe <benz=me> [liqs () neusoft com] Matt Kettler
RE: DNS Help/ SID 1948 Vanish Pattni (DSL AK)
RE: DNS Help/ SID 1948 Demetri Mouratis
Re: DNS Help/ SID 1948 Mathias Gygax
RE: DNS Help/ SID 1948 Joesph Bowling
RE: disable /var/log/snort logging Nick White
Re: Apache for snort JP Vossen
RE: disable /var/log/snort logging Joesph Bowling
2 instances of Snort running concurrently Elvira_Byrnes
Sniffer Mode Jeff Jirka
Snort is not seeing all traffic... PJ-ML
RE: disable /var/log/snort logging L. Christopher Luther
RE :2 instances of Snort running concurrently Elvira_Byrnes

Thursday, 08 May

public key Tyler Hudak
error while connecting snort to mysql kamblesantosh
snort 2.0 mysql logging &'s >'s and <'s michaeltone1975
2 instances of Snort running concurrently Elvira_Byrnes
Re: Apache for snort shrek-m () gmx de
Re: disable /var/log/snort logging Bamm Visscher
Re: error while connecting snort to mysql David Alonso De La Vega Tapage
RE: Re: Apache for snort LAKHANI, AAMIR
Snort missing traffic...? PJ-ML
RE: Re: Apache for snort Slighter, Tim
Re: Snort missing traffic...? PJ-ML
RE: disable /var/log/snort logging Nick White
RE: disable /var/log/snort logging Nick White
Perl interpreter for Snort rules / CanSecWest talk Christian Kreibich
RE: disable /var/log/snort logging L. Christopher Luther
[Snort-Users] new to snort and intrusion detection Jonathan Jesse
Re: disable /var/log/snort logging Bamm Visscher
Re: Snort missing traffic...? PJ-ML
RE: [Snort-Users] new to snort and intrusion detection L. Christopher Luther
Redhat 8 John Hally
RE: disable /var/log/snort logging L. Christopher Luther
alert log file name Erik Tank
Re: error while connecting snort to mysql Patrick S. Harper
Re: Snort is not seeing all traffic... PJ-ML
Re: Snort missing traffic...? Rich Adamson
RE: Snort missing traffic...? Ponte, Paul F
Re: Snort is not seeing all traffic... Matt Kettler
RE: disable /var/log/snort logging Nick White
RE: error while connecting snort to mysql Elvira_Byrnes
Re: Snort is not seeing all traffic... Joesph Bowling
Re: Redhat 8 Patrick S. Harper
Re: [Snort-Users] new to snort and intrusion detection Michael Boman

Friday, 09 May

Snortcenter and v2? Kevin Peuhkurinen
Anyone Use 3Com Gigabit Fiber-SX NIC? John Crain
Guardian with Snort - Help Imran Ahmad
Re: Apache for snort shrek-m () gmx de
possible Snort 2.0 bug Shoshin
Re: Snort is not seeing all traffic... PJ-ML
Sigs for MSN Messenger. David Gianndrea
Re: A question about flow:established keyword Risto Vaarandi
Re: A question about flow:established keyword Risto Vaarandi
RE: [Snort-Users] new to snort and intrusion detection Cloppert, Michael
RE: Anyone Use 3Com Gigabit Fiber-SX NIC? Ricardo, Gerson
info cristal_ball
What data does "-A unsock" really send? Emmanuel Guiton
snort-decoder John Hally
RE: Snort agent? Jeronimo Bezerra - Rede/Bol
Re: possible Snort 2.0 bug Matt Kettler
RE: Anyone Use 3Com Gigabit Fiber-SX NIC? John Crain
RE: Anyone Use 3Com Gigabit Fiber-SX NIC? Ricardo, Gerson
Re: What data does "-A unsock" really send? Paul B. Poh
Re: info Patrick S. Harper
Check for NO TCP Flags set? Sheahan, Paul
Re: Check for NO TCP Flags set? MH
Re: Snort is not seeing all traffic... PJ-ML
Re: Check for NO TCP Flags set? Chris Green
Re: Check for NO TCP Flags set? Matt Kettler
RE: Snort agent? Joesph Bowling
Re: Snort is not seeing all traffic... Joesph Bowling
Need recommendations for good books on the security topic Bjørn Rasmussen

Saturday, 10 May

Re: Need recommendations for good books on the security topic Shawn Duffy
Announcing sp_perl Jeff Nathan

Sunday, 11 May

RE: Need recommendations for good books Richard Bejtlich
Re: [Users] Need recommendations for good books on the security topic Haitham
Acid shows sensors as 0 Saquib Khan
Evading IDS Joe Horton
Re: Acid shows sensors as 0 Patrick S. Harper

Monday, 12 May

packets cristal_ball
Logging facilities... peter . grosse-hering
ACID problem: PHP Fatal error: Cannot instantiate non-existent class (adodb) Edin Dizdarevic
Re: AW: ACID problem: PHP Fatal error: Cannot instanti ate non-existent class (adodb) Edin Dizdarevic
Re: [Users] Need recommendations for good books on the security topic Andreas Steffen
Re: [Snort-sigs] Announcing sp_perl Chris Green
Re: ACID problem: PHP Fatal error: Cannot instantiate non-existent class (adodb) David Alonso De La Vega Tapage
snort-decoder John Hally
Tracing certain file requests ... Jon Baer
Accessing SnortCenter LAKHANI, AAMIR
Re: snort-decoder Matt Kettler
RE: Sniffer Mode L. Christopher Luther
RE: Accessing SnortCenter LAKHANI, AAMIR
RE: Accessing SnortCenter Paul Pearston
writing signatures Robert Quenville
RE: writing signatures Matt Nelson
Fizzer Worm Signature Ty Bodell
Bus error on sparc Michael Bell

Tuesday, 13 May

Re: Fizzer Worm Signature Michael Bell
Newbie - log and alert - what is the difference? Jon Paterson
Snort+Real Secure Gustavo Tamae
Newbie Stefan Kohn
Running Acid for the first time Saquib Khan
RE-Announcing sp_perl Brian
signature update Jochen Vogel
Re: Newbie - log and alert - what is the difference? Joerg Weber
Re: Bus error on sparc Michael Bell
Snort 2.0 + mysql, Make problems Mahdi Kefayati
Anyone Using a Compaq/HP ProLiant DL360? John Crain
Question on acid - Rules question Snow Jacob C KPWA
Re: Anyone Using a Compaq/HP ProLiant DL360? Chris Mann
HOWTO Ignore specific IP addresses Michael Parkinson
Re: HOWTO Ignore specific IP addresses Demetri Mouratis
Fizzer Virus Signature Jeremy Junginger
RE: Anyone Using a Compaq/HP ProLiant DL360? Ghercoias, Catalin
Re: Fizzer Worm Signature Hudak, Tyler
Fizzer Virus Signature Jeremy Junginger
RE: Fizzer Virus Signature L. Christopher Luther
Re: HOWTO Ignore specific IP addresses Edin Dizdarevic
RE: HOWTO Ignore specific IP addresses Steven Rudolph
Re: Multiple interfaces? and SNort 2.0 Ueli Kistler
Couldn't resolve hostname HOME_NET Carlos Felix
Question Joe Hdez
Re: Couldn't resolve hostname HOME_NET Neil Dickey
Re: Couldn't resolve hostname HOME_NET Carlos Felix
RE: Couldn't resolve hostname HOME_NET Schmehl, Paul L
RE: Couldn't resolve hostname HOME_NET L. Christopher Luther
Re: HOWTO Ignore specific IP addresses Dragos Ruiu
snmp trap handler Josh Restivo
RE: snmp trap handler larosa, vjay
Questionable snort data downloaded from incidents.org for practical Don Murdoch
MS-SQL ping attempt is illegal or not? sb ch

Wednesday, 14 May

False Alarm - still not solved Holger Marzen
Re: Bus error on sparc Michael Bell
Snort 2.0 + MySQL + SMBalerts question Dirk Stubbs
Re: Bus error on sparc Michael Bell
how to use snort in a switched environment Jeremy Rodriguez
Re: Fizzer Virus Signature Chris Keladis
Re: how to use snort in a switched environment Erek Adams
Re: how to use snort in a switched environment Carlos Felix
Re: how to use snort in a switched environment Les Addison
Re: Bus error on sparc Michael Bell
How to log as ASCII? peter . grosse-hering
Snort on-line detection rate? 方 磊
RE: how to use snort in a switched environment Carlos Felix
RE: Snort 2.0 + MySQL + SMBalerts question L. Christopher Luther
Re: How to log as ASCII? Erek Adams
Re: Snort on-line detection rate? Erek Adams
Snort sensor agent sireesha gaddipati
SnortCenter 1.0-RC1 released larc
Re: how to use snort in a switched environment Matt Schillinger
Re: Snort sensor agent larc
Dangerous to use custom ruletypes? Martin Olsson
RE: Fizzer Virus Signature operator
Re: Dangerous to use custom ruletypes? Erek Adams
Re: Snort sensor agent sireesha gaddipati
Re: Dangerous to use custom ruletypes? Martin Olsson
Re: Dangerous to use custom ruletypes? Neil Dickey
interface initialization d . sherred
Re: interface initialization twig les
Re: how to use snort in a switched environment Carlos Felix
announcing a new spo_xml Roman Danyliw
using snortcenter agents on multiple interface sensor? Horta, Benny
Re: announcing a new spo_xml Roman Danyliw
dump of IPSEC and PPTP dreamwvr () dreamwvr com
SnortCenter v1.0-RC1 David Powell
Re: dump of IPSEC and PPTP Matt Kettler
Re: Fizzer Virus Signature Jason Haar
Re: interface initialization security people
RE: interface initialization David Markle
Rule code Jan van den Berg

Thursday, 15 May

Disabling flow control from command line Roberto Suarez Soto
Re: SnortCenter v1.0-RC1 larc
unsubscribe Black Jack
Snort Alerts Ted Sanft
Hi, Derek Sherred
Snort 2.0.0, Running but no activity. No logging Ilo Lorusso
Re: SnortCenter v1.0-RC1 stefan dens
Re: Hi, Jason Boykin
Re: Hi, Erek Adams
syslog output plugin José M. Fandiño
Switch TAP placement question. Brei, Matt
RE: syslog output plugin L. Christopher Luther
Re: Bus error on sparc Andrew R. Baker
3 questions on rules Garrett . Allen
Snort's config detection: options Ueli Kistler
Re: Switch TAP placement question. Erek Adams
Re: 3 questions on rules Erek Adams
Snort Reporting Tools Vendl, Mark E.
RE: 3 questions on rules Garrett . Allen
Segfault IntelliSTAR Security
RE: 3 questions on rules Erek Adams
Re: Segfault Chris Timmons
Re: Segfault Erek Adams
Re: 3 questions on rules Brian
Re: Snort Reporting Tools Terence Runge
Re: 3 questions on rules Erek Adams
Re: Snort Reporting Tools Jason Boykin
Re: Segfault Chris Timmons
Using RESP with two Eth interfaces Andrew Cogger
Snort MySQL database Elvira_Byrnes
RE: Snort MySQL database Nelson, Ben
RE: Snort MySQL database Elvira_Byrnes
RE: Snort MySQL database Elvira_Byrnes
Re: Using RESP with two Eth interfaces Jeff Nathan
Where is the bottleneck? 方 磊
RE: Where is the bottleneck? Yiming Gong
Snort with MySQL,ACID Elvira_Byrnes
RE: 3 questions on rules Garrett . Allen
Re: Snort with MySQL,ACID operator

Friday, 16 May

RE: Snort with MySQL,ACID Elvira_Byrnes
SnortReport Elvira_Byrnes
Re: Bus error on sparc Michael Bell
Log to database don't work. mnemonic
DB Problem (long lines) Jan Gruber
$HTTP_SERVERS variable Brian.Kiefel
Re: Log to database don't work. Jan Gruber
Log to database don't work. mnemonic
Re: DB Problem (long lines) Jan Gruber
SnortSnarf uses Mike Koponick
Log to DB don't work Dmitri Manushin
Snort Signature Updates Steve An
DB Problem (long lines) Jan Gruber
log to database don't work. dm
Re: Re: [Snort-users] Bus error on sparc Andrew R. Baker
Re: Snort Reporting Tools jeremy chartier
how do you delete a dbase to upgrade snortcenter? Horta, Benny
Re: Log to DB don't work Erek Adams
RE: how do you delete a dbase to upgrade snortcenter? David Markle
Re: Hi, David Alonso De La Vega Tapage
Re: Snort Signature Updates Erek Adams
Who can explain this?where is the bottleneck? rocky
RE: Who can explain this?where is the bottleneck? Ricardo, Gerson
Re: Who can explain this?where is the bottleneck? Edin Dizdarevic
Postgres VS mysql performance Horta, Benny
how would you log failed windows logins etc? Horta, Benny
ACID 1.0 RC1 - Archive Problem Chris Kuivenhoven
IP Header Data Type Preference David Markle
RE: how would you log failed windows logins etc? Gavin Lowe
SID 1549 alerts -- what the heck is this ? Fritsche, Jeff
RE: ACID 1.0 RC1 - Archive Problem Chris
RE: IP Header Data Type Preference L. Christopher Luther
Re: IP Header Data Type Preference Paul B. Poh
Re: SID 1549 alerts -- what the heck is this ? Matt Kettler
Re: IP Header Data Type Preference Brian

Saturday, 17 May

Problem with flow:established Michael Schwartzkopff
ACID' error Tom Murdock
Strange Alert discrepancy reading from log-file Daniel Clark

Sunday, 18 May

can't use the connection after the start of snort payothlh
ignore this payothlh
Re: can't use the connection after the start of snort Javier Liendo
Re: ignore this Patrick S. Harper
Re: can't use the connection after the start of snort payothlh
snort-replay problem-urgent Vaidehi Kasarekar
Re: IP Header Data Type Preference Michael L. Artz

Monday, 19 May

Re: snort-replay problem-urgent Andreas Östling
no longer connection after starting snort jjeux
Snort.conf & stealth mode francesco
can't use the connection after the start of snort jjeux
ACID 1.0 RC1 - Archive Problem Chris Kuivenhoven
can't use the connection after the start of snort jjeux
Rules just don't show up in SNortcenter Matthew McCarty
Re: no longer connection after starting snort Rich Adamson
Tips for using ACID in a mult-admin environment? Williams Jon
Syslog,MySql, IDS Center /Eagle X McBurnett, Jim
Snort output redirection buffered JP Vossen
Re: Syslog,MySql, IDS Center /Eagle X Ueli Kistler
Re: Syslog,MySql, IDS Center /Eagle X Ueli Kistler
RE: Syslog,MySql, IDS Center /Eagle X McBurnett, Jim
Re: Snort output redirection buffered Chris Green
Snort_decoder question Hobgood, Frankie
Alerts and packet capture - MYSQL Snow Jacob C KPWA
ACID displaying 0 Sensors Kuriscak, Ronald
Alerts and packet capture - MYSQL Snow Jacob C KPWA
Re: Alerts and packet capture - MYSQL Erek Adams
Can I do the flow equiv of "Flags:S"? Jason Haar
fnord plugin Michael L. Artz
SnortSnarf Elvira_Byrnes

Tuesday, 20 May

AW: Syslog,MySql, IDS Center /Eagle X Freddie Soerensen
Re: Rules just don't show up in SNortcenter Joerg Weber
Re: AW: Syslog,MySql, IDS Center /Eagle X Ueli Kistler
pb with ports... phelles
Re: Rules just don't show up in SNortcenter Daniel Clark
RE: ACID displaying 0 Sensors Brian Gregorcy
ICMP Ping NMAP troubleshooting Stephen W. Thomas
Re: ICMP Ping NMAP troubleshooting Erek Adams
Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Roy S. Rapoport
RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas
RE: ICMP Ping NMAP troubleshooting Erek Adams
RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas
Re: ICMP Ping NMAP troubleshooting Simon Gray
RE: SnortSnarf Potts, Ross A.
RE: ICMP Ping NMAP troubleshooting Stephen W. Thomas
Re: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Chris Green
RE: ICMP Ping NMAP troubleshooting [snort-users-admin () lists sourceforge net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List] ['snort' in Pass-Through List] Erek Adams
AW: SnortSnarf Poppi, Sandro
Re: pb with ports... payothlh
AW: AW: Syslog,MySql, IDS Center /Eagle X Freddie Soerensen
Re: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC) Roy S. Rapoport
Re: Sigs for MSN Messenger. Brian
Re: Can I do the flow equiv of "Flags:S"? Matt Kettler
RE: Compilation Bug (Solaris 9, Snort 2.0.0, Sun CC ) SRH-Lists
Re: pb with ports... Matt Kettler
Re: pb with ports... Glenn Forbes Fleming Larratt
Trouble Snorting with Multiple Interfaces Travis Rodak

Wednesday, 21 May

Re: Snort & Acid Colin . Slevin
Snort & Acid Colin . Slevin
Snort & Acid Colin . Slevin
error with mysql gaojiang
Re: Trouble Snorting with Multiple Interfaces David Alonso De La Vega Tapage
Newbie looking for help Atkins, Dwane P
Re: Snort & Acid Erek Adams
Re: Re: Snort & Acid Erek Adams
Re: error with mysql Erek Adams
RE: error with mysql Tinsley Paul
Re: Snort & Acid Erek Adams
Re: My Linux libpcap Phil Wood
Acid database lost events, help!!! Brei, Matt
Some help with barnyard needed Nicholas Delo
Re: Some help with barnyard needed Andrew R. Baker
Re: Some help with barnyard needed Erek Adams
RE: Some help with barnyard needed SRH-Lists
RE: Acid database lost events, help!!! Tinsley Paul
is there an ftp site to fetch rules Garrett . Allen
Rule order--almost works? JP Vossen
RE: Acid database lost events, help!!! Brei, Matt
Problem & Solution - Snort binary log file timestamps screwed up Cloppert, Michael
Re: is there an ftp site to fetch rules Jon Baer
RE: Acid database lost events, help!!! Tinsley Paul
Re: is there an ftp site to fetch rules Bamm Visscher
Re: Some help with barnyard needed Edin Dizdarevic
Re: is there an ftp site to fetch rules Matt Kettler
Re: is there an ftp site to fetch rules George Theall
RE: is there an ftp site to fetch rules Garrett . Allen
Very basic question Ryan Koster
Re: Very basic question Demetri Mouratis
RE: error with mysql Jonathan Jesse
Snort alerts to SNMP Paul . Fiero
Sguil-0.2 Released Bamm Visscher
RE: is there an ftp site to fetch rules Schmehl, Paul L
Re: Very basic question Matt Kettler
RE: Rule order--almost works? Ron Shuck
IDS Pricing Comcast
RE: Very basic question Tinsley Paul
IDMEF Plugin Timothy Lelesi
RE: IDS Pricing Brian Gregorcy
RE: IDS Pricing Chris
Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Chris
Re: Sguil-0.2 Released fatb
Re: Sguil-0.2 Released Bamm Visscher
Re: Snort alerts to SNMP Rafeeq Rehman
Distributed Snort management Nelson, Ben
Re: Snort alerts to SNMP Roy S. Rapoport
Re: Snort alerts to SNMP Rafeeq Rehman
RE: IDS Pricing twig les
Re: Distributed Snort management Michael L. Artz
Re: Distributed Snort management Richard DeYoung
Re: Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Sumit Dhar

Thursday, 22 May

AW: IDMEF Plugin Poppi, Sandro
Interest in Snort/Acid/SnortCenter/etc... Integrated RPM and Setup? Steve Nutt
central logging and buffering Jochen Vogel
Re: central logging and buffering Edin Dizdarevic
Re: central logging and buffering Jason Haar
error Snort + MySQL Kim Depover
Misfiring Rule SID1948 Steve Halligan
Re: Snort & Acid Colin . Slevin
fail to access mysql honda
RE: Trouble Snorting with Multiple Interfaces Gordon Cunningham
Re: Snort & Acid Colin . Slevin
Starter Doubts Marcelo Ribeiro
Best External_Net setting Stephen W. Thomas
AW: Starter Doubts Poppi, Sandro
Re: Best External_Net setting Erek Adams
RE: Starter Doubts Jose Fernandes (IT)
switched environment M. Yu
Re: Best External_Net setting Roy S. Rapoport
False Alerts 1882 id check returned userid Lance Worthington
way for test snort ? payothlh
RE: way for test snort ? Matt Nelson
Can snort create actual traffic? (imp) Vaidehi Kasarekar
Re: way for test snort ? Nicholas Bachmann

Friday, 23 May

RE: way for test snort ? Johan Sunnerstig
Re: Distributed Snort management Shawn Truax
Re: Can snort create actual traffic? (imp) security people
Re: Can snort create actual traffic? (imp) Erek Adams
Re: way for test snort ? David Alonso De La Vega Tapage
Any Fortune 500 users out there Andy S Shrock
MySQL error during SNORT setup Arnold Trauth
Suggestions....... Remo Mattei
Portscan2 dies ... Neil Dickey
error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs
RE: MySQL error during SNORT setup Hutchinson, Andrew
Re: SNMP? Martin Olsson
Re: error snort + MySQL - SAME PROBLEM HERE. Kenneth G. Arnold
RE: MySQL error during SNORT setup Slighter, Tim
RE: MySQL error during SNORT setup L. Christopher Luther
RE: MySQL error during SNORT setup Brian Gregorcy
Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs
(spp_stream4) STEALTH ACTIVITY (unknown) detection Everist, Benjamin S. (NASWI)
Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic
Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs
Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic
unknown output plugin: 'alert_syslog' Jeff Dickens
Snort.conf & stealth mode francesco
Creating ACID tables in MySQL database Arnold Trauth
Quick Poll: RH9 + Snort + MySQL + ACID Snort Y
Re: MySQL error during SNORT setup Guillaume Rix
Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs
Re: error snort + MySQL - SAME PROBLEM HERE. Edin Dizdarevic
Re: error snort + MySQL - SAME PROBLEM HERE. Christopher . Downs
Snort documentation Michael Conlen
Re: Quick Poll: RH9 + Snort + MySQL + ACID IntelliSTAR Security
Barnyard Dumping To Wrong Directory Pawloski, Kevin
Re: Snort.conf & stealth mode Demetri Mouratis
Re: Quick Poll: RH9 + Snort + MySQL + ACID security people
Re: Quick Poll: RH9 + Snort + MySQL + ACID Craig Paterson
Re: Creating ACID tables in MySQL database Jon Baer
Re: unknown output plugin: 'alert_syslog' Matt Kettler
Re: way for test snort ? payothlh
stealth mode and openbsd 3.3 Bert Beaudin
RE: False Alerts 1882 id check returned userid Stephen W. Thomas
ettercap sig? Jon Baer
A Working Logsurfer Example for Snort 2.0 Matt Howell
SNORT / Shadow config setting question Raven, Mark
Re: A Working Logsurfer Example for Snort 2.0 Edin Dizdarevic
Re: Snort.conf & stealth mode Erek Adams
Improved snortd init script JP Vossen
Re: Any Fortune 500 users out there Nicholas Bachmann
Snort bug in syslog output? JP Vossen
Updated: Improved snortd init script JP Vossen
Windows Users: Attention to New Support Site... Michael Steele
libpcap not found by configure James Schnack

Saturday, 24 May

Re: Quick Poll: RH9 + Snort + MySQL + ACID Snort Y
Re: Quick Poll: RH9 + Snort + MySQL + ACID Ty Bodell
Stealth syslog to remote server Carol Overes
Re: stealth mode and openbsd 3.3 MH
RE: Stealth syslog to remote server JP Vossen
turn off some logging Jonathan
Truncated Tcp Options? Sh J
How to install Snort on Jaguar 10.2.6? George Mogiljansky

Sunday, 25 May

stream4 reassembly bug Yonah Russ
Re: Snort documentation Erek Adams
functionality question Eric Garnel
Sorry if repost - can I use Snort with Jaguar? George Mogiljansky
Re: Sorry if repost - can I use Snort with Jaguar? Jason
Re: using SNORT with Jaguar Jason
Problems with logging to mysql db Donnie Green

Monday, 26 May

Re: Problems with logging to mysql db Shawn Duffy
Netmask not specified Robert Golovniov
Re: Netmask not specified Ciprian Badescu
Re: Problems with logging to mysql db David Alonso De La Vega Tapage
openbsd 3.3 sparc64 snort 2.0 core dump. Benjamin Ash
Problems with logging to mysql db d_greenjr
question Eric Garnel
Re: question james
Re: RE: using SNORT with Jaguar Nick Zitzmann
RE: using SNORT with Jaguar George Mogiljansky
Re: Truncated Tcp Options? MH

Tuesday, 27 May

[Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]] Glenn Mansfield Keeni
Re: [Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]] Jose Vicente Nunez Z
RE: functionality question bmcdowell
arpspoof verbose output in 2.0? Arey, Jeff
SNORT and Shadow setting question mark
multiple interfaces on a Snort sensor francesco
strange behavior in rule processing? lpj0508
snort 2.0 run error Semerjian, Ohanes
Snort can't determine the hostname correctly when lauch by a script IDS snort
OT(Sorta): Querying acid/snort db from third party software Jason
Re: multiple interfaces on a Snort sensor Edin Dizdarevic
Re: stealth mode and openbsd 3.3 Erek Adams
Re: SNORT / Shadow config setting question Erek Adams
Embedded Snort? Michael Whitley
Elkern Worm Lorraine Cannavale
Snortcenter / byte_jump Matthew Southworth
libpcap not found by configure James Schnack
Re: Elkern Worm Kenneth G. Arnold
1.9.1 versus 2.0.x John Sage
Re: 1.9.1 versus 2.0.x Chris Green
Snort + IPv6 jhorgan
RE: way for test snort ? Brian Laing
Re: libpcap not found by configure payothlh
Re: Elkern Worm Terence Runge
Re: Snort-snmp for snort-2.0.0 David Powell
Re: Snort + IPv6 Matt Kettler
[Fwd: [Fwd: [Fwd: Re: Snort-snmp for snort-2.0.0]]] Glenn Mansfield Keeni
Re: Snort-snmp for snort-2.0.0 Glenn Mansfield Keeni
Snort Event Ids on win2000 C Wells
Re: 1.9.1 versus 2.0.x John Sage
RE: Snort Event Ids on win2000 Michael Steele
snort - barnyard and acid Russell Fulton

Wednesday, 28 May

Re: Snortcenter / byte_jump Joerg Weber
RE: Snort Event Ids on win2000 Joe Kinsella
cannot start snort sensor Jeremy Bartels
how to start snort service on win2000 pro successfully? qxw14
Openbsd 3.3 snort no log output Duncan Matthew Stirling
what's the meaning of "ERROR: OpenPcap() FSM compilation failed:" qxw14
RE: Snort-users digest, Vol 1 #3204 - 10 msgs Ron Shuck
RE: Snort Event Ids on win2000 Michael Steele
RE: how to start snort service on win2000 pro successfully? Michael Steele
Re: libpcap not found by configure James Schnack
Re: libpcap not found by configure James Schnack
Re: Openbsd 3.3 snort no log output Erek Adams
RE: Snort Event Ids on win2000 Joe Kinsella
RE: Snort Event Ids on win2000 Michael Steele
Re: Snort Event Ids on win2000 Chris Reid
Re: cannot start snort sensor Erick Mechler
[Snort-users]: posting the packet's time BHR Hana
Re: Snort Event Ids on win2000 Michael A. Davis
Arrrghhh!....help..me... Tim
Contd'..Arrrghhh!....help..me... Tim
Re: arpspoof verbose output in 2.0? Jeff Nathan
Re: Arrrghhh!....help..me... Demetri Mouratis

Thursday, 29 May

no log for the entire network Milko Ilari
ERROR: curl: (6) name lookup time-outed Jeremy Bartels
Arrrghhh!!...help..me... Tim
unknown sids Bernard Robbins
(no subject) Robin Johnson
Re: no log for the entire network Erek Adams
Re: Arrrghhh!!...help..me... Erek Adams
Re: Arrrghhh!!...help..me... Jason Boykin
Jaguar user (i.e. newbie) question George Mogiljansky
unable to start snort Nick Scheider
Re: unable to start snort Shawn Duffy
RE: unable to start snort Pacheco, Michael F.
Re: unknown sids Erick Mechler
Firing off Abuse email based on Snort Traffic Matt Howell
Re: (no subject) Erick Mechler
Windows vs Linux for Snort Performance? Jonathan Jesse
Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Williams Jon
Re: Firing off Abuse email based on Snort Traffic Matt Kettler
RE: unable to start snort Brian Gregorcy
Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Bamm Visscher
RE: Firing off Abuse email based on Snort Traffic Chris
RE: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) dave
Re: Firing off Abuse email based on Snort Traffic Matt Howell
RE: unable to start snort Chris
Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Brian
Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Matt Kettler
Re: Firing off Abuse email based on Snort Traffic Frank Knobbe
RE: Firing off Abuse email based on Snort Traffic dave
RE: Firing off Abuse email based on Snort Traffic bmcdowell
RE: unable to start snort Nick Scheider
Re: Firing off Abuse email based on Snort Traffic Erek Adams
Detecting Connections Faiz Ahmad Shuja
RE: Firing off Abuse email based on Snort Traffic Matt Howell
Re: Firing off Abuse email based on Snort Traffic Matt Howell
RE: Firing off Abuse email based on Snort Traffic Nicholas Delo
Re: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Erek Adams
RE: Firing off Abuse email based on Snort Traffic Donofrio, Lewis
Is there a bug in "nocase"? Jason Haar
Re: Firing off Abuse email based on Snort Traffic Skip Carter
Re: Firing off Abuse email based on Snort Traffic Budi Rahardjo
Re: Firing off Abuse email based on Snort Traffic Michael H. Warfield
Re: Firing off Abuse email based on Snort Traffic Mark Rowlands
Re: (no subject) Patrick S. Harper

Friday, 30 May

SnortCenter Configuration Roy S. Rapoport
Re: SnortCenter Configuration Roy S. Rapoport
byte_test:5,<,65537,0,relative,string; Martin Olsson
Re: Snortcenter / byte_jump Joerg Weber
Re: SnortCenter Configuration Joerg Weber
Re: Re: SnortCenter Configuration Joerg Weber
is it possible to extend my partition without losing my dbases? Horta, Benny
Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) bmcdowell
RE: is it possible to extend my partition without l osing my dbases? Philip Davidson
RE: Am I in the right place? (was: Tips for using ACID in a multi-adm in environment) Jonathan Jesse
RE: (no subject) Robin Johnson
RE: (no subject) Robin Johnson
RE: (no subject) Brian Gregorcy
Re: is it possible to extend my partition without losing my dbases? Guillaume Rix
RE: is it possible to extend my partition without l osing my dbases? L. Christopher Luther
Snort 2.0 and SNMP - Plugin error Mike Koponick
RE: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) Chris
RE: Foreign Attacks (was Re: Firing off Abuse emai l based on Snort Traffic) Pacheco, Michael F.
RE: libpcap-2003.05.29 requirement for Snort PaulinVT
spp_stream4 Steath activity John Hally
Re: is it possible to extend my partition without losing my dbases? Erek Adams
Re: Re: SnortCenter Configuration Roy S. Rapoport
Re: Firing off Abuse email based on Snort Traffic Todd Holloway
Re: is it possible to extend my partition without losing my dbases? Roy S. Rapoport
Re: Snort 2.0 and SNMP - Plugin error Erek Adams
How to ingnore a specific host(s) ? CGhercoias
RE: How to ingnore a specific host(s) ? CGhercoias
Re: How to ingnore a specific host(s) ? Erek Adams
Re: Tips for using ACID in a mult-admin environment? Anthony Kim
Tagging into the DB and back out again Sean Wheeler
Re: How to ingnore a specific host(s) ? Shawn Duffy
Re: byte_test:5,<,65537,0,relative,string; Brian
RE: Tips for using ACID in a mult-admin environment ? Williams Jon
Virus Rules Gone? Steve An
Virus Rules Gone? Steve An
Re: [OT] Firing off Abuse email based on Snort Traffic Matt Kettler
Re: Virus Rules Gone? Matt Kettler
Re: How to ingnore a specific host(s) ? Edin Dizdarevic
Re: Virus Rules Gone? Erek Adams
Re: [OT] Firing off Abuse email based on Snort Traffic Matt Howell
Re: Firing off Abuse email based on Snort Traffic scheidell
Re: [OT] Firing off Abuse email based on Snort Traffic james

Saturday, 31 May

snort on wireless Vaidehi Kasarekar
Noob question on snort.conf storm
RE: Noob question on snort.conf Michael Steele
Snortsam Wilcoxen, Scott

Sunday, 01 June

bpf filter by interface Yonah Russ
Re: Noob question on snort.conf Erek Adams
Re: bpf filter by interface Erek Adams
cleanning all Alerts Julio Steffen Jr.
Re: Snortsam Frank Knobbe
Auto-updation on rule base from internet in SnortCenter Atul Shrivastava
How do keep update my rules in Snort 2.0 over Windows 2000? Javier Romero
Kontiki Download Manager caused NMAP Ping alerts Arey, Jeff
RE: Snort 2.0 and SNMP - Plugin error Mike Koponick
RE: Foreign Attacks (was Re: Firing off Abuse emai l based on Snort Traffic) Jared Ingersoll
write rule documentation, get a t-shirt Brian
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Jon Baer
barnyard config error Guy Witney Krocker
Re: [Snort-sigs] write rule documentation, get a t-shirt Brian
Re: cleanning all Alerts Patrick S. Harper
Ignoring certain hosts storm
Re: barnyard config error Bamm Visscher
Snort Config W2K Steven Williams
RE: Snort Config W2K Michael Steele
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Erek Adams

Monday, 02 June

RE: Snort Config W2K Steven Williams
RE: How do keep update my rules in Snort 2.0 over Windows 2000? Michael Steele
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Roy S. Rapoport
RE: Snort Config W2K Michael Steele
Writing rules Patrice . Arnal
Re: Ignoring certain hosts Erek Adams
Ugh@snort Ryan Vennell
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Erek Adams
Re: Ugh@snort Shawn Duffy
Was my host hijacked? Luiz-Otavio Zorzella
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Roy S. Rapoport
session: printable in local.rules logs ALL traffic McKim, Tim
Re: Was my host hijacked? Matt Kettler
RE: Snort Config W2K L. Christopher Luther
Re: Writing rules Matt Kettler
Updating Rules Win2K solutions Scot ~~~
3 quick questions storm
Re: Updating Rules Win2K solutions Ueli Kistler
Re: Was my host hijacked? Luiz-Otavio Zorzella
What am I Protecting Against? Roy S. Rapoport
RE: [SMISPAM4] RE: Snort Config W2K Steven Williams
RE: [SMISPAM4] RE: Snort Config W2K Michael Steele
RE: What am I Protecting Against? Wilcoxen, Scott
Re: What am I Protecting Against? james

Tuesday, 03 June

Re: What am I Protecting Against? Roy S. Rapoport
Re: What am I Protecting Against? james
Experience with snort-based IDS like PacketAlarm? Eduardo Rodrigue
Snort On win2k server Hamish McDermid
RE: Snort On win2k server Francois CONTAT
Configuring Snort on LAN Robert Golovniov
RE: Snort On win2k server Snow Jacob C KPWA
Linux Documentation Nick Scheider
snort will not log to mysql Hans Steinraht
RE: Linux Documentation Francois CONTAT
Question Ryan Vennell
Re: Experience with snort-based IDS like PacketAlarm? Patrick S. Harper
Re: snort will not log to mysql Edin Dizdarevic
Re: Linux Documentation Erek Adams
RE: Question Schmehl, Paul L
my email Petrit Podrimja
Re: Question Erek Adams
Re: Question Edin Dizdarevic
Ping David Alonso De La Vega Tapage
RE: Linux Documentation Schmehl, Paul L
Re: Question Joerg Weber
Re: How do keep update my rules in Snort 2.0 over Windows 2000? Javier Romero
RE: Question adam.w.hogan
snort 2.0 performance evaluation Terence R.T. Liu
Libpcap packet statistics larosa, vjay
SnortSnarf Demo? Tobias Rice
Re: SnortSnarf Demo? James Hoagland
RE: snort 2.0 performance evaluation James R. Hendrick
[OT] What sites do you use to research IP's? bmcdowell
Re: snort 2.0 performance evaluation Jeff Nathan
Parsing SID field Todd A. Jacobs
Re: Parsing SID field Erek Adams
RE: [OT] What sites do you use to research IP's? L. Christopher Luther
RE: Parsing SID field Tinsley Paul
RE: [OT] What sites do you use to research IP's? bmcdowell
Re: Parsing SID field Erick Mechler
RE: [OT] What sites do you use to research IP's? Robert Reid
Re: Parsing SID field Brian
Re: Parsing SID field Jeff Nathan
Re: Ping Matt Kettler
RE: [SMISPAM4] RE: [SMISPAM4] RE: Snort Config W2K Steven Williams
Topology and placement question JF
3 quick questions storm
Re: Configuring Snort on LAN JP Vossen

Wednesday, 04 June

RE: [SMISPAM4] RE: [SMISPAM4] RE: Snort Config W2K Steven Williams
Re: snort will not log to mysql Hans Steinraht
ACID / PHP / MYSQL -- help! Jon Paterson
Re: ACID / PHP / MYSQL -- help! Simon Gray
Re: ACID / PHP / MYSQL -- help! Jon Baer
Re: Snortcenter / byte_jump Reeves, Michael (GEAE, Compaq)
Re: snort will not log to mysql Bamm Visscher
Was my host hijacked? zorzella
RE: SnortSnarf Demo? Potts, Ross A.
Re: [Snort-sigs] write rule documentation, get a t-shirt Giles Coochey
Re: What am I Protecting Against? Nicholas Bachmann
Re: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) OT Allan Dover
Re: Foreign Attacks (was Re: Firing off Abuse email based on Snort Traffic) OT Allan Dover
Re: Snortcenter / byte_jump larc
FW: MySQL error Chris
SCAN UPnP service discover attempt Mark Williamson
RE: ACID / PHP / MYSQL -- help! Faiz Ahmad Shuja
Re: Ping David Alonso De La Vega Tapage
RE: FW: MySQL error Faiz Ahmad Shuja
RE: SCAN UPnP service discover attempt Bruyere, Michel
Re: SCAN UPnP service discover attempt Mark Williamson
Re: SCAN UPnP service discover attempt Mark Williamson
RE: SCAN UPnP service discover attempt Thomas T. Evans, III
Re: SCAN UPnP service discover attempt Mark Williamson
Re: SCAN UPnP service discover attempt Joerg Weber
UnPlug n Pray Mark Williamson
RE: SCAN UPnP service discover attempt Schmehl, Paul L
RE: SCAN UPnP service discover attempt bmcdowell
RE: SCAN UPnP service discover attempt Garrett . Allen
question on distributed snort collection Garrett . Allen
Re: Guardian with Snort - Help Snortman
RE: question on distributed snort collection Williams Jon
IFACE -i any problem Marcus Robb
Re: question on distributed snort collection Bamm Visscher
Scan dedected as WEB-MISC whisker tab splice attack Darrin Powell
Re: IFACE -i any problem Edin Dizdarevic
Re: IFACE -i any problem Edin Dizdarevic
Installation question Tim Slininger
No detail or contents in acid and barnyard Russell Fulton

Thursday, 05 June

snort not start at boot Stepanishev Roman
Re: snort will not log to mysql Hans Steinraht
Re: Experience with snort-based IDS like PacketAlarm? Miles Carpenter
Gigabit NIC's and snort hardware required?? Zach Forsyth
Re: Gigabit NIC's and snort hardware required?? Roy S. Rapoport
barnyard with postgres compile problem Jochen Vogel
Rules not working? Erik Tank
Re: barnyard with postgres compile problem Edin Dizdarevic
AW: barnyard with postgres compile problem Jochen Vogel
RE: Installation question Francois CONTAT
Re: Rules not working? Joerg Weber
Re: AW: barnyard with postgres compile problem Edin Dizdarevic
Re: No detail or contents in acid and barnyard Bamm Visscher
Re: barnyard with postgres compile problem Bamm Visscher
Acid problem Chris
Re: Gigabit NIC's and snort hardware required?? Bennett Todd
Connecting through Snortcenter Ryan Koster
MySQL error Romano, Chris
Re: Acid problem guillaume rix - Sun Microsystems - Velizy France
UPnP service discover attempt Mark Williamson
Signatures Vuppala, Vijaybhasker (EM, GECIS)
RE: ACID / PHP / MYSQL -- help! Mike Koponick
RE: snort not start at boot Schmehl, Paul L
RE: Acid problem Chris
Re: Connecting through Snortcenter Roy S. Rapoport
RE: UPnP service discover attempt bmcdowell
Re: Signatures Michael Boman
RE: No detail or contents in acid and barnyard Nelson, Ben
RE: UPnP service discover attempt David Beeson
Re: Snort-users digest, Vol 1 #3238 - 10 msgs djmurd
Re: Rules not working? Matt Kettler
Re: Acid problem payothlh
ACID Updates + Development Jon Baer
Newbie question (sorta): implementing a replacement SNORT box Greg Webster
Re: snort will not log to mysql Ron Shuck
802.1q Monitoring Ron Shuck
FW: RE: Acid problem Chris
Using ACID to view OpenBSD's pf logs Jyri Hovila
snort hosted on server vs. a tap on network Tom Fulton
SMB login Failure Andy Wood
Re: snort not start at boot Roman Stepanishev
undefined reference uncompress in libmysqlclient Robert Kane
RE: Gigabit NIC's and snort hardware required?? Zach Forsyth

Friday, 06 June

Re: snort hosted on server vs. a tap on network Roy S. Rapoport
ACID updates + developement Jon Baer
RE: UPnP service discover attempt David Beeson
RE: Acid problem Romano, Chris
RE: UPnP service discover attempt David Beeson
Web Cgi finger question Ryan Sebastian
Re: ACID updates + developement Simon Gray
Re: Gigabit NIC's and snort hardware required?? Bennett Todd
RE: Web Cgi finger question adam.w.hogan
Timestamp Question Sh J
stupid question Chris
Re: 802.1q Monitoring Bennett Todd
Snort drops packets! Vögeli Urs, voegeurs
Fiber taps? Sven Fichtner
RE: Fiber taps? larosa, vjay
Re: Snort drops packets! Edin Dizdarevic
ATTACK-RESPONSES id check returned userid Charles Douvier
[snort] ATTACK-RESPONSES id check returned userid (cont.) Charles Douvier
W32.Bugbear.B@mm signature CGhercoias
Re: 802.1q Monitoring Chris Green
Re: 802.1q Monitoring Chris Green
RE: 802.1q Monitoring Ron Shuck
Re: Fiber taps? Bennett Todd
Re: ATTACK-RESPONSES id check returned userid Edin Dizdarevic
Re: Web Cgi finger question Snortman
RE: snort hosted on server vs. a tap on network Tom Fulton
Re: Timestamp Question Anthony Kim
Auto-updation on rule base from internet in SnortCenter Atul Shrivastava
Eric Van den Bossche is out of the office. Eric Van den Bossche
Re: [OT] Eric Van den Bossche is out of the office. Matt Kettler
Re: [OT] Eric Van den Bossche is out of the office. Edin Dizdarevic
Re: 802.1q Monitoring Jeff Nathan
Re: 802.1q Monitoring Jeff Nathan
Snort on separate machine stealth interface Paolo Meridiani

Saturday, 07 June

Snort alerts caused by possible legit traffic? NismoSkyline
SnortCenter Mandrake 9.1 Steve Rector
ACID Problem (page not found...) Uso
Re: ACID Problem (page not found...) Jon Baer
Re: Noob question on snort.conf John Sage
Re: stupid question John Sage
Re: Snort alerts caused by possible legit traffic? John Sage
ACID features + development Jon Baer
Is this guy really on the list? John Sage
Re: Is this guy really on the list? NismoSkyline
Re: stupid question james

Sunday, 08 June

Re: stupid question Jeff Nathan
SnortWatch. Any docs with detailed installation? NismoSkyline
Re: [OT] Is this guy really on the list? Matt Kettler
some commented rules default? sb ch
Re: some commented rules default? John Sage

Monday, 09 June

Problems with Acid and MySQL edward . hawkins
Alerts Vuppala, Vijaybhasker (EM, GECIS)
RE: Web Cgi finger question Ryan Sebastian
RE: stupid question Chris
Re: [OT] Is this guy really on the list? Andrew R. Baker
Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto
RE: SMB login Failure Horta, Benny
RE: Problems with Snort and MySQL on FreeBSD 5 Schmehl, Paul L
Re: Problems with Acid and MySQL Jon Baer
RE: Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto
RE: Problems with Snort and MySQL on FreeBSD 5 twig les
RE: Problems with Snort and MySQL on FreeBSD 5 Joo Carlos Couto
how to uninsall Gaurav Kumar
Oinkmaster questions Philip Davidson
NYC Snort users group? Jon Baer
RE: NYC Snort users group? Keith Pachulski
Re: [OT] Is this guy really on the list? John Sage
Re: how to uninsall John Sage
ACID And MYSQL John Ceballos-contr
RE: Oinkmaster questions Schmehl, Paul L
RE: ACID And MYSQL Schmehl, Paul L
RE: ACID And MYSQL John Ceballos-contr
Re: [Snort-sigs] Oinkmaster questions Russell Fulton
RE: ACID And MYSQL Schmehl, Paul L
Re: how to uninsall John Sage
Re: Re: [Snort-sigs] Oinkmaster questions Anthony Kim
RE: Gigabit NIC's and snort hardware required?? Zach Forsyth
unsubscribe zeroone () wel com 김영일
Notes regarding success with snort 2.0 on low end hardware Matt Kettler
Starting Snort sgent based Snort at boot time Mahdi Kefayati

Tuesday, 10 June

firewall rules modification based on snort logs Gaurav Kumar
AW: firewall rules modification based on snort logs Poppi, Sandro
installation issues Chris Lewis
RE: NYC Snort users group? Clarke
RE: firewall rules modification based on snort logs John Hally
RE: Re: [Snort-sigs] Oinkmaster questions Philip Davidson
whats coming after snort 2.0 any ideas? Horta, Benny
ACID installation woes Jim Overholser
variable question Mike Ellis
Re: installation issues Roy S. Rapoport
Re: NYC Snort users group? www.nycsnort.org Jon Baer
Re: firewall rules modification based on snort logs Matt Kettler
Re: variable question Matt Kettler
Regarding web-iis rule NOT triggering Ashley Thomas
Writing a Rule, need help Don Cook
Portscan -> Tag ? Sven Bolt
snort 2.0.0 rules msmythe
Re: [OT] Is this guy really on the list? Robert Kane
Re: snort 2.0.0 rules Matt Kettler
How do people generally trigger alerts? Jason Haar
Re: [OT] Is this guy really on the list? Matt Kettler
Re: [OT] Is this guy really on the list? NismoSkyline
Re: firewall rules modification based on snort logs Frank Knobbe

Wednesday, 11 June

many 'NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt' Ciprian Badescu
Re: Re: [Snort-sigs] Oinkmaster questions Andreas Östling
ACID Esler, Joel Contractor
ACID question 2 Esler, Joel Contractor
AW: ACID Poppi, Sandro
Re: ACID question 2 Simon Gray
Re: ACID question 2 Ciprian Badescu
bad IP traffic operator
RE: ACID question 2 Esler, Joel Contractor
Re: ACID question 2 Joerg Weber
Re: ACID question 2 Roy S. Rapoport
[EXCHANGE-SA () nrtc org: ScanMail Message: To Sender Match eManager setting and take actio n.] Roy S. Rapoport
Re: Re: [Snort-sigs] Oinkmaster questions Anthony Kim
Barnyard Config Error - Possible Answer tforeman
Barnyard run problems tforeman
RE: many 'NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt' Everist, Benjamin S. (NASWI)
Re: Barnyard run problems Erek Adams
re: Pass rule question lindsay . hunt
Riddle me this. larosa, vjay
RE: Barnyard run problems SRH-Lists
RE: re: Pass rule question adam.w.hogan
RE: Barnyard run problems tforeman
ACID - No Alerts found.....sometimes Scott O.
snort 2.0.0 rules msmythe
errors running ACID in a Win2K configuration Francesco
Re: firewall rules modification based on snort logs Matt Kettler
Snort snmp plugin Lee Nelson Civ AFRL/IFGA
error meant msmythe
error meant msmythe
Re: snort 2.0.0 rules Matt Kettler
Re: error meant Matt Kettler
RE: [OT] Is this guy really on the list? Schmehl, Paul L
RE: Barnyard run problems Erek Adams
Re: error meant msmythe
Re: error meant Matt Kettler
Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Gus Faulk
Re: Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Matt Kettler
RE: errors running ACID in a Win2K configuration Michael Steele
RE: ACID installation woes Michael Steele
Re: [OT] Is this guy really on the list? Robert Kane
Problems installing SNORT Robert Kane
Snort statistics - packet drops Zach Forsyth
Re: Problems installing SNORT Roy S. Rapoport

Thursday, 12 June

ACID, Barnyard, Snort install guide Chris Paul
Re: ACID - No Alerts found.....sometimes Joerg Weber
Snort doen't write to mysql kaihansen
Re: Snort doen't write to mysql kaihansen
Cached Rule Files? Grime, Richard S
Mysql Esler, Joel Contractor
How to lock down a RedHat box running Snort? Walzer, Jeff
Port mirroring on 3com switch Petriz, Pablo
Re: Snort statistics - packet drops Matt Kettler
RE: How to lock down a RedHat box running Snort? SRH-Lists
Re: Mysql Roy S. Rapoport
Re: Port mirroring on 3com switch Carlos Felix
RE: Port mirroring on 3com switch Jose Fernandes (IT)
RE: Mysql LaRose, Dallas
Question about rule 733 Luke Randall
Re: ACID question 2 Guillaume Rix
re: pass rule question lindsay . hunt
RE: Mysql Esler, Joel Contractor
SNMP plug-in problems (repost) Lee Nelson Civ AFRL/IFGA
Re: Snort doen't write to mysql Daniele Gallarato
re: Pass Rule question lindsay . hunt
sourcefire RNA Luo, Philip
Re: How to lock down a RedHat box running Snort? Mark Ehle
Re: re: Pass Rule question Kenneth G. Arnold
Re: How to lock down a RedHat box running Snort? Paul Gillingwater
Re: How to lock down a RedHat box running Snort? Jason Boykin
Re: How to lock down a RedHat box running Snort? Roy S. Rapoport
Ignored x duplicate alerts (ACID, MySQL, Snort) Ron Shuck
RE: How to lock down a RedHat box running Snort? Everist, Benjamin S. (NASWI)
Re: How to lock down a RedHat box running Snort? Anthony Kim
Re: Sourcefire (was Locking down Redhat) Paul Gillingwater
Output plugin msmythe
JPGRAPH/ACID/$ChartLib_path ???? Tim
Re: Snort 2.0.0, OpenBSD3.3, Netgear EN104TP Gus Faulk
RE: JPGRAPH/ACID/$ChartLib_path ???? D@7@K|N&
RE: JPGRAPH/ACID/$ChartLib_path ???? Michael Steele
Re: JPGRAPH/ACID/$ChartLib_path ???? Roy S. Rapoport
Easy question John Deagan

Friday, 13 June

IP queries on multiple pages with ACID Ciprian Badescu
Re: Easy question Joerg Weber
Re: re: Pass Rule question Erek Adams
RE: Mysql Erek Adams
Promiscious mode + Win2k darniot benjamin
Re: Port mirroring on 3com switch Erek Adams
smb alerts problem Gaurav Kumar
RE: errors running ACID in a Win2K configuration - A follow up Francesco
Re: smb alerts problem Joerg Weber
RE: ACID And MYSQL John Ceballos-contr
ACID Update Whois Cache Problem Brian Blake
Re: Promiscious mode + Win2k Erek Adams
RE: Easy question Hutchinson, Andrew
Re: Snort-users digest, Vol 1 #3257 - 5 msgs Don Cook
Re: JPGRAPH/ACID/$ChartLib_path ???? Michael Moore
RE: ACID And MYSQL Schmehl, Paul L
RE: Promiscious mode + Win2k Michael Steele
Re: smb alerts problem K Anderson
Fwd: Snort 1.9.1 error that runs on AIX 4.3 Richard Powell
RE: ACID And MYSQL John Ceballos-contr
Re: Port mirroring on 3com switch Daniel A. Melo
Capturing incoming packets? guano
Re: Capturing incoming packets? Erek Adams
Re: Capturing incoming packets? guano
New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville

Saturday, 14 June

RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele
RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville
RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville
RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele
Nothing Logged into mysql Rohit
statically compile Jeremy Hefner
Acid/PHP/MySQL/Apache working ... But one more question Esler, Joel Contractor
RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Allyn Baskerville
RE: Nothing Logged into mysql Esler, Joel Contractor
Re: Nothing Logged into mysql Rohit
RE: Acid/PHP/MySQL/Apache working ... But one more question Michael Steele
Action stats: Logged 0 Alerts 0 Rohit
Re: sourcefire RNA Martin Roesch
RE: Nothing Logged into mysql Esler, Joel Contractor
RE: New Installation - Problem with No Alerts with Snort, MySQL, SnortCenter and ACID on Redhat 9.0 Michael Steele
snort not sending alerts Gaurav Kumar
RE: Acid/PHP/MySQL/Apache working ... But one more question Esler, Joel Contractor
Re: Capturing incoming packets? Erek Adams
Re: Capturing incoming packets? guano
Re: Nothing Logged into mysql Rohit

Sunday, 15 June

snort not sending alerts to windows worstations Gaurav Kumar
Re: snort not sending alerts to windows worstations K Anderson
Any Commercial Snorts besides Demarc? Uso
Re: Any Commercial Snorts besides Demarc? Angela Dickinson
how to disable "Short UDP packet, length field" alert? sb ch
ACID_DB_SETUP question Chris Wong
Demarc: Snort binary does not exist or is not executable at specified location Uso
RE: Any Commercial Snorts besides Demarc? Michael Steele
ACID --with-gd Jan van den Berg

Monday, 16 June

SnortCenter and the Snort2.0 fixes Joerg Weber
Hogwash Redhat 7.3 Gordon McDowall
ANNOUNCEMENT: Eagle X v2.0 available on http://www.engagesecurity.com Ueli Kistler
ANNOUNCEMENT: IDScenter 1.1 RC3 released on www.engagesecurity.com Ueli Kistler
Taps PPowenski
Re: Snort statistics - packet drops Martin Olsson
AW: Taps Poppi, Sandro
Re: Action stats: Logged 0 Alerts 0 David Alonso De La Vega Tapage
Re: Taps Bennett Todd
plz help Gaurav Kumar
Re: Capturing incoming packets? Erek Adams
Re: how to disable "Short UDP packet, length field" alert? Erek Adams
RE: plz help Chris N.
RE: plz help Esler, Joel Contractor
Re: Snort-users digest, Vol 1 #3266 - 11 msgs (Out Of Office) Joseph Koval
variable problem Brian Hughes
Help with Config Idea Ferguson, Michael
Re: variable problem Erek Adams
RE: variable problem adam.w.hogan
RE: variable problem Jim Cervantes
File size limit exceeded Joecat28
statistics that Snort can do Francesco
[OT] RE: Re: Snort-users digest, Vol 1 #3266 - 11 m sgs (Out Of Office) Everist, Benjamin S. (NASWI)
Re: statistics that Snort can do Brian
Re: statistics that Snort can do Erek Adams
ACID Duplicate entry error?? Jon Paterson
Question about "SCAN SOCKS Proxy attempt" alert . Chris Wong
RE: Question about "SCAN SOCKS Proxy attempt" alert . Michael Steele
RE: statistics that Snort can do Kreimendahl, Chad J
Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) Frank Knobbe
Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) Michael Boman

Tuesday, 17 June

File size limit exceeded Joecat28
Re: statistics that Snort can do Terence Runge
leftover unified output files/barnyard operation Chris Paul
Re: File size limit exceeded Mathias Gygax
ATTACK-RESPONSES id check returned userid Roelf Schreurs
unified logging Jochen Vogel
PHP Installation problem Vuppala, Vijaybhasker (EM, GECIS)
Sorry for such question, but ... magre
Database compatibility Vuppala, Vijaybhasker (EM, GECIS)
Combining NIC interfaces on FreeBSD Richard Bejtlich
I have a problem... Tommy
Clearing the snort database Michael . Mulholland
RE: errors running ACID in a Win2K configuration - A follow up francesco
DDoS?? almost 40k 'TCP Data Offset is less than 5!' alerts in 30 mins lpj0508
New Feature based on MAC address filterig (Possible !!!!!) Atul Shrivastava
Re: PHP Installation problem Muenz, Michael
Re: PHP Installation problem David Alonso De La Vega Tapage
RE: PHP Installation problem Esler, Joel Contractor
Re: Re: [Snort-devel] New Feature based on MAC address filterig (Possible !!!!!) David Alonso De La Vega Tapage
Eagle X v2.0 cristal_ball
Cleveland, Ohio Area Snort User's Group billford
RE: Notes regarding success with snort 2.0 on low end hardware Petriz, Pablo
RE: ATTACK-RESPONSES id check returned userid Hudak, Tyler
RE: variable problem Erek Adams
Re: File size limit exceeded Erek Adams
Re: Sorry for such question, but ... Erek Adams
RE: Notes regarding success with snort 2.0 on low end hardware Matt Kettler
Making Snort Rules More "Sensitive" Rich Lichvar
Re: Database compatibility Erek Adams
RE: variable problem Brian Hughes
Re: Making Snort Rules More "Sensitive" Erek Adams
RE: Making Snort Rules More "Sensitive" D@7@K|N&
RE: Making Snort Rules More "Sensitive" D@7@K|N&
Re: variable problem Matt Kettler
Default configuration on Win32 .. Not detecting SubSeven? Mark G. Spencer
RE: Making Snort Rules More "Sensitive" L. Christopher Luther
Re: Eagle X v2.0 Ueli Kistler
RE: Database compatibility Schmehl, Paul L
RE: Clearing the snort database Schmehl, Paul L
RE: Notes regarding success with snort 2.0 on low end hardware Petriz, Pablo
Depth and multi content rule help. larosa, vjay
performance concern Francisco Morosini
RE: [Snort-sigs] Depth and multi content rule help. SRH-Lists
Re: performance concern Erek Adams
snort-2.0.0 fails to start Rick Waegner
Re: performance concern Matt Kettler
Alerts not showing up in ACID Nick Scheider
spp_stream4 Stealth Activity detect John Hally
Re: snort-2.0.0 fails to start Roy S. Rapoport
RE: spp_stream4 Stealth Activity detect Esler, Joel Contractor
Best HP-UX 11.0 ANSI C compile options? Ray Randolph
RE: Clearing the snort database LaRose, Dallas
SUMMARY: snort-2.0.0 fails to start Rick Waegner
Re: SnortCenter and the Snort2.0 fixes Daniel A. Melo
Snort-2.0 "buglet"? Wrong error on out-of-memory error Jason Haar
Re: SnortCenter and the Snort2.0 fixes Brian
Cross-device link ?? Schmehl, Paul L
Total Cost of Ownership for Snort Implementation? Nicholas Brawn
Re: Cross-device link ?? Andreas Östling