Snort: by author

• RSS Feed
• About List
• All Lists

Previous period

Next period

1913 messages starting Jan 22 04 and ending Jan 13 04
Date index | Thread index | Author index

Aaron

Re: Snort-users digest, Vol 1 #3919 - 4 msgs Aaron (Jan 22)
[Looking for] Open source reporting tool Aaron (Feb 01)
Re: [Looking for] Open source reporting tool Aaron (Feb 02)

Aaron Babalola

Where Can i get any open standart for IDS Aaron Babalola (Jan 27)

adam

Re: flowbits adam (Feb 24)
Re: flowbits adam (Feb 24)

Adam Kaufman

snort: database: mysql_error: Duplicate entry Adam Kaufman (Jan 22)

Adams, Chris

http insect Adams, Chris (Feb 19)

admin

Snort 2.1 Install and Libpcre Error admin (Jan 22)

agnelo d

syslog-ng problem agnelo d (Mar 18)
syslog-ng problem agnelo d (Mar 19)
syslog-ng problem agnelo d (Mar 19)
unknown:eth0 agnelo d (Jan 02)
snort webmin configuration agnelo d (Jan 05)
problem with syslog-ng agnelo d (Mar 19)
snort gui management tool agnelo d (Mar 22)
problem with syslog-ng agnelo d (Mar 19)
tcp resets on stealth interface agnelo d (Jan 01)
snort signature updates agnelo d (Jan 06)
syslog-ng email alerts agnelo d (Mar 30)

AJ Butcher, Information Systems and Computing

Re: odd traffic AJ Butcher, Information Systems and Computing (Mar 29)
Re: Re[3]: -T option error AJ Butcher, Information Systems and Computing (Mar 25)
Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
Re: barnyard file reading question AJ Butcher, Information Systems and Computing (Feb 23)
Re: OpenSource Alternative to SourceFire's RNA AJ Butcher, Information Systems and Computing (Mar 31)
RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 16)
Re: Hummm... AJ Butcher, Information Systems and Computing (Mar 15)
Re: snort and tap ethernet AJ Butcher, Information Systems and Computing (Mar 30)
RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 09)
Re: Sensor logging at remote mysql db AJ Butcher, Information Systems and Computing (Mar 10)
Re: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 18)
RE: Snort running on two interfaces AJ Butcher, Information Systems and Computing (Mar 19)
Re: Snort capabilities AJ Butcher, Information Systems and Computing (Mar 26)
Re: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
Re: Barnyard and duplicate entries AJ Butcher, Information Systems and Computing (Mar 29)
Re: Question regarding creating rules in Snortcenter ... AJ Butcher, Information Systems and Computing (Mar 25)
Re: Problems with links in ACID AJ Butcher, Information Systems and Computing (Mar 10)
Re: False Positive or not? AJ Butcher, Information Systems and Computing (Mar 31)
Re: Cannot archive alerts (ACID) AJ Butcher, Information Systems and Computing (Mar 17)
Snort, unified/database output plugins, session capture AJ Butcher, Information Systems and Computing (Mar 25)
Re: barnyard looses details WRT ACID? AJ Butcher, Information Systems and Computing (Mar 16)
Re: Snort, unified/database output plugins, session capture AJ Butcher, Information Systems and Computing (Mar 25)
RE: SNORT (Linux) / MySQL (Win32) AJ Butcher, Information Systems and Computing (Mar 25)
Re: running snort in promiscuous mode AJ Butcher, Information Systems and Computing (Mar 10)
Re: Snort + Acid AJ Butcher, Information Systems and Computing (Mar 26)
RE: Question about best hardware AJ Butcher, Information Systems and Computing (Mar 11)
Re: error while trying to install snort v2.1.1 with mySql v4.0.18 AJ Butcher, Information Systems and Computing (Mar 25)
Re: Tuning Signatures AJ Butcher, Information Systems and Computing (Mar 15)
RE: Updating Rules? AJ Butcher, Information Systems and Computing (Mar 25)

A.L.

http_inspect question. A.L. (Jan 02)

Alan

Swatch throttle problems Alan (Mar 30)
Great news! Snort not logging to the /var/log/snort/aler tfile Alan (Mar 25)
Swatch configuration problem Alan (Mar 23)

Alan.Nguyenchan

Snort No Output /MYSQL error Alan.Nguyenchan (Mar 21)

Alejandro Flores

RE: TTL LIMIT Exceeded Alejandro Flores (Mar 27)
Re: problem with snort and guardian Alejandro Flores (Mar 27)

Alessandro Fiorenzi

snort and tap ethernet Alessandro Fiorenzi (Mar 29)

Alexandr

Re: Installing Snort on SuSe Linux machine Alexandr (Jan 31)

Alon Noy

GateKeeper for snort Alon Noy (Jan 30)
It is like "guardian" but then not. Try "GateKeeper". Alon Noy (Jan 28)
It is like "guardian" but then not. Try "GateKeeper". Alon Noy (Jan 27)

Amod K

RE: Snort install Amod K (Mar 14)
RE: Snort install Amod K (Mar 14)

Anderson, Don

RE: RE: Snort 2.1.1 Issues with MySQL Connect on So laris 2.8 Anderson, Don (Mar 29)
Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 25)
RE: Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 29)
Snort 2.1.1 Issues with MySQL Connect on Solaris 2.8 Anderson, Don (Mar 25)

Andraz Sraka

threshold and suppress ?? Andraz Sraka (Mar 01)

Andreas Östling

Re: Perfmonitor...does anyone really use this thing? Andreas Östling (Jan 14)
Oinkmaster 1.0 beta1 Andreas Östling (Mar 28)
Re: Oinkmaster Oddity Andreas Östling (Jan 01)
RE: Disable alerts from certain machines - Not working for me? Andreas Östling (Mar 25)
Re: Updating Rules? Andreas Östling (Feb 12)
Re: Question about var SERVICE_PORTS Andreas Östling (Jan 09)
RE: Problems with snort-2.1.0 Andreas Östling (Jan 14)
Re: oinkmaster.pl - Unable to download rules, Why?? Andreas Östling (Feb 05)
Re: snapshot layouts on snort.org Andreas Östling (Feb 03)
Re: BUG in fpdetect.c (2.1.0)? Andreas Östling (Jan 12)
Re: Managing many sensors Andreas Östling (Jan 02)
graphs from the perfmonitor preprocessor Andreas Östling (Jan 08)
Re: Re: flowbits Andreas Östling (Feb 24)
snort-replay for 2.1.1 Andreas Östling (Mar 04)
RE: Question about var SERVICE_PORTS Andreas Östling (Jan 09)

Andrew R. Baker

Barnyard 0.2.0 beta1 is available Andrew R. Baker (Mar 07)
Re: Unified log - how binary are they? Andrew R. Baker (Mar 13)
Barnyard 0.2.0-rc1 available Andrew R. Baker (Mar 25)
Re: CVS FAQ? (snort and barnyard issues) Andrew R. Baker (Mar 15)
Barnyard 0.2.0-beta2 available Andrew R. Baker (Mar 13)
Re: Snort, unified/database output plugins, session capture Andrew R. Baker (Mar 25)
Re: Snort/Barnyard/MySQL/ACID - Duplicate entry Andrew R. Baker (Mar 29)

Andy Richter

Re: SNORT and Linux 8.0 Andy Richter (Feb 02)
Re: Updating Rules? Andy Richter (Feb 12)

Andy Simpson

SynFlood / Total Connection Count with Snort Andy Simpson (Mar 24)
portscan2 - display which ports scanned in acid Andy Simpson (Mar 17)
RE: portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)
portscan2 - display which ports scanned in acid Andy Simpson (Mar 19)

Antje Schlüschen

how to start snort as service ( with normal user priv. ) Antje Schlüschen (Feb 11)

aravind babu

Frontends for Snort aravind babu (Jan 20)
Snort-inline in embedded device aravind babu (Jan 30)
Re: Testing Snort-inline without any rules aravind babu (Jan 30)
Testing Snort-inline without any rules aravind babu (Jan 30)
Problem with Snort-inline aravind babu (Feb 09)

A. Wright

Snort Wireless and BSD A. Wright (Feb 24)

b0b39-prgmr

no problem installing snort, winpcap -- but.... b0b39-prgmr (Feb 15)

Bala Ayres

Re: Snort and VPN Bala Ayres (Feb 16)
Snort and VPN Bala Ayres (Feb 16)
snort alerts Bala Ayres (Feb 17)

Bamm Visscher

Re: Does barnyard work with snort2.1.0? Bamm Visscher (Feb 04)
Re: Build problem with Snort CVS Bamm Visscher (Jan 07)
Re: Snort, Mudpit, Unified logs and me... Bamm Visscher (Jan 02)
Re: Making zero headway with barnyard Bamm Visscher (Mar 18)
Re: barnyard looses details WRT ACID? Bamm Visscher (Mar 15)
Re: What does the number in the binary log file name mean? Bamm Visscher (Mar 18)
Re: 'mysql' support is not compiled...OH YES IT IS Bamm Visscher (Jan 27)
Re: More TCP Reset Questions Bamm Visscher (Mar 01)
Re: Making zero headway with barnyard Bamm Visscher (Mar 19)
Re: Is ACID Dead? Bamm Visscher (Jan 15)
Re: How do I supress file-logging but not database-logging? Bamm Visscher (Jan 21)

BCalvert

Building snort w/ mysql support BCalvert (Feb 25)
PHP install problem! BCalvert (Mar 02)

bclark

Compiling snort and mysql bclark (Jan 16)
[Fwd: Re: Error while compile snort with mysql version 4.0.17] bclark (Jan 16)
Re: setting up Snort for the first time bclark (Feb 03)
Re: Bad Loop Back Traffic bclark (Feb 24)
Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
[Fwd: Auto update of sigs (was: Novarg Virus)] bclark (Jan 28)
Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
Re: Error while compile snort with mysql version 4.0.17 bclark (Jan 14)
Re: Bad Loopback Traffic bclark (Feb 25)

Bell, Josh

RE: Hey, how could i delete the alert log cuz /var is full Bell, Josh (Jan 16)
Spp_portscan2 Bell, Josh (Jan 07)

Ben

RE: Hummm... Ben (Mar 14)
Testing snort? Ben (Mar 06)

Ben Beeson

Snort errors on startup -- rules related? Ben Beeson (Jan 27)
Re: double decoding attack Ben Beeson (Mar 01)
Help with snort message Ben Beeson (Feb 29)

Ben Carter

Detection of subnet scan activity Ben Carter (Jan 05)

Ben Nelson

Re: New version (1.3) of SnortSlinger available Ben Nelson (Feb 21)
Re: Cisco Device Exploit Perl Script Ben Nelson (Mar 30)
Re: Dual Processor Machines Ben Nelson (Jan 07)
Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Ben Nelson (Feb 03)
New version (1.3) of SnortSlinger available Ben Nelson (Feb 19)
Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 03)
Re: E-mail Ben Nelson (Mar 04)
Re: Snort, Mudpit, Unified logs and me... Ben Nelson (Jan 05)

Bennett Todd

Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
Re: Error snort -c -T /etc/snort/snort.conf Bennett Todd (Feb 26)
Re: Couple of quick questions Bennett Todd (Mar 23)

Benny Late

Snort with Oracle Benny Late (Jan 20)

Bill-IS . Dixon

Snort 2.1.0 mysql plug-in Bill-IS . Dixon (Feb 02)

Bill McCarty

Generator ID in threshold directive Bill McCarty (Mar 16)
Snort 2.0.6 fails to close portscan.log on SIGHUP Bill McCarty (Jan 27)
HTTP session packet capture seems borken Bill McCarty (Feb 24)

Bini Mary Thomas

attack simulation Bini Mary Thomas (Feb 05)

Bin Liu

identify Chinese character in the snort binary log Bin Liu (Jan 16)

Biswas, Proneet

RE: Asymmetric routing and IDS correlation ? Biswas, Proneet (Mar 23)
RE: Yahoo Instant Messenger Biswas, Proneet (Jan 18)
mimail.c Biswas, Proneet (Jan 22)
RE: Obtain CVE id from unix sock output of Snort Biswas, Proneet (Feb 03)
RE: Yahoo Instant Messenger Biswas, Proneet (Jan 19)
BackDoor Subsevsen Biswas, Proneet (Jan 01)

BIZOU

Re: RE: flow-portscan really suitable ??? BIZOU (Mar 04)
Re: RE: RE: flow-portscan really suitable ??? BIZOU (Mar 05)
flow-portscan really suitable ??? BIZOU (Mar 04)

bmcdowell

RE: Snort Variables bmcdowell (Feb 06)
[OT] - RE: Repost: resp:rst_all not working bmcdowell (Mar 05)

Bob Radvanovsky

[ANNOUNCE] Demo Version of SENTINIX NOW Available! Bob Radvanovsky (Feb 26)

Bob Von Ilten

snortdb-extra.gz Bob Von Ilten (Feb 26)

Bob Walder

IPS Group test report now available Bob Walder (Jan 19)
RE: false positive generator Bob Walder (Feb 11)
RE: false positive generator Bob Walder (Feb 11)

Bo Jacobsen

Segmentation fault after installing 2.1.1 (and 2.1.1RC1). Bo Jacobsen (Feb 28)
Re: Segmentation fault after installing 2.1.1 (and 2.1.1RC1). Bo Jacobsen (Feb 28)

boka

Problem with building snort-2.1.1 on rh7.0 boka (Feb 26)
Re: acid error boka (Mar 01)
Re: Problem with building snort-2.1.1 on rh7.0 - solved boka (Feb 26)
acid error boka (Mar 01)

Bradberry, John

RE: Error Installing PHP Bradberry, John (Jan 15)
RE: Re: *BSD performance (was:Correct version of libpcap?) Bradberry, John (Feb 05)
WEB-IIS view source via translate header false alarms Bradberry, John (Jan 14)

Brad Rose

xdecode Install of Snort2.1.1 Brad Rose (Feb 25)
Install of Snort2.1.1 Brad Rose (Feb 24)

Brian

Re: Threshold settings Brian (Jan 07)
snapshot layouts on snort.org Brian (Feb 03)
Re: RULES -> Unknown ClassType: Brian (Feb 10)
Re: numbers meaning Brian (Jan 12)
cross over cables Brian (Feb 05)
Re: About the ruletype syntax Brian (Jan 30)
Re: Snort and pcre error Brian (Mar 25)
Re: Obtain CVE id from unix sock output of Snort Brian (Mar 01)
Re: Obtain CVE id from unix sock output of Snort Brian (Feb 03)
Re: snortrules-snapshot-2_1.tar.gz and flowbits? Brian (Feb 06)
Re: Block Brian (Feb 16)
Re: non-root user cannot run snort Brian (Jan 31)
Re: Snort 1U Appliance for Sale on EBay Brian (Feb 27)

brian . denicola

Brian Denicola/US/ABNAMRO/NL is out of the office. brian . denicola (Feb 23)

Brian Gregorcy

RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Brian Gregorcy (Jan 28)

Brian McNeilly

Re: Snort in VMware Brian McNeilly (Feb 19)
Re: Snort on Linux with no IP Brian McNeilly (Feb 23)
Snort on Linux with no IP Brian McNeilly (Feb 20)
Snort in VMware Brian McNeilly (Feb 18)

Brian M. Diehl

RHWS/Snort/Bonding Brian M. Diehl (Feb 24)
RE: New Worm / Virus - WORM_MIMAIL.R? Brian M. Diehl (Jan 27)

Brian Whitehead

RE: Frontends for Snort Brian Whitehead (Jan 22)

Brice B

Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Brice B (Dec 31)

Bryan Irvine

barnyard with postgres Bryan Irvine (Jan 01)
Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)
Re: Please virus scan your systems Bryan Irvine (Feb 11)
upgrade to 2.1 Bryan Irvine (Jan 01)
Re: Adware/Malware Rules List Bryan Irvine (Mar 02)
Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Bryan Irvine (Jan 28)

Button, William (STRA)

RE: Where can i get a Simlation attack to see if all my rules work! ? Button, William (STRA) (Jan 14)

bwood-lists

How Safe: Construction and Use of a Passive Ethernet Tap bwood-lists (Feb 05)

Carlos

Re: Logsnorter problem Carlos (Mar 18)
Logsnorter problem Carlos (Mar 15)
Logsnorter problem Carlos (Mar 18)

cc

Re: ACID and delete alerts cc (Feb 16)
Re: ACID modification cc (Mar 02)
Icmp Ping cc (Mar 18)
Re: Icmp Ping cc (Mar 18)
ACID working again cc (Mar 02)
Re: Install of Snort2.1.1 cc (Feb 24)
Re: ACID and delete alerts cc (Feb 17)
Re: Icmp Ping cc (Mar 18)
ACID modification cc (Mar 01)
ACID and delete alerts cc (Feb 16)
anomalous http server cc (Feb 17)

CGhercoias

RE: Is ACID Dead? CGhercoias (Jan 15)
[Snort-users]Microsoft Vulnerability in Microsoft ASN.1 (KB828028) signature CGhercoias (Feb 12)
RE: taps What Brand and Where in network CGhercoias (Jan 12)
RE: Ethernet Tap Question CGhercoias (Feb 02)
RE: Reserved characters in msg:"..."? CGhercoias (Feb 16)
Snort 2.0.6 - Error with a working rule under Snort-2.0.2 CGhercoias (Jan 15)
RE: New Worm / Virus - WORM_MIMAIL.R? CGhercoias (Jan 27)
RE: Newbie question: needed PC specs and performance CGhercoias (Mar 01)
RE: Yahoo Instant Messenger CGhercoias (Jan 19)
Snort 2.0.6 - Error with a working rule under Snort-2.0.2 CGhercoias (Jan 14)
RE: Can't connect to local MySQL server through socket CGhercoias (Jan 06)

Charles Lacroix

Re: how to block P2P with snort Charles Lacroix (Mar 31)
Couple of quick questions Charles Lacroix (Mar 23)
Re: Couple of quick questions Charles Lacroix (Mar 24)
Re: global threshold quesiton Charles Lacroix (Mar 29)
Re: how to block P2P with snort Charles Lacroix (Mar 31)

Chas Tomlin

RE: P2P Rules and Sending TCP Resets. Chas Tomlin (Feb 27)
Snort IPv6 Chas Tomlin (Mar 02)

chris

Re: 'mysql' support is not compiled...OH YES IT IS chris (Jan 27)
'mysql' support is not compiled...OH YES IT IS chris (Jan 27)
Answered my own question (mysql support).. chris (Jan 26)

Chris Burton

Re: Win32 v2.1 as service - two instances? Chris Burton (Mar 06)

Chris Calaf

RE: Remotely monitor a switch port... Chris Calaf (Feb 24)

Chris Green

Re: Re: [Snort-users] Libprelude working with snort 2.1.x Chris Green (Jan 22)
Re: flow-portscan, pcap files, and timestamps.. Chris Green (Mar 30)
Re: preprocessor flow-portscan Chris Green (Jan 30)
Re: Truncated Tcp Options? Chris Green (Mar 16)

Chris Hoover

Help with a new rule to detect web traffic Chris Hoover (Feb 03)

Chris Keladis

Re: MyDoom Outbound Impossible Detects Chris Keladis (Feb 06)
flow-portscan. Chris Keladis (Mar 11)
Unified log format. Chris Keladis (Jan 16)
Re: simple snort pass Chris Keladis (Jan 11)

Chris Manteuffel

Windows Set-up Chris Manteuffel (Mar 06)

Chris N

RE: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Chris N (Jan 02)
RE: snort: database: mysql_error: Duplicate entry Chris N (Jan 26)

Chris Reid

Re: upgrade to 2.1 Chris Reid (Jan 01)
Re: invalid event id, eventlog, win32 Chris Reid (Feb 09)

Christian Beine

snort-2.1.0 and barnyard Christian Beine (Jan 02)
snort-2.1.0 and barnyard Christian Beine (Jan 05)

Christian Ehlen

Re: Re: *BSD performance (was:Correct version of libpcap?) Christian Ehlen (Feb 07)
Re: Correct version of libpcap? Christian Ehlen (Feb 03)
Re: setting up Snort for the first time Christian Ehlen (Feb 04)

Christopher Bell

Obtaining HTTP header information and Barnyard Christopher Bell (Mar 22)
Obtaining HTTP header info and Barnyard Christopher Bell (Mar 23)
Obtaining HTTP header info and Barnyard Christopher Bell (Mar 25)

Christopher Cramer

Re: Snort not logging to the /var/log/snort/alert file Christopher Cramer (Mar 25)

Christopher Lyon

RE: Off topic- Your Favorite Linux Distro Christopher Lyon (Jan 30)

Christophe Zwecker

http_decode line in snort.conf gets garbled Christophe Zwecker (Mar 20)
http_decode line in snort.conf gets garbled Christophe Zwecker (Mar 22)

Ciprian Badescu

Re: Testing snort? Ciprian Badescu (Mar 08)

Cody R. Smith

False Positive or not? Cody R. Smith (Mar 30)

Craig D. Thomas

ICMP L3retriever Ping Craig D. Thomas (Jan 15)

Craig Mueller

port number or'ing Craig Mueller (Jan 22)
Port or'ing Craig Mueller (Jan 26)

Craig Paterson

Re: snort and tap ethernet Craig Paterson (Mar 30)

crazy

Has any one tried SnorcCenter with Snort 2.1.1-RC1? crazy (Feb 06)
Re[4]: -T option error crazy (Feb 12)
-T option error crazy (Feb 11)
Re[3]: -T option error crazy (Feb 12)
Re[2]: -T option error crazy (Feb 12)
Has any one tried SnorcCenter with Snort 2.1.1-RC1? crazy (Feb 07)
Re[6]: -T option error crazy (Feb 16)

Crow, Owen

2.1.1 crashes regularly on Fedora Core 1 (with 2 dumps) Crow, Owen (Mar 22)

crtech

Questions on traffic crtech (Feb 17)

customercare

can Snort itself reconfigure a firewall customercare (Mar 25)

Cyril Beaufrere

Re: Snort + Acid Cyril Beaufrere (Mar 26)
Snort + Acid Cyril Beaufrere (Mar 26)

Dan

Please post a good Nachi.B Signature Dan (Feb 21)
Re: Please post a good Nachi.B Signature Dan (Feb 21)
Re: Question about content keyword Dan (Mar 26)

Dan Fiorito

RE: Update rules....but not all Dan Fiorito (Mar 16)

Daniel Ascensão

RE: preprocessor arpspoof, help! Daniel Ascensão (Feb 15)
preprocessor arpspoof, help! Daniel Ascensão (Feb 15)
arp preprocessor Daniel Ascensão (Feb 16)
preprocessor arpspoof, help! Daniel Ascensão (Feb 16)

Daniel Guido

invalid event id, eventlog, win32 Daniel Guido (Feb 09)

Daniel Jagodziński

Snort is exiting after start Daniel Jagodziński (Mar 02)

Daniel J. Roelker

RE: Problems with snort-2.1.0] Daniel J. Roelker (Jan 13)
RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 14)
Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR"] Daniel J. Roelker (Mar 02)
RE: Problems with snort-2.1.0 Daniel J. Roelker (Jan 15)

Daniel Wittenberg

Re: Which Linux distro for a Win32 Snort admin? Daniel Wittenberg (Jan 08)
Re: Linux: RPM's 2.0.6 and 2.1.0 Updates? Daniel Wittenberg (Jan 05)

Danny Cannady

RE: Snort error Danny Cannady (Mar 09)
ACID/Traffic Matching? Danny Cannady (Mar 30)
Snort error Danny Cannady (Mar 09)
Setup & Configure Snort 2.1.1 on Windows XP? Danny Cannady (Mar 09)

Danny Li

Danny Li/AP/NSC is out of the office. Danny Li (Jan 08)

Darden, Patrick S.

Rules for Adware Darden, Patrick S. (Feb 16)
Adware/Malware Rules List Darden, Patrick S. (Feb 27)
RE: Adware/Malware Rules List V2 Darden, Patrick S. (Mar 05)
Adware/Malware Rules List V2 Darden, Patrick S. (Feb 27)
RE: Some thoughts on IDS types - request for clarif ication :) Darden, Patrick S. (Feb 12)

Darryl Cook

snort and Tru64 Darryl Cook (Feb 09)

Dave C

Re: Upgrade to 2.1.0 help needed Dave C (Jan 12)

Dave Ellingsberg

Witty worm sig Dave Ellingsberg (Mar 23)

Dave Randolph

messages to syslog at startup. Dave Randolph (Jan 16)
RE: v2.1 config question Dave Randolph (Mar 16)
RE: SNORT and Linux 8.0 Dave Randolph (Feb 02)
RE: Is ACID Dead? Dave Randolph (Jan 16)
RE: Is ACID Dead? Dave Randolph (Jan 16)

David

Re: Does barnyard work with snort2.1.0? David (Feb 05)
Does barnyard work with snort2.1.0? David (Feb 04)

David Alonso De La Vega Tapage

pcre.h error . David Alonso De La Vega Tapage (Mar 08)
Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
Re: creating tables .. David Alonso De La Vega Tapage (Mar 09)
Re: config PHP for Snort in RH9 David Alonso De La Vega Tapage (Feb 19)
creating tables .. David Alonso De La Vega Tapage (Mar 09)
Re: Off topic- Your Favorite Linux Distro David Alonso De La Vega Tapage (Jan 30)

David DeCoster

Performance tuning for a G5 Xserve? David DeCoster (Mar 10)

David Gianndrea

snortrules-snapshot-2_1.tar.gz and flowbits? David Gianndrea (Feb 05)

David Porter

SMTP Not Logged David Porter (Jan 12)

David Wilburn

global threshold quesiton David Wilburn (Mar 29)

Dax Kelson

Embedded SPEC incorrect in v2.1.1 Dax Kelson (Mar 04)

Dean Davis

RE: Multihomed Sensor Dean Davis (Jan 28)

DeBerry, Casey

Off topic- Your Favorite Linux Distro DeBerry, Casey (Jan 30)
RE: Multihomed Sensor DeBerry, Casey (Jan 28)
RE: ACID DeBerry, Casey (Feb 12)

Denise James

Snort on Windows 2000 Denise James (Mar 31)

Denis Lyons

S2I compiler Denis Lyons (Mar 09)
**S2I COMPILER** Denis Lyons (Mar 25)

deny

any info about the interface deny (Jan 22)

deny1

Re: help deny1 (Jan 21)
Re: Frontends for Snort deny1 (Jan 21)
Re: Frontends for Snort deny1 (Jan 22)

Derek (X-Networks)

snort.conf and startup variables Derek (X-Networks) (Feb 10)

Derya Sezen

snort ssl plug-in Derya Sezen (Jan 13)
Re: snort ssl plug-in Derya Sezen (Jan 13)

d_greenjr

There is no /var/log/snort/alert file d_greenjr (Jan 15)
There is no /var/log/snort/alert file d_greenjr (Jan 13)
Re: non-root user cannot run snort d_greenjr (Jan 26)

dibo303

snort misses attacks it normaly detects dibo303 (Jan 20)

Di Fresco Marco

Device didn't translate Di Fresco Marco (Jan 18)
Snort not loging on MySql Di Fresco Marco (Feb 02)
[REPOST] Snort not loging on MySql Di Fresco Marco (Feb 02)
[REPOST] Snort not loging on MySql Di Fresco Marco (Jan 30)

Dirk Geschke

Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Dirk Geschke (Jan 19)
Re: How do I supress file-logging but not database-logging? Dirk Geschke (Jan 21)
Re: Snort, Mudpit, Unified logs and me... Dirk Geschke (Jan 02)
Re: Upgrade from 2.0.1 error? Dirk Geschke (Jan 14)
Re: false positive generator Dirk Geschke (Feb 11)
Re: Compiling mysql support into snort and barnyard Dirk Geschke (Feb 23)
Re: Where can i get a Simlation attack to see if all my rules work! ? Dirk Geschke (Jan 14)
Re: Asymmetric routing and IDS correlation ? Dirk Geschke (Mar 24)
Re: remote tcpdump output & analysis (database) Dirk Geschke (Jan 31)
Announce: FLoP-1.2.0 Dirk Geschke (Mar 31)
Re: false positive generator Dirk Geschke (Feb 11)
Re: Reconstruction of TCP packets Dirk Geschke (Mar 31)
Re: Reconstruction of TCP packets Dirk Geschke (Mar 29)
Re: Compiling snort and mysql Dirk Geschke (Jan 16)
Re: libmysqlclient.so.12 error when I start snort. Dirk Geschke (Jan 31)
Re: false positive generator Dirk Geschke (Feb 11)
Re: HELP!!!!! Compiling Snort with MYSQL Dirk Geschke (Jan 06)
Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
Re: false positive generator Dirk Geschke (Feb 11)
Re: Is IPTables blocking Snort detection? Dirk Geschke (Jan 19)
Re: Error while compile snort with mysql version 4.0.17 Dirk Geschke (Jan 14)
Re: Reconstruction of TCP packets Dirk Geschke (Mar 30)
Re: Email Notification Methods? Dirk Geschke (Feb 04)
Re: [Fwd: Re: Error while compile snort with mysql version 4.0.17] Dirk Geschke (Jan 16)

dlambeth

HELP!!!!! Compiling Snort with MYSQL dlambeth (Jan 06)
FATAL ERROR: database: mysql_error: Access denied for user: 'snor t@localhost' (Using password: YES) dlambeth (Jan 06)
mysql_error: Access denied for user: 'snort@localhost' (Using pas sword: YES) dlambeth (Jan 06)

DM

RE: Problems with snort-2.1.0 DM (Jan 14)
RE: Snort in VMware DM (Feb 19)

Dmitry

Flexresp is not working Dmitry (Feb 13)

Dmitry Chorine

E-mail Dmitry Chorine (Mar 04)
RE: sensor Dmitry Chorine (Mar 04)
sensor Dmitry Chorine (Mar 04)

Douglas McCrea

Flowbits Douglas McCrea (Feb 24)
RE: Snort in VMware Douglas McCrea (Feb 18)
RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)
RE: Re: flowbits Douglas McCrea (Feb 24)
RE: RE: flow-portscan really suitable ??? Douglas McCrea (Mar 04)

Dragos Ruiu

Re: Quick stupid question Dragos Ruiu (Jan 31)
ASN.1 Signature Dragos Ruiu (Feb 11)

Drew Smith

Re: -T option error Drew Smith (Feb 11)
Re: ACID PHP MYSQL ERROR Drew Smith (Feb 11)
Re: Re[2]: -T option error Drew Smith (Feb 11)
Re: filters Drew Smith (Feb 11)
Re: Please virus scan your systems Drew Smith (Feb 11)
filters Drew Smith (Feb 11)

Dusty Hall

Re: log files Dusty Hall (Mar 18)
Flex Response + NIC Dusty Hall (Mar 24)
DShield Information Dusty Hall (Feb 10)
Re: Updating Rules? Dusty Hall (Feb 12)
RE: Compromising Packet... Dusty Hall (Jan 26)
Updating Rules? Dusty Hall (Feb 12)
Compromising Packet... Dusty Hall (Jan 26)
Strange Traffic to 10.0.1.128 Dusty Hall (Feb 25)
Re: Snort/mysql/acid and dshield.org Dusty Hall (Mar 01)
Compromising Packet... Dusty Hall (Jan 26)

Ed

List admin please... Ed (Mar 02)
Re: Source IP 173.80.0.0 [revisited], bug? Ed (Mar 02)
Source IP 173.80.0.0 Ed (Feb 22)

Edin Dizdarevic

Re: non-root user cannot run snort Edin Dizdarevic (Jan 29)
Re: Excluding Ip from Alert logging! Edin Dizdarevic (Jan 27)
Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 14)
Re: non-root user cannot run snort Edin Dizdarevic (Jan 27)
Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Edin Dizdarevic (Jan 02)
Re: tcp resets on stealth interface Edin Dizdarevic (Jan 01)
Re: non-root user cannot run snort Edin Dizdarevic (Jan 26)
Re: SNORT and Linux 8.0 Edin Dizdarevic (Feb 02)
Re: Perfmonitor...does anyone really use this thing? Edin Dizdarevic (Jan 15)
Re: Order on snort rules Edin Dizdarevic (Jan 30)
Re: snort and mysql Edin Dizdarevic (Feb 02)

Eduardo E. Silva

Re: Flexresp is not working Eduardo E. Silva (Feb 13)

Edward van der Jagt

Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 13)
Re: https and http_inspect gives *many* false positives Edward van der Jagt (Jan 12)
https and http_inspect gives *many* false positives Edward van der Jagt (Jan 12)

Edwin Ramos

installing snort ? (john greene) Edwin Ramos (Mar 11)

Elena Escolano Torner

problem logging Elena Escolano Torner (Feb 10)
Re: problem logging Elena Escolano Torner (Feb 10)
WEB-IIS view source via translate header Elena Escolano Torner (Jan 05)

Emre Bastuz

Some thoughts on IDS types - request for clarification :) Emre Bastuz (Feb 12)

Enerio, Rico

Multi-homed Sensor Enerio, Rico (Jan 29)

Engle, Kurt

RE: Snort on Windows 2000 Engle, Kurt (Mar 31)

Erek Adams

Re: snort.conf and startup variables Erek Adams (Feb 11)
Re: File Size Limit Exceeded - error Erek Adams (Jan 15)
Re: Build problem with Snort CVS Erek Adams (Jan 13)
Re: Segmentation Fault Erek Adams (Jan 08)
Re: old versions of snort? Erek Adams (Feb 11)
Re: Snort dropping packets Erek Adams (Feb 02)
Re: Remotely monitor a switch port... Erek Adams (Feb 23)
RE: SNORT and Linux 8.0 Erek Adams (Feb 02)
Re[3]: -T option error Erek Adams (Feb 11)
Re: Correct version of libpcap? Erek Adams (Feb 02)
Re: Segfault on fun funy rule Erek Adams (Feb 25)
Re: Some please help me.. Erek Adams (Jan 12)
Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
Re: Snort 2.1.0, getting mixed up signatures. Erek Adams (Feb 09)
Re: make: Fatal error in reader: Makefile, line 484: Unexpected end o f line seen Erek Adams (Feb 23)
Re[2]: -T option error Erek Adams (Feb 11)
Re[4]: -T option error Erek Adams (Feb 13)
Re: Bug: $eth0_ADDRESS parse error (FIXED?) Erek Adams (Feb 07)
Re: Segfault with snort 2.0 Erek Adams (Jan 31)
2.1 compilation issues on Solaris and *BSD Erek Adams (Jan 02)
RE: Off topic- Your Favorite Linux Distro Erek Adams (Jan 31)
Re: Please post a good Nachi.B Signature Erek Adams (Feb 21)
Re: Please help with this strangeness Erek Adams (Jan 15)
Re: How are alerts being logged? Erek Adams (Feb 02)
Re: Gigabit IDS Erek Adams (Jan 06)
Re: Hopefully someone else has a better grasp on HTTP/_Inspect Erek Adams (Jan 31)
Re: -T option error Erek Adams (Feb 11)
Re: Snort on Linux with no IP Erek Adams (Feb 20)
Re: Configuring snort.conf Erek Adams (Feb 11)
Re: Build problem with Snort CVS Erek Adams (Jan 07)
Re: ERROR: unknown preprocessor "http_decode" Erek Adams (Jan 16)
Re: Snort Sensor Erek Adams (Feb 06)
Re: Re[2]: -T option error Erek Adams (Feb 11)

eric-dated-1083277626 . 193075aa63e273

Problem Compiling 2.1.1 on FreeBSD 5.1-RELEASE eric-dated-1083277626 . 193075aa63e273 (Mar 30)

Eric Ferguson

Detecting use of Anonymous Proxies Eric Ferguson (Mar 19)

Erich Trowbridge

Snort FAQ Submission Erich Trowbridge (Jan 22)

Eric Knight

Open question regarding the future of Visual Intrusion Analyzer Eric Knight (Mar 21)

Erickson Brent W KPWA

RE: Why logging the attacked one? Erickson Brent W KPWA (Jan 30)

Erik Fichtner

flow-portscan, pcap files, and timestamps.. Erik Fichtner (Mar 30)

Erik Mintz

RE: syslog messages Erik Mintz (Feb 05)

Ernesto

neuronal network over snort Ernesto (Jan 08)
neuronal network over snort Ernesto (Jan 06)

Erwin Van de Velde

Re: non-root user cannot run snort Erwin Van de Velde (Jan 26)
ACID gives erroneous information Erwin Van de Velde (Feb 29)
Re: ACID gives erroneous information Erwin Van de Velde (Feb 29)
Init script Erwin Van de Velde (Mar 14)

Escudero, Peter Louis

Snort1.9 on RH7.3 Upgrade to Snort2.x on RH9 Escudero, Peter Louis (Jan 21)

Everist, Benjamin S. CTR (WHDB)

unusually high port scan activity Everist, Benjamin S. CTR (WHDB) (Jan 13)

ewingh

Mysql error ewingh (Jan 22)

Fabien Pouget

CFP - ESORICS 2004 - Call for Papers Fabien Pouget (Feb 02)
CFP - RAID 2004 - Call for Papers Fabien Pouget (Feb 02)

Fabio Bastiglia Oliva

Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 28)
Re[2]: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 30)
Re: Temporary "solution" to MyDoom worm Fabio Bastiglia Oliva (Jan 28)

Fabio Viero

SQUID scan proxy attempt Fabio Viero (Feb 22)
SQUID scan proxy attempt Fabio Viero (Feb 24)

FG12sqTSS

Short UDP Packet FG12sqTSS (Feb 24)

Finney Charles E

RE: Bad Loop Back Traffic Finney Charles E (Feb 24)
(no subject) Finney Charles E (Feb 16)
(spp_frag2) Oversized fragment, probable DoS Finney Charles E (Feb 13)

fiorenzi () tiscali it

Re: Dual Processor Machines fiorenzi () tiscali it (Jan 12)

frank.hodits

FIltering out Internal Mail Logging frank.hodits (Mar 16)

Frank Knobbe

Re: Snort Abend after BAD-TRAFFIC Frank Knobbe (Mar 21)
Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
Re: snortsam problem Frank Knobbe (Feb 23)
Re: How do I supress file-logging but not database-logging? Frank Knobbe (Jan 21)
Re: Feature request: thresholds need another counter? Frank Knobbe (Mar 18)
Re: RFC: SHELLCODE and WEDAV alerts Frank Knobbe (Mar 18)
Re: Block Frank Knobbe (Feb 16)
Re: Bad Loop Back Traffic Frank Knobbe (Feb 24)
Re: Snort 1U Appliance for Sale on EBay Frank Knobbe (Feb 27)
RE: same tcpdump.log to remote log server instead oflocal sensor Frank Knobbe (Jan 30)
Re: Block Frank Knobbe (Feb 16)
Re: Using snort to listen on a nic without an IP Frank Knobbe (Jan 21)
Re: same tcpdump.log to remote log server instead of local sensor Frank Knobbe (Jan 28)

Fred McFeeters

have i been banned Fred McFeeters (Mar 04)
portscan2 Fred McFeeters (Jan 21)
RE: Source IP 173.80.0.0 [revisited], bug? Fred McFeeters (Mar 02)
RE: Newbie question: needed PC specs and performance Fred McFeeters (Mar 01)
RE: ACID Fred McFeeters (Feb 23)
idea for detection of rouge nodes? Fred McFeeters (Feb 01)
RE: idea for detection of rouge nodes? Fred McFeeters (Feb 02)
RE: SNORT (Linux) / MySQL (Win32) Fred McFeeters (Feb 11)
portscan2 vs portscan Fred McFeeters (Jan 22)
RE: ACID 2.0? Fred McFeeters (Mar 11)
ANOMALOUS HTTP SERVER ON UNDEFINED HTTP PORT Fred McFeeters (Mar 04)
ACID / SnortSnarf Fred McFeeters (Jan 27)

Fred Portnoy

RE: CVS FAQ? ... Fred Portnoy (Mar 15)

Gabriel Assis Amancio

Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Gabriel Assis Amancio (Feb 27)

Gabriel L. Somlo

Re: Snort on Linux with no IP Gabriel L. Somlo (Feb 24)

Gabriel Moricz

Excluding Ip from Alert logging! Gabriel Moricz (Jan 27)
Fw: Why logging the attacked one? Gabriel Moricz (Jan 30)
Excluding Ip from Alert logging! Gabriel Moricz (Jan 27)
Why logging the attacked one? Gabriel Moricz (Jan 30)
Why logging the attacked one? Gabriel Moricz (Jan 31)

Gary Flynn

Re: TCP Resets Gary Flynn (Feb 28)

Gary_Portnoy

Garbling FTP alerts Gary_Portnoy (Feb 25)
aggregating perfmonitor stats Gary_Portnoy (Mar 31)

Gaurav_Jindal

How to set thresholds parameters for various attack Gaurav_Jindal (Mar 23)
snort multi packet inspection Gaurav_Jindal (Mar 10)
how to add new function to snort ow to use debug option Gaurav_Jindal (Mar 01)

gautam nijhawan

Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)
Re: Question-using perl with snort-creating a user friendly interface gautam nijhawan (Jan 15)

GDHough

Re: snort webmin configuration GDHough (Jan 05)
Re: TCP Data Offset is less than 5 GDHough (Jan 01)

G DINESH

Technically speaking G DINESH (Mar 31)

Gema de Toro Sánchez

Help!! Problem testing Snort Gema de Toro Sánchez (Feb 09)
alert_syslog plugin problem Gema de Toro Sánchez (Jan 26)
How to add preprocessor? Gema de Toro Sánchez (Jan 31)

Gene Gomez

Snort+Prelude Reporting DoS advisory Gene Gomez (Feb 09)

Geoff Craig

Time used by snort Geoff Craig (Mar 10)

George Theall

Re: libpcre.so.0 error loading shared libraries George Theall (Jan 01)

GJ Philput

Odd alert on /bin/chmod rule GJ Philput (Feb 23)

Glenn Forbes Fleming Larratt

Asymmetric routing and IDS correlation ? Glenn Forbes Fleming Larratt (Mar 23)
Re: Snort Install - troubles Glenn Forbes Fleming Larratt (Mar 25)

Gould, Scott

RE: ATTACK RESPONSES 403 Forbidden Gould, Scott (Mar 23)
ATTACK RESPONSES 403 Forbidden Gould, Scott (Mar 22)

Greg Chu

2 class C network Greg Chu (Jan 27)

Gregory W. Ratcliff

EasyIDS updated Gregory W. Ratcliff (Jan 19)

Grejda, Eric

RE: Snort on Linux with no IP Grejda, Eric (Feb 23)

Grime, Richard S

RE: DNS server keeps communicating with Darkprofits.net and darkprofits.com Grime, Richard S (Feb 03)
RE: non-root user cannot run snort Grime, Richard S (Jan 26)
RE: Frontends for Snort Grime, Richard S (Jan 21)

gsrao

mysql_error: Access denied for user: 'snort@localhost gsrao (Mar 04)

Guillermo Andres Gómez

I have a problem with snort.conf Guillermo Andres Gómez (Feb 24)

Guy Witney Krocker

libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)
RE: Snort-users digest, Vol 1 #3871 - 5 msgs Guy Witney Krocker (Jan 01)
libpcre.so.0 error loading shared libraries Guy Witney Krocker (Jan 01)

hb

Snort & OpenBSD (sparc64) hb (Mar 29)

Heinrich vanRiel

Content scanning Heinrich vanRiel (Feb 01)

Hemant Thakre

Anybody is there Hemant Thakre (Mar 22)
Hello I am new user Hemant Thakre (Mar 17)

Hendry Fong

help Hendry Fong (Mar 22)

henk

snort.org and sourcefire.com resolving no more? henk (Mar 03)
Re: Hey who use SWATCH!?? when there is an scan, i get too many mails on root () domain com henk (Jan 15)

Henri Chevallier

syslog messages Henri Chevallier (Feb 05)

Holger . Woehle

RE:Subject: IPless interface on Debian... Holger . Woehle (Feb 12)

Hudak, Tyler

payload clarification Hudak, Tyler (Jan 21)
RE: the alert log is getting so huge in minutes! Hudak, Tyler (Jan 19)
Snort and fragmentation Hudak, Tyler (Jan 21)

hugh_fraser

MyDoom DOS detection hugh_fraser (Jan 30)
RE: Event Correlation or Incident Management for Snort Database? hugh_fraser (Mar 19)
RE: IDS Design Help hugh_fraser (Feb 09)

HuMPie

RE: DB SNORT HuMPie (Feb 23)

Hutchinson, Andrew

RE: How to delete alerts without acid Hutchinson, Andrew (Mar 16)
RE: snort: database: mysql_error: Duplicate entry Hutchinson, Andrew (Jan 31)
RE: Is snort dropping packets Hutchinson, Andrew (Mar 24)
RE: Question about best hardware Hutchinson, Andrew (Mar 08)

Ian Macdonald

Re: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Ian Macdonald (Feb 27)

ICO Staff

simple snort pass ICO Staff (Jan 11)

ids

Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert f ile ids (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Snort not logging to the /var/log/snort/alert file ids (Mar 26)
Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: Swatch configuration problem ids (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file ids (Mar 24)
Re: Snort not logging to the /var/log/snort/alert file ids (Mar 24)

IntegPatchMgr

Incomplete RPC segment IntegPatchMgr (Mar 24)

Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco

Block Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 24)
ACID Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)
Question Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 16)
DB SNORT Israel_Guadalupe_Lopez_Mascorro . . /Administracion/Jalisco (Feb 23)

Jack Whitsitt (jofny)

Re: Question on snort redirecting Jack Whitsitt (jofny) (Feb 04)

Jaeho Kwon

Question of traffic result using snort? Jaeho Kwon (Mar 04)

Jake Rog

IDS Design Help Jake Rog (Feb 08)

james

Re: Using snort to listen on a nic without an IP james (Jan 21)
Re: Tell snort to resolve ip or use /etc/hosts? james (Jan 14)
Re: ERROR: unknown preprocessor "http_decode" james (Jan 16)
Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)
Re: Hey, how could i delete the alert log cuz /var is full james (Jan 16)

James Chong

Re: Portscan traffic on ACID James Chong (Mar 09)
Portscan traffic on ACID James Chong (Mar 09)
Configuring snort.conf James Chong (Feb 10)
Re: Portscan traffic on ACID James Chong (Mar 09)
RE: No portscan still on ACID James Chong (Mar 09)

James Edwards

Re: idea for detection of rouge nodes? James Edwards (Feb 01)
Re: Segfault with snort 2.0 James Edwards (Jan 31)

James Nonya

Re: Please help me... James Nonya (Jan 12)
Snort-2.1.0 and flexresp2 James Nonya (Jan 29)
Tell snort to resolve ip or use /etc/hosts? James Nonya (Jan 14)
Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
Re: WEB-IIS view source via translate header false alarms James Nonya (Jan 14)
Re: RE: Bad Loop Back Traffic James Nonya (Feb 24)
Re: Adware/Malware Rules List James Nonya (Mar 02)
Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
Re: alert_syslog plugin problem James Nonya (Jan 26)
Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 13)
Perfmonitor...does anyone really use this thing? James Nonya (Jan 14)
Re: Snort 2.1.0 - Shutting up http_inspect on non web servers James Nonya (Jan 14)
Snort and pcre error James Nonya (Mar 25)
Quick snortsam question James Nonya (Mar 01)
Quick stupid question James Nonya (Jan 30)

James Riden

Re: HOME_NET James Riden (Feb 10)
Re: Snort on Linux with no IP James Riden (Feb 20)
Re: Please post a good Nachi.B Signature James Riden (Feb 21)

Jan Hormann

running snort in promiscuous mode Jan Hormann (Mar 09)

Jan Hugo Prins

Problem compiling Snort 2.1.1 and 2.1.0 on old RedHat 6.2 based system Jan Hugo Prins (Feb 24)

Jasmine CHUA

alert refused to pass Jasmine CHUA (Feb 27)
RE: alert refused to pass Jasmine CHUA (Feb 27)
signature needed for imesh p2p Jasmine CHUA (Mar 10)

Jason

Re: threshold and suppress ?? Jason (Mar 02)
Re: https and http_inspect gives *many* false positives Jason (Jan 12)
Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
Re: Feature request: thresholds need another counter? Jason (Mar 17)
Re: Snort Abend after BAD-TRAFFIC Jason (Mar 21)
Re: TTL LIMIT Exceeded Jason (Mar 26)

Jason Alexander

Re: Is ACID Dead? Jason Alexander (Jan 16)
Snort Center Replacement Jason Alexander (Jan 12)
Re: Snort 2.1.0 rules won't update in SnortCenter Jason Alexander (Jan 23)
New Snortcenter 2.x Jason Alexander (Feb 27)
Dual Processor Machines Jason Alexander (Jan 07)
Re: Has any one tried SnorcCenter with Snort 2.1.1-RC1? Jason Alexander (Feb 09)

Jason Baeder

Email Notification Methods? Jason Baeder (Feb 05)

Jason Haar

RE: Keeping separate databases? Jason Haar (Mar 16)
Re: Asymmetric routing and IDS correlation ? Jason Haar (Mar 23)
Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
Re: Couple of quick questions Jason Haar (Mar 23)
barnyard looses details WRT ACID? Jason Haar (Mar 15)
Feature request: thresholds need another counter? Jason Haar (Mar 16)
Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
Re: Please post a good Nachi.B Signature Jason Haar (Feb 22)
Re: SNORT and VLans Jason Haar (Feb 26)
Re: Detecting http 'basic-auth' brute force Jason Haar (Mar 23)
Re: https and http_inspect gives *many* false positives Jason Haar (Jan 12)
Re: Hummm... Jason Haar (Mar 14)
Re: Keeping separate databases? Jason Haar (Mar 16)
Re: Question about best hardware Jason Haar (Mar 08)
Re: Snort Abend after BAD-TRAFFIC Jason Haar (Mar 21)
Re: Keeping separate databases? Jason Haar (Mar 15)
Re: Snort 2.1.0, getting mixed up signatures. Jason Haar (Feb 08)
Re: Feature request: thresholds need another counter? Jason Haar (Mar 20)
RE: Question about best hardware Jason Haar (Mar 07)
Re: Reconstruction of TCP packets Jason Haar (Mar 29)
Re: snort ssl plug-in Jason Haar (Jan 13)
Re: Logsnorter problem Jason Haar (Mar 15)

Jason Humes

How to delete alerts without acid Jason Humes (Mar 16)
How to tell snort version and upgrade Jason Humes (Mar 18)
Snort permissions problem Jason Humes (Mar 18)
Snort in anomaly mode? Jason Humes (Mar 05)
Snort log management Jason Humes (Mar 10)
Is snort dropping packets Jason Humes (Mar 23)
Question about alert Jason Humes (Mar 23)
RE: How to tell snort version and upgrade Jason Humes (Mar 18)
Re: Snort in anomaly mode Jason Humes (Mar 08)
RE: Keeping separate databases? Jason Humes (Mar 15)
RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
ACID default display method Jason Humes (Feb 19)
Snort failing to start... Jason Humes (Feb 19)
RE: Keeping separate databases? Jason Humes (Mar 16)
RE: Snort log management Jason Humes (Mar 11)
RE: config PHP for Snort in RH9 Jason Humes (Feb 19)
Keeping separate databases? Jason Humes (Mar 15)
Snort running on two interfaces Jason Humes (Mar 18)
RE: Snort running on two interfaces Jason Humes (Mar 18)
RE: How to delete alerts without acid Jason Humes (Mar 15)
Snort with SPADE...snort in anomaly mode? Jason Humes (Mar 23)
RE: Is snort dropping packets Jason Humes (Mar 24)

Jason Kolberg

Hopefully someone else has a better grasp on HTTP/_Inspect Jason Kolberg (Jan 31)

Jason Monroe "JC"

building snort from CVS Jason Monroe "JC" (Mar 15)
Patch for Snort FAQ Jason Monroe "JC" (Mar 10)
RE: Keeping separate databases? Jason Monroe "JC" (Mar 16)
Linux RPMS Jason Monroe "JC" (Mar 22)
Re: Segfault on fun funy rule Jason Monroe "JC" (Feb 26)
Segfault on fun funy rule Jason Monroe "JC" (Feb 25)

jayesh

Re: Snort-users digest, Vol 1 #4029 - 2 msgs jayesh (Mar 08)

Jeff

Re: 2 class C network Jeff (Jan 31)
Re: Is snort dropping packets Jeff (Mar 24)
OT: Re: Snort in VMware/hubs Jeff (Feb 19)
Re: Snort in VMware Jeff (Feb 18)

Jeff Dell

[Snort-announce] IDS Policy Manager 1.4.0 Beta Released Jeff Dell (Feb 11)
RE: snort gui management tool Jeff Dell (Mar 22)
IDS Policy Manager 1.4.0 Beta Released Jeff Dell (Feb 09)
RE: Frontends for Snort Jeff Dell (Jan 22)
RE: Frontends for Snort Jeff Dell (Jan 21)

Jeff Evenson

SnortConsole: Unable to connect to remote sensor Jeff Evenson (Jan 10)
SnortCenter and MySQL Jeff Evenson (Jan 15)
RE: Snort 2.1.0 rules won't update in SnortCenter Jeff Evenson (Jan 27)
Snort 2.1.0 rules won't update in SnortCenter Jeff Evenson (Jan 22)

Jeff Kell

Truncated TCP options? Jeff Kell (Jan 21)
Re: TCP Resets Jeff Kell (Feb 27)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
Segfault with snort 2.0 Jeff Kell (Jan 30)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jeff Kell (Dec 31)
Signature question... Jeff Kell (Jan 20)
Re: problem logging Jeff Kell (Feb 10)

Jeff Nathan

Re: ARPSpoof! Jeff Nathan (Feb 17)
Re: ARPSpoof! Jeff Nathan (Feb 17)
Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue Jeff Nathan (Feb 11)
Re: Integrate Snort with Remedy, Anyone Please??? Jeff Nathan (Feb 12)

Jeff Penn

Re: Signature question... Jeff Penn (Jan 27)

Jeff Price

Re: mysql_error: Access denied for user: 'snort@localhost Jeff Price (Mar 05)

Jeff Workman

Cannot archive alerts (ACID) Jeff Workman (Mar 16)
Re: Cannot archive alerts (ACID) Jeff Workman (Mar 19)

Jeremy Hewlett

Re: Interesting problem with Snort 2.1.0 today -- Jeremy Hewlett (Mar 10)
Re: Why resp and session option Dont work!? Jeremy Hewlett (Jan 31)
Re: Aberrant alerts with snort 2.1.0 build 9 Jeremy Hewlett (Feb 05)
Re: http_inspect question. Jeremy Hewlett (Jan 05)
Re: Simple questions. Jeremy Hewlett (Jan 14)
Re: Http_inspect: allow_proxy_use/no_alerts Jeremy Hewlett (Jan 05)
Re: BAD-TRAFFIC loopback Jeremy Hewlett (Jan 06)
Re: Order on snort rules Jeremy Hewlett (Jan 30)
Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 13)
Re: snort-2.1.0 upgrade error Jeremy Hewlett (Feb 05)
Re: drowning in http inspect NON RFC character alerts Jeremy Hewlett (Feb 05)
Snort 2.1.1 final is available! Jeremy Hewlett (Feb 25)
Snort 2.1.1-RC1 Available Jeremy Hewlett (Feb 04)
Re: make: Fatal error in reader: Makefile, line 484 : Unexpected end o f line seen Jeremy Hewlett (Feb 27)
Re: re: http\_inspect alerts Jeremy Hewlett (Jan 05)
Re: Thresholding the Cyberkit ICMP Ping rule Jeremy Hewlett (Jan 06)
Re: RE: RE: flow-portscan really suitable ??? Jeremy Hewlett (Mar 05)
Re: Generator ID in threshold directive Jeremy Hewlett (Mar 19)
Re: where can i find ms_unicode_generator Jeremy Hewlett (Jan 06)
Snort 2.1.2 released! Jeremy Hewlett (Mar 31)
Re: configure option "enable-linux-smp-stats" Jeremy Hewlett (Feb 27)
Re: threshold in rule definition and in threshold.conf Jeremy Hewlett (Jan 07)
Re: payload clarification Jeremy Hewlett (Jan 31)
Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Jeremy Hewlett (Feb 27)
Re: snort-2.2.1-RC1 compile error Jeremy Hewlett (Feb 12)
Re: RE: http\_inspect alerts Jeremy Hewlett (Jan 06)

jeroen.koekkoek

MSSQL jeroen.koekkoek (Mar 23)

Jerry Shenk

RE: Icmp Ping Jerry Shenk (Mar 18)
RE: Hummm... Jerry Shenk (Mar 12)
RE: Snort is exiting after start Jerry Shenk (Mar 02)
RE: Disable alerts from certain machines Jerry Shenk (Mar 12)
RE: Adware/Malware Rules List Jerry Shenk (Feb 29)
RE: Adware/Malware Rules List Jerry Shenk (Mar 04)
RE: Icmp Ping Jerry Shenk (Mar 19)
RE: How to delete alerts without acid Jerry Shenk (Mar 15)

jhally

(no subject) jhally (Jan 26)

Jim Brown

Newbie Jim Brown (Feb 28)
Newbie Jim Brown (Feb 27)
Acid/Snort not logging UDP packets Jim Brown (Mar 01)
Re: Snort setting off my pager Jim Brown (Jan 17)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Jim Brown (Jan 03)
Newbie Jim Brown (Feb 28)

Jim Clews

RE: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Jim Clews (Jan 27)
RE: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Jim Clews (Jan 27)

Jim Gifford

PID Location Jim Gifford (Mar 19)

Jim Hendrick

Re: Snort, MySql, Apache, & PHP Problem - Checked by Vexira - Jim Hendrick (Mar 12)
RE: SNORT and Linux 8.0 Jim Hendrick (Feb 02)
RE: Multi-homed Sensor Jim Hendrick (Jan 30)
RE: RE: Snort not logging to the /var/log/snort/alertfile Jim Hendrick (Mar 24)
RE: Icmp Ping Jim Hendrick (Mar 18)
RE: Snort Performance Jim Hendrick (Mar 26)
RE: Snort not logging to the /var/log/snort/alert file Jim Hendrick (Mar 24)
RE: Great news! Snort not logging to the /var/log/snort/aler tfile Jim Hendrick (Mar 25)
RE: Icmp Ping Jim Hendrick (Mar 18)
RE: PLEASE HELP HERE. Jim Hendrick (Feb 09)

Jimmy Norton

Snort Virus Detector Jimmy Norton (Mar 29)

Jim Patterson

Re: Problem with ethercard and promiscuous mode Jim Patterson (Mar 31)
Problem with ethercard and promiscuous mode Jim Patterson (Mar 29)

jim_patterson

[Snort-users]Problem with configuration jim_patterson (Jan 27)

Jim Terry

Tuning Signatures Jim Terry (Mar 13)

Jinqiao Yu

How to modify the signature reference in sid-msg.map Jinqiao Yu (Jan 31)
Please help. Why I can't post in this list? My message bodies were alwasy cut. Jinqiao Yu (Jan 12)
snort reference Jinqiao Yu (Jan 10)
How to modify the signature reference in sid-msg.map Jinqiao Yu (Jan 31)
snort reference Jinqiao Yu (Jan 11)
snort reference Jinqiao Yu (Jan 13)

Jochen

detecting fragmented portscan with snort 2.1.0 Jochen (Jan 23)

Jochen Vogel

Rule Flow Jochen Vogel (Mar 04)
Barnyard Problem with Payload and IPHeader Jochen Vogel (Mar 31)
Barnyard payload Jochen Vogel (Mar 05)

Joe Matusiewicz

Re: Flowbits Joe Matusiewicz (Feb 24)

Joe McAlerney

Re: Status of IDMEF support? Joe McAlerney (Jan 27)

Joe Oligny

Re: Snort failing to start... Joe Oligny (Feb 19)

Joerg Abdinghoff

Winpcap 3.1 beta and Snort Joerg Abdinghoff (Mar 25)

Joe Stewart

Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Joe Stewart (Jan 28)

John

mostly an (my)sql question. John (Mar 01)
ACID: Unknown Database type specified: a DBtype of " was specified John (Mar 17)
RE: mostly an (my)sql question. John (Mar 01)
ACID: Unknown Database type specified: a DBtype of " was specified (2) John (Mar 17)

John Brewer

Getting Snort.org SID's with acid John Brewer (Jan 23)
libmysqlclient.so.12 error when I start snort. John Brewer (Jan 30)

John Ceballos-contr

Installing Snort on SuSe Linux machine John Ceballos-contr (Jan 29)

John Creegan

RE: Is snort dropping packets John Creegan (Mar 24)
RE: Port scans not showing up in ACID. John Creegan (Feb 05)
Duplicate key errors in ACID John Creegan (Feb 10)
RE: SNORT and Linux 8.0 John Creegan (Feb 02)
Re: Is snort dropping packets John Creegan (Mar 24)
Duplicates in ACID John Creegan (Feb 10)
RE: snort: database: mysql_error: Duplicate entry John Creegan (Feb 02)
Duplicate alerts John Creegan (Feb 04)
RE: Updating Rules? John Creegan (Feb 12)
Re: Is snort dropping packets John Creegan (Mar 23)
RE: Port scans not showing up in ACID. John Creegan (Feb 05)
Duplicate entries John Creegan (Jan 30)
Re: portscan2 - display which ports scanned in acid John Creegan (Mar 19)
RE: Port scans not showing up in ACID. John Creegan (Feb 05)
RE: Port scans not showing up in ACID. John Creegan (Feb 05)
Re: Is ACID Dead? John Creegan (Jan 15)

john greene

commercial installations ? john greene (Mar 11)
winsnort install john greene (Mar 15)
installing snort ? john greene (Mar 10)
Snort install john greene (Mar 14)

John Guenin

Snort, Logging, and Windows 2000 John Guenin (Jan 16)

John Redrichs

Nmap Scan Not Detected John Redrichs (Mar 03)

John Sage

Aberrant alerts with snort 2.1.0 build 9 John Sage (Feb 05)
Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
Re: snort.org and sourcefire.com resolving no more? John Sage (Mar 03)
Re: Barnyard 0.1.0 and the "unable to find mysqlclient library" issue John Sage (Jan 19)
Reserved characters in msg:"..."? John Sage (Feb 16)

John Steele

Edit Snort's Source Code John Steele (Jan 05)
Edit Snort's Source Code John Steele (Jan 03)

John York

drowning in http inspect NON RFC character alerts John York (Feb 04)
RE: MyDoom Outbound Impossible Detects John York (Feb 06)
simple rule help--detect unauthorized servers John York (Mar 03)

Jon

Question about snortcenter on OpenBSD 3.4 Jon (Jan 28)

jonasb

Sensor Hardware jonasb (Mar 08)

Jon Doe

snort postgresql rpm problem Jon Doe (Mar 01)

Jon Godin

Can't connect to local MySQL server through socket Jon Godin (Jan 06)

Jose_Maria_Gonzalez

odd traffic Jose_Maria_Gonzalez (Mar 29)

Josh Berry

Security Event Management for Linux Josh Berry (Jan 26)
Re: ACID gives erroneous information Josh Berry (Feb 29)
Re: Snort Mysql Acid Combo Josh Berry (Feb 04)
Re: [Snort-sigs] Reporting false positive for Snort rule Josh Berry (Feb 24)
Re: alert_syslog Josh Berry (Feb 06)
Re: Please virus scan your systems Josh Berry (Feb 11)
RE: Snort Deployment Suggestions Josh Berry (Feb 25)
RE: Question about best hardware Josh Berry (Mar 08)
Snort-Perl Plugin Josh Berry (Jan 14)
More TCP Reset Questions Josh Berry (Mar 01)
Re: P2P Rules and Sending TCP Resets. Josh Berry (Feb 27)
RE: Question about best hardware Josh Berry (Mar 10)
OpenSource Alternative to SourceFire's RNA Josh Berry (Mar 30)
Re: TCP Resets Josh Berry (Feb 27)
Re: Snort errors on startup -- rules related? Josh Berry (Jan 28)
Re: More TCP Reset Questions Josh Berry (Mar 01)
RE: Question about best hardware Josh Berry (Mar 10)
Re: Snort Deployment Suggestions Josh Berry (Feb 25)
Network Bypass Josh Berry (Feb 05)
TCP Resets Josh Berry (Feb 27)
Re: snort doesn't write to mysql Josh Berry (Mar 01)
Re: Acid/Snort not logging UDP packets Josh Berry (Mar 01)
Re: OpenSource Alternative to SourceFire's RNA Josh Berry (Mar 31)
Re: Newbie Josh Berry (Feb 27)
Re: Asymmetric routing and IDS correlation ? Josh Berry (Mar 23)
Re: TCP Resets Josh Berry (Feb 27)
Re: Problem with ethercard and promiscuous mode Josh Berry (Mar 30)
Re: Detecting http 'basic-auth' brute force Josh Berry (Mar 23)
ACID Alert Cache Josh Berry (Jan 22)
RE: Is ACID Dead? Josh Berry (Jan 16)

Josh . Sakofsky

Re: Segmentation Fault Josh . Sakofsky (Jan 12)

Joshua McDowell

Another question... Joshua McDowell (Jan 11)
Please help me... Joshua McDowell (Jan 11)
correction Joshua McDowell (Jan 11)
Please help me.. (Last tiem I will send this out, don't think it made it the first time) Joshua McDowell (Jan 11)
test Joshua McDowell (Jan 11)

Joshua Wright

Status of IDMEF support? Joshua Wright (Jan 27)

JP Vossen

Re: Remotely monitor a switch port... JP Vossen (Feb 24)
Re: Remotely monitor a switch port... JP Vossen (Feb 23)
Re: 2.1.0 compile problems... JP Vossen (Feb 23)
Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 11)
RE: snort postgresql rpm problem JP Vossen (Mar 01)
'mysql_error: Duplicate entry', what am I doing wrong? JP Vossen (Mar 18)
RE: Help with a new rule to detect web traffic JP Vossen (Feb 05)
RE: one IP JP Vossen (Feb 05)
Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 12)
Looking for Perl archive script for Snort with ACID and MySQL JP Vossen (Mar 07)
Re: SNORT (Linux) / MySQL (Win32) JP Vossen (Feb 09)
Re: [rpms] snort-mysql rpm JP Vossen (Feb 09)
RE: Embedded SPEC incorrect in v2.1.1 JP Vossen (Mar 04)
RE: custom sig file JP Vossen (Mar 04)

jrhendri

Re: www.snort.org down? jrhendri (Mar 03)

jthomas

Snort (2.1), MySQL (4 up), Barnyard (0.1.0) jthomas (Jan 09)

jwang

Questions about alerts from TCPDUMP jwang (Mar 30)
How to achieve alerts from tcpdump files? jwang (Mar 29)
failure to generate alerts from tcpdump file jwang (Mar 10)

Kanatoko

uricontent easily evaded on Apache Kanatoko (Mar 20)

Kaplan, Andrew H.

RE: Frontends for Snort Kaplan, Andrew H. (Jan 21)

Karl Sjödahl

old versions of snort? Karl Sjödahl (Feb 11)

Karpo, Derrick

Re: listening 2 interfaces at once? Karpo, Derrick (Mar 19)

Keaton, Lindamaria

RE: Can't connect to local MySQL server through socket Keaton, Lindamaria (Jan 06)

keith-list

Re: Setup & Configure Snort 2.1.1 on Windows XP? keith-list (Mar 09)

Keith Pachulski

RE: Snort 1U Appliance for Sale on EBay Keith Pachulski (Mar 01)

Keith W. McCammon

Re: Where Can i get any open standart for IDS Keith W. McCammon (Jan 27)
Re: Is there any statistic for snort rules false positive alert? Keith W. McCammon (Mar 31)
Re: (no subject) Keith W. McCammon (Feb 22)
Re: Please virus scan your systems Keith W. McCammon (Feb 11)
Re: SNORT and Linux 8.0 Keith W. McCammon (Feb 02)

Kelly Slavens

Help needed with confusing issue... Kelly Slavens (Jan 15)

Keming

one IP Keming (Feb 04)

Ken Bergquist

snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 12)
Re: snort-2.2.1-RC1 compile error Ken Bergquist (Feb 16)
snort-2.2.1-RC1 compile error Ken Bergquist (Feb 11)

Kevin Amorin

preprocessor flow-portscan Kevin Amorin (Jan 29)

Koay Yee Chen

snort 2.1.0 bugs ? Koay Yee Chen (Jan 27)
where can i find ms_unicode_generator Koay Yee Chen (Jan 06)
snort 2.1.0 bugs ? Koay Yee Chen (Jan 27)
where can i find ms_unicode_generator Koay Yee Chen (Jan 06)

Koren, Alexander

RE: Building snort w/ mysql support Koren, Alexander (Feb 25)
Truncated UDP Header Koren, Alexander (Mar 21)

Koski, Brian

Snort log no longer updating Koski, Brian (Mar 16)

Kreimendahl, Chad J

RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
RE: Snort 1U Appliance for Sale on EBay Kreimendahl, Chad J (Feb 27)
RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
RE: Hummm... Kreimendahl, Chad J (Mar 15)
RE: Snort Deployment Suggestions Kreimendahl, Chad J (Feb 25)
RE: Snort with Oracle Kreimendahl, Chad J (Jan 20)
RE: Question about best hardware Kreimendahl, Chad J (Mar 09)
RE: Question about best hardware Kreimendahl, Chad J (Mar 05)
RE: Hummm... Kreimendahl, Chad J (Mar 16)
RE: Hummm... Kreimendahl, Chad J (Mar 17)
RE: portscan2 - display which ports scanned in acid Kreimendahl, Chad J (Mar 19)
RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)

Kris

(no subject) Kris (Mar 30)

Kristofer T. Karas

Re: Demark PureSecure questions Kristofer T. Karas (Mar 04)
Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" Kristofer T. Karas (Feb 27)
Re: Managing many sensors Kristofer T. Karas (Jan 02)
Re: Flexresp question Kristofer T. Karas (Mar 05)
Re: Off topic- Your Favorite Linux Distro Kristofer T. Karas (Jan 30)

Kromodimedjo, John

RE: TCP and ACID Kromodimedjo, John (Mar 31)
SQL error with WinSnort and ACID Kromodimedjo, John (Mar 25)
RE: TCP and ACID Kromodimedjo, John (Mar 31)
TCP and ACID Kromodimedjo, John (Mar 31)

KS

Snort dropping packets KS (Feb 02)
RE: Installing Snort on SuSe Linux machine KS (Jan 30)

Kumar, Manoj

RE: [Snort-devel] Snort 2.1.1 final is available! Kumar, Manoj (Feb 25)
RE: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 25)
RE: [Snort-devel] SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 27)
SNORT has memory leak on Linux Red hat 9 Kumar, Manoj (Feb 27)

labyed souad

problem mysql labyed souad (Mar 25)

Lance Boon

Snort sensor setup Lance Boon (Mar 23)

Lane LiaBraaten

Apache Whitespace and Bare Byte Unicode Encoding Lane LiaBraaten (Mar 24)

larosa, vjay

RE: SNORT Rule for netbios brute force break-in larosa, vjay (Feb 11)
RE: [Snort-sigs] Signature for "W32_Novarg_SCO_DOS" larosa, vjay (Jan 27)
RE: MS-SQL Worm propagation -false positive larosa, vjay (Jan 08)

Laura

Snort Performance Laura (Mar 26)
RE: Snort Performance Laura (Mar 26)

Leonard Miller

Re: Re: Which Linux distro for a Win32 Snort admin? Leonard Miller (Jan 08)
Re: MySql + Snort config errors (yet again) Leonard Miller (Jan 08)
Re: mysql_error: Access denied for user: 'snort@localhost' (Using password: YES) Leonard Miller (Jan 06)
Re: Error Installing PHP Leonard Miller (Jan 14)
Re: Which Linux distro for a Win32 Snort admin? Leonard Miller (Jan 08)

Lin Zhong

Is there any statistic for snort rules false positive alert? Lin Zhong (Mar 31)
how to fast locate the rule by the alert? Lin Zhong (Mar 15)
What does the number in the binary log file name mean? Lin Zhong (Mar 18)

List Mail

RE: Using snort to listen on a nic without an IP List Mail (Jan 21)

lists

Re: Is ACID Dead? lists (Jan 16)

Lucretia Enterprises

RE: [OT] - RE: Repost: resp:rst_all not working Lucretia Enterprises (Mar 05)
RE: Icmp Ping Lucretia Enterprises (Mar 19)
RE: ACID: Unknown Database type specified: a DBtype of " was specified Lucretia Enterprises (Mar 17)

Luis Claudio R. da Silveira

Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 08)
Problems with links in ACID Luis Claudio R. da Silveira (Mar 09)
Re: Sensor logging at remote mysql db Luis Claudio R. da Silveira (Mar 09)
Snort+iptables in the same machine Luis Claudio R. da Silveira (Mar 11)

Luong, Natalie N

error while trying to install snort v2.1.1 with mySql v4.0.18 Luong, Natalie N (Mar 24)
log files Luong, Natalie N (Mar 17)

Lynn

Page not available Lynn (Feb 27)

Maetzky (extern)

snort/mudpit - status Maetzky (extern) (Mar 31)

Maetzky, Steffen (Extern)

Barnyard and duplicate entries Maetzky, Steffen (Extern) (Mar 29)
Duplicate entry message Maetzky, Steffen (Extern) (Mar 26)
Snort/Barnyard/MySQL/ACID - Duplicate entry Maetzky, Steffen (Extern) (Mar 29)

mailing-list

Multihomed Sensor mailing-list (Jan 27)
RE: Multihomed Sensor mailing-list (Jan 31)

Marcin Laskowski

undefined reference to `errno` ?? Marcin Laskowski (Mar 04)
Re: portscan2 - display which ports scanned in acid Marcin Laskowski (Mar 19)
undefined reference to `errno` ?? Marcin Laskowski (Mar 02)
Re: problem with ACID (portscan) Marcin Laskowski (Mar 17)
problem with snort and guardian Marcin Laskowski (Mar 26)
active response + managing sensors Marcin Laskowski (Mar 24)

marcio

(no subject) marcio (Feb 23)

Marc Quibell

Snort Performance issues Marc Quibell (Jan 31)

Marc Spitzer

Re: Multi-homed Sensor Marc Spitzer (Jan 31)

Mario Guerendo

Simple configuration Mario Guerendo (Feb 22)
Snort install Mario Guerendo (Mar 14)

Mario Soto Cordones

SNORT IN MULTIPLE INTERFACE CARD Mario Soto Cordones (Feb 24)
Snort problem with postgresal Mario Soto Cordones (Feb 23)
ERROR: unknown preprocessor "ø~_decode" Mario Soto Cordones (Feb 23)

Mark E. Donaldson

RE: snort gui management tool Mark E. Donaldson (Mar 22)
RE: 'mysql_error: Duplicate entry', what am I doing wrong? Mark E. Donaldson (Mar 19)
RE: Building snort w/ mysql support Mark E. Donaldson (Feb 25)
RE: TTL LIMIT Exceeded Mark E. Donaldson (Mar 26)
RE: Windows Set-up Mark E. Donaldson (Mar 06)
RE: Exhausted - SNORT not logging to MySQL database Mark E. Donaldson (Mar 20)
RE: Adware/Malware Rules List Mark E. Donaldson (Feb 29)
RE: Simple configuration Mark E. Donaldson (Feb 22)
RE: Please help here Mark E. Donaldson (Jan 31)

Mark Fagan

Re: Snort in VMware Mark Fagan (Feb 19)
Re: config PHP for Snort in RH9 Mark Fagan (Feb 19)
RE: Snort on Linux with no IP Mark Fagan (Feb 23)
Re: Snort Mysql Acid Combo Mark Fagan (Feb 04)

Mark McDonagh

taps What Brand and Where in network Mark McDonagh (Jan 12)

Mark Nipper

Re: Off topic- Your Favorite Linux Distro Mark Nipper (Jan 31)

Mark Olbert

barnyard question Mark Olbert (Feb 23)
double decoding attack Mark Olbert (Feb 29)
Compiling mysql support into snort and barnyard Mark Olbert (Feb 22)
barnyard file reading question Mark Olbert (Feb 22)
Newbie Notes and Question on Rule Creation Mark Olbert (Feb 23)

Mark Reis

Using snort to listen on a nic without an IP Mark Reis (Jan 21)
Using snort to listen on a nic without an IP Mark Reis (Jan 22)

Mark Sargent

RE: Unzipping Question Mark Sargent (Mar 22)
Unzipping Question Mark Sargent (Mar 21)

Mark . Schutzmann

Snort Abend after BAD-TRAFFIC Mark . Schutzmann (Mar 21)
Re: Bad Loop Back Traffic Mark . Schutzmann (Feb 27)
Re: snort and tap ethernet Mark . Schutzmann (Mar 30)
W32.Beagle.J Worm Signature? Mark . Schutzmann (Mar 03)
Re: FIltering out Internal Mail Logging Mark . Schutzmann (Mar 16)
Cisco Device Exploit Perl Script Mark . Schutzmann (Mar 30)
Re: Snort en mode NIDS Mark . Schutzmann (Mar 30)
RE: Cisco Device Exploit Perl Script Mark . Schutzmann (Mar 31)
Re: Noisy Rules Mark . Schutzmann (Mar 04)
Re: Snort Abend after BAD-TRAFFIC Mark . Schutzmann (Mar 21)
Re: Snort Performance Mark . Schutzmann (Mar 26)

Mark Zerr

Not alerting TCP. Mark Zerr (Feb 13)

Marlon . Richards

DNS server keeps communicating with Darkprofits.net and darkprofits.com Marlon . Richards (Feb 02)

Marnus Marx

Snort capabilities Marnus Marx (Mar 25)

Martin Bündgens

Performance Question Martin Bündgens (Feb 19)
Snort check Martin Bündgens (Mar 24)

Martinelli Paolo A.

Using ACID with PostgreSQL 7.4.1 Martinelli Paolo A. (Jan 12)

Martin Jr., D. Michael

RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? Martin Jr., D. Michael (Jan 28)
RE: MyDoom/Novarg Martin Jr., D. Michael (Jan 30)
RE: SNORT and VLans Martin Jr., D. Michael (Feb 26)

Martin McKeay

Suppression configuration reading IP address backwards? Martin McKeay (Jan 12)

Martin Olsson

Re: Libprelude working with snort 2.1.x Martin Olsson (Jan 22)
Re: MS-SQL Worm propagation -false positive Martin Olsson (Jan 09)
Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
Re: How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
Libprelude working with snort 2.1.x Martin Olsson (Jan 22)
Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
Re: Snort Mysql Acid Combo Martin Olsson (Feb 04)
Re: *BSD performance (was:Correct version of libpcap?) Martin Olsson (Feb 04)
How do I supress file-logging but not database-logging? Martin Olsson (Jan 21)
Re: Differences Between Versions Martin Olsson (Jan 16)

Martin Roesch

Re: messages to syslog at startup. Martin Roesch (Jan 17)
Re: Hummm... Martin Roesch (Mar 15)
Re: Hummm... Martin Roesch (Mar 15)
Re: Hummm... Martin Roesch (Mar 15)
Re: Unified log format. Martin Roesch (Jan 17)
Re: Disable alerts from certain machines Martin Roesch (Mar 31)
Re: RE: Segmentation Fault Martin Roesch (Jan 10)
Re: Hummm... Martin Roesch (Mar 17)
Re: Why is this rule still being tripped? Martin Roesch (Jan 17)
Re: snort rules with OS info? Martin Roesch (Feb 13)
Re: Hummm... Martin Roesch (Mar 16)
Re: Hummm... Martin Roesch (Mar 15)
Re: snort-2.2.1-RC1 compile error Martin Roesch (Feb 13)
Re: (spp_frag2) Oversized fragment, probable DoS Martin Roesch (Feb 13)
Re: Why is this rule still being tripped? Martin Roesch (Jan 10)
Re: CVS FAQ? (snort and barnyard issues) Martin Roesch (Mar 15)
Re: Reserved characters in msg:"..."? Martin Roesch (Feb 17)
Re: Snort logging way too much Martin Roesch (Feb 13)

Mary M. Chaddock

portscan.log Mary M. Chaddock (Mar 22)

Mat Harris

Re: www.snort.org down? Mat Harris (Mar 03)
Re: no alerts logged Mat Harris (Jan 15)
Re: www.snort.org down? Mat Harris (Mar 03)
portscan but no rules - Was: Re: no alerts logged Mat Harris (Jan 16)
Re: Bad Loop Back Traffic Mat Harris (Feb 24)
no alerts logged Mat Harris (Jan 15)

Matteo

snort db update Matteo (Mar 16)
Obtain CVE id from unix sock output of Snort Matteo (Feb 03)
retrieve IDS from unix sock Matteo (Feb 02)

Matt Kettler

Re: non-root user cannot run snort Matt Kettler (Jan 27)
Re: Please virus scan your systems Matt Kettler (Feb 11)
Re: Snort and VPN Matt Kettler (Feb 16)
Re: Viirus rules Matt Kettler (Feb 02)
Re: Snort with Oracle Matt Kettler (Jan 20)
Re: Snort failing to start... Matt Kettler (Feb 19)
Re: react: block not working Matt Kettler (Feb 06)
Re: Repost: resp:rst_all not working Matt Kettler (Mar 08)
Re: Unzipping Question Matt Kettler (Mar 21)
Re: react: block not working Matt Kettler (Feb 06)
Re: More TCP Reset Questions Matt Kettler (Mar 01)
Re: Tell snort to resolve ip or use /etc/hosts? Matt Kettler (Jan 14)
Re: Snort Implementation Matt Kettler (Jan 13)
Re: Snort Variables Matt Kettler (Feb 06)
Re: OT New information about clamav Matt Kettler (Feb 20)
Re: snort ssl plug-in Matt Kettler (Jan 13)
Re: Detection of subnet scan activity Matt Kettler (Jan 05)
Re: Temporary "solution" to MyDoom worm Matt Kettler (Jan 31)
Re: Is IPTables blocking Snort detection? Matt Kettler (Jan 19)
RE: where can i find ms_unicode_generator Matt Kettler (Jan 06)
Re: installing snort ? Matt Kettler (Mar 10)
Re: Snort dropping packets Matt Kettler (Feb 02)
Re: Block Matt Kettler (Feb 17)
Re: More TCP Reset Questions Matt Kettler (Mar 01)
Re: Snort code Matt Kettler (Mar 31)
Re: how to start to read the snort source code Matt Kettler (Feb 03)
Re: Block Matt Kettler (Feb 16)
Re: filters Matt Kettler (Feb 11)
RE: SNORT and Linux 8.0 Matt Kettler (Feb 02)
Re: false positive generator Matt Kettler (Feb 10)
Re: Stupid question re: message archives ... Matt Kettler (Jan 14)
Re: anomalous http server Matt Kettler (Feb 18)
Re: Snort-inline in embedded device Matt Kettler (Jan 31)
Re: Snort readng across switches? Matt Kettler (Jan 26)
Re: monitoring only occuring on snort host Matt Kettler (Feb 03)
Re: Documentation!! Matt Kettler (Feb 11)
Re: Technically speaking Matt Kettler (Mar 31)
Re: Snort check Matt Kettler (Mar 24)
Re: snort reference Matt Kettler (Jan 13)
Re: Simple questions. Matt Kettler (Jan 14)
Re: Some thoughts on IDS types - request for clarification :) Matt Kettler (Feb 12)
Re: failure to generate alerts from tcpdump file Matt Kettler (Mar 10)
Re: Documentation!! Matt Kettler (Feb 11)
Re: HOME_NET Matt Kettler (Feb 10)
Re: Snort and VPN Matt Kettler (Feb 16)
Re: Change path for compiler Matt Kettler (Feb 18)
Re: What to do with malicius encrypted code!??i Matt Kettler (Feb 03)
Re: Hey the option Dsize is useful against the buffer overflows ? Matt Kettler (Jan 19)
Re: have i been banned Matt Kettler (Mar 05)
Re: New snort rule for WORM_NETSKY.B yet PLEASE??? Matt Kettler (Feb 18)
Re: Repost: resp:rst_all not working Matt Kettler (Mar 05)
Re: snort 2.1 and stream4 Matt Kettler (Jan 30)
Re: one IP Matt Kettler (Feb 04)
Re: Hey, how could i delete the alert log cuz /var is full Matt Kettler (Jan 16)
Re: Question on snort redirecting Matt Kettler (Feb 04)

Matt Southworth

Re: 'mysql' support is not compiled...OH YES IT IS Matt Southworth (Jan 27)
Re: Please virus scan your systems Matt Southworth (Feb 11)

Mauricio Smythe

numbers meaning Mauricio Smythe (Jan 12)

Maxim

problem with ACID (portscan) Maxim (Mar 17)

Max Valdez

Re: problem with snort and guardian Max Valdez (Mar 27)
TCP port 0 traffic Max Valdez (Mar 26)
Re: Duplicate entry message Max Valdez (Mar 26)
Re: Adware/Malware Rules List Max Valdez (Mar 01)
Re: False Positive or not? Max Valdez (Mar 30)

McCash, John

Is ACID Dead? McCash, John (Jan 15)
ACID 2.0? McCash, John (Mar 11)
RE: Is ACID Dead? McCash, John (Jan 15)
header/alert mixup bug(s) in snort 2.1.0? McCash, John (Feb 13)
remote tcpdump output & analysis (database) McCash, John (Jan 31)
MyDoom Outbound Impossible Detects McCash, John (Feb 06)
Re: MyDoom Outbound Impossible Detects McCash, John (Feb 11)
Event Correlation or Incident Management for Snort Database? McCash, John (Mar 19)
RE: Event Correlation or Incident Management for Snort Database? McCash, John (Mar 19)
FW: remote tcpdump output & analysis (database) McCash, John (Jan 30)
Re: MyDoom Outbound Impossible Detects McCash, John (Feb 11)
Re: MyDoom Outbound Impossible Detects McCash, John (Feb 06)

MEGA Hospedagem

setting rules for snortsam MEGA Hospedagem (Mar 22)

mel

Re: config PHP for Snort in RH9 mel (Feb 19)

metthewm

error start snort metthewm (Feb 04)

MH

Re: Truncated TCP options? MH (Jan 22)

Micah Powell

Snort 2.1.0 and http_decode issue Micah Powell (Jan 12)

Michael Anderson

Re: Is ACID Dead? Michael Anderson (Jan 15)

Michael Boman

Re: Feature request: thresholds need another counter? Michael Boman (Mar 19)
Re: building snort from CVS Michael Boman (Mar 16)
Re: snort signature updates Michael Boman (Jan 06)
Re: Build problem with Snort CVS Michael Boman (Jan 12)
Re: Help needed with logs Michael Boman (Feb 03)
Re: Upgrading from 2.0 to 2.1? Michael Boman (Jan 12)
Re: odd traffic Michael Boman (Mar 29)
Re: I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. Michael Boman (Jan 02)
Re: [Looking for] Open source reporting tool Michael Boman (Feb 01)
RE: HOME_NET var on snort.conf Michael Boman (Mar 22)
Re: hi, are there the signatures or rules of the new local bugs ,, do_mremap and do_brk() ??? Michael Boman (Jan 13)
Re: Multi-homed Sensor Michael Boman (Jan 30)
Re: Quick stupid question Michael Boman (Jan 30)
Re: Logsnorter problem Michael Boman (Mar 19)

Michael Chapman

RE: no alerts logged Michael Chapman (Jan 16)
RE: no alerts logged Michael Chapman (Jan 15)
RE: no alerts logged Michael Chapman (Jan 16)
Question regarding creating rules in Snortcenter ... Michael Chapman (Feb 12)
Stupid question re: message archives ... Michael Chapman (Jan 14)
RE: Understanding what I am seeing - MS-SQL worm propagation attempt ... Michael Chapman (Jan 19)

Michael Karl

SNORT and Linux 8.0 Michael Karl (Feb 02)

Michael Little

Snort Inline on Redhat 9 Michael Little (Jan 08)
Yahoo Instant Messenger Michael Little (Jan 18)

Michael Miller

RE: Question about best hardware Michael Miller (Mar 08)
RE: Making zero headway with barnyard Michael Miller (Mar 19)
Making zero headway with barnyard Michael Miller (Mar 18)
RE: CVS FAQ? (snort and barnyard issues) Michael Miller (Mar 15)
RE: Making zero headway with barnyard Michael Miller (Mar 19)
CVS FAQ? (snort and barnyard issues) Michael Miller (Mar 15)

Michael . Mulholland

Re: Updating new virus signatures Michael . Mulholland (Jan 28)
Question about passwd file Michael . Mulholland (Mar 10)
Michael Mulholland/ISU/DFP is out of the office. Michael . Mulholland (Feb 17)
Viirus rules Michael . Mulholland (Feb 02)

Michael Pacheco

RE: Is ACID Dead? Michael Pacheco (Jan 16)

Michael Richardson

Re: Asymmetric routing and IDS correlation ? Michael Richardson (Mar 25)

Michael Scheidell

www.snort.org down? Michael Scheidell (Mar 03)
www.snort.org down? Michael Scheidell (Mar 03)

Michael Sconzo

Re: Question about best hardware Michael Sconzo (Mar 04)
Re: RE: Snort not logging to the /var/log/snort/alert file Michael Sconzo (Mar 24)

Michael Shirk

Looking for those who use LogSnorter Michael Shirk (Mar 11)
RFC: SHELLCODE and WEDAV alerts Michael Shirk (Mar 18)

Michael Steele

RE: FATAL ERROR: database: mysql_error: Access denied for user: 'snor t@localhost' (Using password: YES) Michael Steele (Jan 06)
RE: ACID and delete alerts Michael Steele (Feb 16)
RE: mysql_error: Access denied for user: 'snort@localhost' (Using pas sword: YES) Michael Steele (Jan 06)
Linux: RPM's 2.0.6 and 2.1.0 Updates? Michael Steele (Jan 05)
RE: ACID modification Michael Steele (Mar 01)
RE: Re: Snort-users] ACID PHP MYSQL ERROR Michael Steele (Feb 11)
RE: Sensor logging at remote mysql db Michael Steele (Mar 08)
RE: Snort performance Michael Steele (Feb 02)
RE: SNORT (Linux) / MySQL (Win32) Michael Steele (Feb 10)
Using ACID with Snort 2.1.0? Michael Steele (Feb 01)
RE: ACID and delete alerts Michael Steele (Feb 17)
RE: TCP and ACID Michael Steele (Mar 31)
RE: RE: No portscan still on ACID Michael Steele (Mar 09)
Hummm... Michael Steele (Mar 12)
RE: Documentation!! Michael Steele (Feb 12)
RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
RE: Snort sensor setup Michael Steele (Mar 23)
RE: Snort not loging on MySql Michael Steele (Feb 02)
RE: Hummm... Michael Steele (Mar 15)
RE: Win32 - multiple interfaces? Michael Steele (Jan 01)
RE: RULES -> Unknown ClassType: Michael Steele (Feb 10)
RE: Newbie Michael Steele (Feb 28)
RE: Email Michael Steele (Feb 12)
RE: cannot resolve host error Michael Steele (Jan 05)
RE: ACID Michael Steele (Feb 12)
RE: Port scans not showing up in ACID. Michael Steele (Feb 05)
RE: Page not available Michael Steele (Feb 27)
RE: Email Notification Methods? Michael Steele (Feb 04)
RE: Snort Mysql Acid Combo Michael Steele (Feb 04)
RE: Hummm... Michael Steele (Mar 14)
RE: Port scans not showing up in ACID. Michael Steele (Feb 04)
RE: invalid event id, eventlog, win32 Michael Steele (Feb 09)
WINSNORT.com Announcement: MANDRAKE 9.2 Install Guide added Michael Steele (Feb 07)
RE: Mysql is collecting data from snort, Acid won't display it. Michael Steele (Feb 14)
RE: Exhausted - SNORT not logging to MySQL database Michael Steele (Mar 20)

Michael Stone

Re: Question about best hardware Michael Stone (Mar 09)
Re: Dual Processor Machines Michael Stone (Jan 13)
Re: Snort in VMware Michael Stone (Feb 23)

Michael Thompson

Please help with this strangeness Michael Thompson (Jan 14)
Differences Between Versions Michael Thompson (Jan 15)

Michael W. Lucas

Snort setting off my pager Michael W. Lucas (Jan 16)
Build problem with Snort CVS Michael W. Lucas (Jan 07)
Re: Build problem with Snort CVS Michael W. Lucas (Jan 07)

Micheal.Cottingham

react: block not working Micheal.Cottingham (Feb 06)
Re: react: block not working Micheal.Cottingham (Feb 06)

Mike Cohen

Question about best hardware Mike Cohen (Mar 04)

Mike Koponick

LogRep Mike Koponick (Mar 10)
RE: Documentation!! Mike Koponick (Feb 12)

Mike Maki

Filter Out a Snort Decoder Mike Maki (Jan 05)

mik sib

Snort Performance mik sib (Jan 09)

Miner, Jonathan W

Snort/mysql/acid and dshield.org Miner, Jonathan W (Mar 01)

M. Morgan

MySql + Snort config errors (yet again) M. Morgan (Jan 08)
Re: cost/benefit analysis of running Snort M. Morgan (Jan 30)
Re: IPless interface on Debian... M. Morgan (Feb 11)
Re: Question about best hardware M. Morgan (Mar 05)
Re: Snort Mysql Acid Combo M. Morgan (Feb 04)
Re: Ethernet Tap Question M. Morgan (Feb 02)
Re: Block M. Morgan (Feb 16)
Re: Snort Sensor M. Morgan (Feb 06)
Re: Snort in VMware M. Morgan (Feb 19)
Re: problem logging M. Morgan (Feb 10)
Email Notification Methods? M. Morgan (Feb 04)
Re: Off topic- Your Favorite Linux Distro M. Morgan (Feb 01)
Re: no alerts logged M. Morgan (Jan 15)
Re: Snort in VMware M. Morgan (Feb 18)
Re: PLEASE HELP HERE. M. Morgan (Feb 09)
Re: Attack Detection: Then what M. Morgan (Jan 25)
Re: Using snort to listen on a nic without an IP M. Morgan (Jan 21)
Snort readng across switches? M. Morgan (Jan 26)

mohan Sharma

Help need in Snort configuration mohan Sharma (Mar 05)

msalmanf

HOME_NET msalmanf (Feb 09)

M. Salman Farisi

Re: New version (1.3) of SnortSlinger available M. Salman Farisi (Feb 20)
how to enable portscan alert M. Salman Farisi (Feb 19)
Re: Different Portscan format under 2.1.0 to 2.0.5 M. Salman Farisi (Feb 15)
Re: SNORT (Linux) / MySQL (Win32) M. Salman Farisi (Feb 10)
Error snort -c -T /etc/snort/snort.conf M. Salman Farisi (Feb 25)
Re: Alerts of "(http\_inspect) NON-RFC DEFINED CHAR" M. Salman Farisi (Feb 27)
RE: Building snort w/ mysql support M. Salman Farisi (Feb 25)

MVIBE

Re: SNORT (Linux) / MySQL (Win32) MVIBE (Feb 10)
SNORT (Linux) / MySQL (Win32) MVIBE (Feb 09)
ACID PHP MYSQL ERROR MVIBE (Feb 11)
Re: RULES -> Unknown ClassType: MVIBE (Feb 10)
RULES -> Unknown ClassType: MVIBE (Feb 10)
Re: Snort-users] ACID PHP MYSQL ERROR MVIBE (Feb 11)

Nadia Guerroumi

Order on snort rules Nadia Guerroumi (Jan 29)

naganandas

snort tsnmp trap naganandas (Feb 13)
snort sending snmp traps naganandas (Feb 11)
snort+snmp traps naganandas (Feb 24)
regarding snort rules naganandas (Feb 01)

Natalie Keller

MS-SQL Worm propagation -false positive Natalie Keller (Jan 08)

neil

Re: Detecting use of Anonymous Proxies neil (Mar 19)
Re: Snort permissions problem neil (Mar 18)
RE: How to tell snort version and upgrade neil (Mar 18)
Re: Snort running on two interfaces neil (Mar 18)
Re: HOME_NET var on snort.conf neil (Mar 22)
Re: listening 2 interfaces at once? neil (Mar 19)
Re: Snort en mode NIDS neil (Mar 23)
Re: How to tell snort version and upgrade neil (Mar 18)
Re: Snort inline and ip_queue neil (Mar 19)
Snort inline and ip_queue neil (Mar 19)

Neil Fryer

Info Neil Fryer (Jan 27)
RE: I have a problem with snort.conf Neil Fryer (Feb 24)
RE: Snort MySQL problem Neil Fryer (Jan 23)
RE: Snort MySQL problem Neil Fryer (Jan 23)
Snort MySQL problem Neil Fryer (Jan 23)

Nelson, Gregg

Script to install Snort and required packages Nelson, Gregg (Mar 18)
Snort installation script Nelson, Gregg (Mar 18)

Nerijus Krukauskas

Re: threshold in rule definition and in threshold.conf Nerijus Krukauskas (Jan 12)
threshold in rule definition and in threshold.conf Nerijus Krukauskas (Jan 07)
configure option "enable-linux-smp-stats" Nerijus Krukauskas (Feb 26)

NEWELL Craig -TSDC

snort.conf questions NEWELL Craig -TSDC (Feb 26)

nhdave

Re: Snort install nhdave (Mar 14)

Nicholas Bachmann

Snort 1U Appliance for Sale on EBay Nicholas Bachmann (Feb 26)
Re: Snort 1U Appliance for Sale on EBay Nicholas Bachmann (Feb 27)

Nick Duda

RE: Demark PureSecure questions Nick Duda (Mar 05)
RE: Email Nick Duda (Feb 13)
RE: SNORT and Linux 8.0 Nick Duda (Feb 02)
RE: Help need in Snort configuration Nick Duda (Mar 05)
RE: syslog messages Nick Duda (Feb 05)
Snort Setup Guide w/Mandrake 9.2 Nick Duda (Jan 16)
RE: Snort setting off my pager Nick Duda (Jan 16)

Nick Hatch

Re: Snort+iptables in the same machine Nick Hatch (Mar 11)

Nick Oliver

Re: Snort Mysql Acid Combo Nick Oliver (Feb 04)

Nigel Houghton

Re: (http_inspect) NON-RFC DELIMITER Nigel Houghton (Mar 02)
Re: Snort-users digest, Vol 1 #3997 - 11 msgs Nigel Houghton (Feb 24)
Re: Snort-users digest, Vol 1 #4045 - 13 msgs Nigel Houghton (Mar 15)
Re: building snort from CVS Nigel Houghton (Mar 16)
Re: How to achieve alerts from tcpdump files? Nigel Houghton (Mar 30)

Noble, Kevin

RE: Integrate Snort with Remedy, Anyone Please??? Noble, Kevin (Feb 12)

Ochronus

Re[2]: Snort logging way too much Ochronus (Feb 13)
snort logging outbound traffic Ochronus (Feb 27)
Re[2]: Snort logging way too much Ochronus (Feb 15)
Snort logging way too much Ochronus (Feb 13)

Ochs, Pam

snort doesn't write to mysql Ochs, Pam (Mar 02)
snort doesn't write to mysql Ochs, Pam (Mar 01)
snort doesn't write to mysql Ochs, Pam (Mar 02)

Ochs, Pamela T [Contr (HPTI)]

snort doesn't write to mysql Ochs, Pamela T [Contr (HPTI)] (Mar 01)

Oliver

ACID Oliver (Feb 09)

Orion Poplawski

Why is this rule still being tripped? Orion Poplawski (Jan 09)
Re: Why is this rule still being tripped? Orion Poplawski (Jan 19)
Re: Why is this rule still being tripped? Orion Poplawski (Jan 13)

Oturan Boga

snort with openbsd and oracle Oturan Boga (Mar 29)

Owais Bin Zuber

Attack Detection: Then what Owais Bin Zuber (Jan 22)

Owen McCusker

Re: Integrate Snort with Remedy, Anyone Please??? Owen McCusker (Feb 12)
Re: Is ACID Dead? Owen McCusker (Jan 16)
Re: alert_syslog Owen McCusker (Feb 06)
RE: Is ACID Dead? Owen McCusker (Jan 15)
Re: Question on snort redirecting Owen McCusker (Feb 04)
Re: Snort 2.1.0 - Shutting up http_inspect on non web servers Owen McCusker (Jan 14)
Re: Is ACID Dead? Owen McCusker (Jan 16)

Ow Mun Heng

Stop logging specific Host & Source service Ow Mun Heng (Jan 08)

Özgüç Bayrak

Scan Nmap, Multicast Address Özgüç Bayrak (Feb 05)

Patrick S. Harper

Document for Snort 2.1.0 on Fedora Core 1 Patrick S. Harper (Feb 08)

Patrick Sitton

Re[2]: Subject: IPless interface on Debian... Patrick Sitton (Feb 12)

Patrik Astrom

Snort 2.1.0, getting mixed up signatures. Patrik Astrom (Jan 20)

Paul . CTR . Passey

Paul CTR Passey is no longer supporting the CSIRC Paul . CTR . Passey (Feb 01)

Paul Lane

Noisy Rules Paul Lane (Mar 04)

Paul Schmehl

Re: OT New information about clamav Paul Schmehl (Feb 20)
Re: Block Paul Schmehl (Feb 16)
Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 16)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Jan 03)
Re: does --enable-flexresp(2) works? Paul Schmehl (Mar 23)
Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Paul Schmehl (Dec 31)
RE: Updating Rules? Paul Schmehl (Feb 12)
Re: Exhausted - SNORT not logging to MySQL database Paul Schmehl (Mar 20)
Re: Block Paul Schmehl (Feb 16)
Re: Promiscuous Mode Paul Schmehl (Mar 20)
Re: unknown:eth0 Paul Schmehl (Jan 02)
Re: HOME_NET var on snort.conf Paul Schmehl (Mar 21)
Re: upgrade to 2.1 Paul Schmehl (Jan 01)
Re: Off topic- Your Favorite Linux Distro Paul Schmehl (Jan 31)
Re: Are there any problems Snort 2.1.1 with ACID v0.9.6b23? Paul Schmehl (Mar 16)
RE: Promiscuous Mode Paul Schmehl (Mar 21)
OT New information about clamav Paul Schmehl (Feb 19)
Re: Updating Rules? Paul Schmehl (Feb 12)
Re: Feature request: thresholds need another counter? Paul Schmehl (Mar 19)

pctech2000

Is anyone getting these? pctech2000 (Jan 11)
Some please help me.. pctech2000 (Jan 11)

Peggy Kam

Need help with Sneeze Peggy Kam (Feb 09)
Re: alert_syslog Peggy Kam (Feb 06)
listening 2 interfaces at once? Peggy Kam (Mar 19)
Help needed with logs Peggy Kam (Feb 02)
false positive generator Peggy Kam (Feb 10)
Re: snort-2.1.0 upgrade error Peggy Kam (Feb 05)
Sneeze Peggy Kam (Feb 06)
How are alerts being logged? Peggy Kam (Feb 02)
(http_inspect) NON-RFC HTTP DELIMITER Peggy Kam (Mar 01)
snort-2.1.0 upgrade error Peggy Kam (Feb 05)
alert_syslog Peggy Kam (Feb 06)

Perrymon, Josh L.

RE: Cisco Device Exploit Perl Script Perrymon, Josh L. (Mar 30)

Pete

unsubscribe Pete (Jan 16)

peter . grosse-hering

AW: Witty worm sig peter . grosse-hering (Mar 23)

Peter Robb

RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
RE: where can i find ms_unicode_generator Peter Robb (Jan 06)
RE: HELP!!!!! Compiling Snort with MYSQL Peter Robb (Jan 06)

Peters, Michael D.

No portscan showing in ACID anymore? Peters, Michael D. (Jan 14)
Simple questions. Peters, Michael D. (Jan 14)
Solaris 9 make error? Peters, Michael D. (Jan 13)
RE: Email Notification Methods? Peters, Michael D. (Feb 05)
Upgrade from 2.0.1 error? Peters, Michael D. (Jan 14)
Portscans not displayed in ACID? Peters, Michael D. (Jan 21)
portscan alerts? Peters, Michael D. (Jan 22)
Port scans not showing up in ACID. Peters, Michael D. (Feb 04)
RE: taps What Brand and Where in network Peters, Michael D. (Jan 12)
RE: installing 2.1.0 on Solaris 8 - problems & solu tions Peters, Michael D. (Jan 13)
RE: Hey who use SWATCH!?? when there is an scan, I get too many mails on root () domain com Peters, Michael D. (Jan 15)
RE: Portscans not displayed in ACID? Peters, Michael D. (Jan 23)
RE: Flowbits Peters, Michael D. (Feb 24)
gen-msg.map additions? Peters, Michael D. (Jan 23)
No portscan traffic? Peters, Michael D. (Jan 16)

Petriz, Pablo

RE: taps What Brand and Where in network Petriz, Pablo (Jan 16)
RE: have i beenn HACKED or rooted ?? Petriz, Pablo (Mar 23)

pfeito

Promiscuous Mode pfeito (Mar 20)
RE: HOME_NET var on snort.conf pfeito (Mar 25)
HOME_NET var on snort.conf pfeito (Mar 21)
RE: HOME_NET var on snort.conf pfeito (Mar 22)
RE: HOME_NET var on snort.conf pfeito (Mar 22)
RE: Promiscuous Mode pfeito (Mar 21)
RE: Snort with SPADE...snort in anomaly mode? pfeito (Mar 25)

pheusion () snet net

Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)
Re: WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) pheusion () snet net (Mar 31)

Phil Wood

MMAP-ed libpcap for linux kernels including linux-2.6.x Phil Wood (Jan 15)

phorvati

Base 64 encoding phorvati (Mar 04)

Pickel, Gerd - Betax-Systems GmbH (IT)

AW: snort 2.1.0 stops logging Pickel, Gerd - Betax-Systems GmbH (IT) (Jan 22)
snort 2.1.0 stops logging Pickel, Gerd - Betax-Systems GmbH (IT) (Jan 22)

pierangelo motta

does --enable-flexresp(2) works? pierangelo motta (Mar 23)
Re: does --enable-flexresp(2) works? pierangelo motta (Mar 24)
flowcache stats pierangelo motta (Mar 23)
Sendig alerts to another system pierangelo motta (Mar 09)

Poppi, Sandro

AW: OpenSource Alternative to SourceFire's RNA Poppi, Sandro (Mar 31)
AW: Status of IDMEF support? Poppi, Sandro (Jan 28)
AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Poppi, Sandro (Jan 09)

PPowenski

RE: SNORT and Linux 8.0 PPowenski (Feb 02)
RE: Dual Processor Machines PPowenski (Jan 08)
RE: Barnyard 0.1.0 and the "unable to find mysqlcli ent library" issue PPowenski (Jan 20)
RE: taps What Brand and Where in network PPowenski (Jan 12)
RE: Dual Processor Machines PPowenski (Jan 13)
RE: SNORT and Linux 8.0 PPowenski (Feb 03)

Puetz, Christoph

SNORT and VLans Puetz, Christoph (Feb 26)

Ragip Yahsieli

Plugin Ragip Yahsieli (Feb 11)
Snort Logging Ragip Yahsieli (Mar 23)

Rahul

Re: Compiling mysql support into snort and barnyard Rahul (Feb 22)
Re: cannot resolve host error Rahul (Jan 04)
Re: [Snort-users] ERROR: unknown preprocessor "ø~_decode" Rahul (Feb 23)
Re: I have a problem with snort.conf Rahul (Feb 24)
Re: I have a problem with snort.conf Rahul (Feb 24)

Rajesh Joseph

Re: Reconstruction of TCP packets Rajesh Joseph (Mar 31)
Reconstruction of TCP packets Rajesh Joseph (Mar 29)
Re: Snort code Rajesh Joseph (Mar 31)
Re: Reconstruction of TCP packets Rajesh Joseph (Mar 29)
Re: http_decode line in snort.conf gets garbled Rajesh Joseph (Mar 23)
Re: Reconstruction of TCP packets Rajesh Joseph (Mar 30)

RAJNEEL DHOTRE

File Size Limit Exceeded - error RAJNEEL DHOTRE (Jan 14)

ravath k

flexresp question ravath k (Mar 04)
flexresp question ravath k (Mar 04)
flow-portscan ravath k (Mar 15)
Flexresp question ravath k (Mar 05)

Ravi

Re: Yahoo Instant Messenger Ravi (Jan 19)
Any known isssues Ravi (Jan 31)
Re: Snort en mode NIDS Ravi (Mar 23)
Re: Snort inline and ip_queue Ravi (Mar 23)
Re: false positive generator Ravi (Feb 10)
Re: regarding snort rules Ravi (Feb 01)
Re: Help need in Snort configuration Ravi (Mar 08)
Any known isssues Ravi (Jan 30)

ravivsn

Re: Problem with Snort-inline ravivsn (Feb 09)
Re: Help!! Problem testing Snort ravivsn (Feb 09)
Re: Quick stupid question ravivsn (Jan 31)
Re: Snort-inline in embedded device ravivsn (Jan 31)
Re: Snort en mode NIDS ravivsn (Mar 29)
Re: Need help with Sneeze ravivsn (Feb 09)

Remko Lodder

RE: [elvandar] Re: Snort on Linux with no IP Remko Lodder (Feb 24)

Rich

Best way to alert portscan activity? Rich (Mar 16)

Rich Adamson

Win32 v2.1 Flex not correct? Rich Adamson (Jan 01)
Re: Win32 v2.1 as service - two instances? Rich Adamson (Mar 06)
Re: Win32 - multiple interfaces? Rich Adamson (Jan 01)
Win32 v2.11 Build24 stable? Rich Adamson (Mar 06)
RE: Win32 - multiple interfaces? Rich Adamson (Jan 01)
Win32 - multiple interfaces? Rich Adamson (Jan 01)
Re: Truncated Tcp Options? Rich Adamson (Mar 16)
Win32 v2.1 as service - two instances? Rich Adamson (Mar 06)
Truncated Tcp Options? Rich Adamson (Mar 15)
v2.1 config question Rich Adamson (Mar 16)
Re: Asymmetric routing and IDS correlation ? Rich Adamson (Mar 23)
Re: Truncated Tcp Options? Rich Adamson (Mar 16)

Richard Bejtlich

RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
RE: taps What Brand and Where in network Richard Bejtlich (Jan 12)
Re: IDS Design Help Richard Bejtlich (Feb 09)
FreeBSD install guide for Sguil 0.3.1 Richard Bejtlich (Mar 19)

RichardKebo

Startup Problem RichardKebo (Mar 04)

Richard Pesce

Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
SnortCenter v1.0 RC1 byte_test work around Richard Pesce (Jan 12)
SnortCenter v1.0 RC1 byte_test work around Richard Pesce (Jan 12)
ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
RE.: arp spoof Richard Pesce (Jan 22)
Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
RE: Is ACID Dead? Richard Pesce (Jan 15)

Richard Worwood

setting up Snort for the first time Richard Worwood (Feb 03)

Rick Coloccia

Re: Snort with Oracle Rick Coloccia (Jan 20)

Rick Johnson

MySQL signatures escaped unneccesarily? Rick Johnson (Feb 10)

Ridlon, Michael

Puresecure... Ridlon, Michael (Feb 23)
Re: Demark PureSecure questions Ridlon, Michael (Mar 04)
Re: Remotely monitor a switch port... Ridlon, Michael (Feb 24)
Remotely monitor a switch port... Ridlon, Michael (Feb 23)

Robert Caplan

SNORT Rule for netbios brute force break-in Robert Caplan (Feb 11)
SNORT Rule for netbios brute force break-in Robert Caplan (Feb 11)

Robert Craig

Origin 'Snort Alert' value in signature.sig_name field? Robert Craig (Jan 28)

Robert Reid

RE: Which Linux distro for a Win32 Snort admin? Robert Reid (Jan 09)
Which Linux distro for a Win32 Snort admin? Robert Reid (Jan 08)

robert schwartz

RE: SNORT (Linux) / MySQL (Win32) robert schwartz (Feb 12)
RE: snort ssl plug-in robert schwartz (Jan 14)
RE: Needed: sample stunnel 4.04 stunnel.conf files robert schwartz (Jan 28)
RE: SNORT and Linux 8.0 robert schwartz (Feb 02)
RE: MySql + Snort config errors (yet again) robert schwartz (Jan 08)
RE: Managing many sensors robert schwartz (Jan 06)
RE: winsnort install robert schwartz (Mar 16)

Robert Storey

Re: non-root user cannot run snort Robert Storey (Jan 27)
Re: non-root user cannot run snort Robert Storey (Jan 27)
Re: non-root user cannot run snort Robert Storey (Jan 27)
non-root user cannot run snort Robert Storey (Jan 26)

Robert Vance Jr

beagle worm Robert Vance Jr (Jan 19)

Rob Lewis

Re: Snort, Logging, and Windows 2000 Rob Lewis (Jan 16)

Rob Ward

P2P Rules and Sending TCP Resets. Rob Ward (Feb 27)

Rodrigo B. Ramos

alert messages Rodrigo B. Ramos (Mar 03)
Telnet and FTP Rodrigo B. Ramos (Mar 04)
Re: Snort Performance Rodrigo B. Ramos (Mar 26)
RE: Is snort dropping packets Rodrigo B. Ramos (Mar 24)
Re: Snort not logging to the /var/log/snort/alert file Rodrigo B. Ramos (Mar 24)
Re: Content Usage Rodrigo B. Ramos (Mar 25)

rodrigo . ramos

RE: Disable alerts from certain machines - Not working for me? rodrigo . ramos (Mar 26)

Roman Danyliw

Re: mostly an (my)sql question. Roman Danyliw (Mar 01)
Re: Is ACID Dead? Roman Danyliw (Jan 16)

Romulo M. Cholewa

App Eventlog: missing event id Romulo M. Cholewa (Jan 19)
App Eventlog: missing event id Romulo M. Cholewa (Jan 22)

Ronen Kfir

error- newbe Ronen Kfir (Jan 19)

Ron Shuck

Last CID and Duplicate Records Ron Shuck (Jan 12)
RE: taps What Brand and Where in network Ron Shuck (Jan 12)

Rowland, Krisa W ERDC-ITL-MS Contractor

Sensors 0 Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
lost sensor Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
Change path for compiler Rowland, Krisa W ERDC-ITL-MS Contractor (Feb 18)
Snort stopped receiving alerts Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
RE: Snort stopped receiving alerts Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
custom sig file Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 04)
Change path for compiler Rowland, Krisa W ERDC-ITL-MS Contractor (Feb 19)
RE: Adware/Malware Rules List V2 Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 04)
lost sensor Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)
error Rowland, Krisa W ERDC-ITL-MS Contractor (Mar 25)

Ruben Rubio

Extrange alerts Ruben Rubio (Jan 07)

Ruiyuan Jiang

Portscan shows 100% traffic in ACID's main window Ruiyuan Jiang (Jan 13)

Russell Fulton

Re: Snort-users digest, Vol 1 #3872 - 13 msgs Russell Fulton (Jan 02)

Russell Packer

Snort, remote logging, unified logs, mudpit and me! Russell Packer (Jan 02)
RE: Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)
Ofcom test Russell Packer (Jan 02)
RE: No alerts? Russell Packer (Jan 08)
No alerts? Russell Packer (Jan 08)
RE: Which Linux distro for a Win32 Snort admin? Russell Packer (Jan 08)
Snort, Mudpit, Unified logs and me... Russell Packer (Jan 02)

rux

RUXCON Call For Papers rux (Feb 02)

R . Welz

Newbie question: needed PC specs and performance R . Welz (Mar 01)
Newbie question: needed PC specs and performance R . Welz (Mar 01)

sam

Interesting problem with Snort 2.1.0 today -- sam (Mar 09)
Here are my updated MyDoom/MIMAIL.R and Variant signatures for Snort sam (Jan 28)
Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? sam (Jan 28)
New Worm / Virus - WORM_MIMAIL.R? sam (Jan 26)
Re: Perfmonitor...does anyone really use this thing? sam (Jan 15)
Demark PureSecure questions sam (Mar 04)

Sam Evans

RE: Snort-users] Here are my updated MyDoom/MIMAIL.R and Variant signatures for Sam Evans (Jan 31)

Sam Osuala

Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
Snort Mysql Acid Combo Sam Osuala (Feb 04)
Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)
Re: Snort Mysql Acid Combo Sam Osuala (Feb 04)

samwun

RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
RE: same tcpdump.log to remote log server instead oflocal sensor samwun (Jan 28)
sending paylog data (tcpdump formated) to more than 2 remote servers. samwun (Jan 26)
same tcpdump.log to remote log server instead of local sensor samwun (Jan 27)
location to download barnyard samwun (Jan 26)

sanaâ Aitouchen

Re: Snort en mode NIDS sanaâ Aitouchen (Mar 25)
Snort en mode NIDS sanaâ Aitouchen (Mar 23)

Sandro Poppi

ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.4alpha for snort 2.1.1 released Sandro Poppi (Mar 27)
ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.3alpha for snort 2.1.0 released Sandro Poppi (Jan 11)
Re: ANNOUNCEMENT: Snort-IDMEF-Plugin 1.2.3alpha for snort 2.1.0 released Sandro Poppi (Jan 12)

santosh kamble

how to remove snort completely santosh kamble (Mar 01)
(error) error installing snort with mysql support santosh kamble (Mar 01)

Sarmiento, Miguel

ACID: Can not send emails... Sarmiento, Miguel (Jan 20)

Schmehl, Paul L

RE: oinkmaster.pl - Unable to download rules, Why?? Schmehl, Paul L (Feb 05)
RE: How to delete alerts without acid Schmehl, Paul L (Mar 16)
RE: Question about var SERVICE_PORTS Schmehl, Paul L (Jan 09)
Problems with snort-2.1.0 Schmehl, Paul L (Jan 12)
RE: Question-using perl with snort-creating a user friendly interface Schmehl, Paul L (Jan 15)
RE: Snort on Linux with no IP Schmehl, Paul L (Feb 24)
RE: Snort MySQL problem Schmehl, Paul L (Jan 29)
RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)
RE: ERROR: unknown preprocessor "http_decode" Schmehl, Paul L (Jan 18)
RE: CVS FAQ? ... Schmehl, Paul L (Mar 15)
RE: Snort MySQL problem Schmehl, Paul L (Jan 26)
RE: Noisy Rules Schmehl, Paul L (Mar 04)
RE: Looking for Perl archive script for Snort with ACID and MySQL Schmehl, Paul L (Mar 08)
RE: Problems with snort-2.1.0 Schmehl, Paul L (Jan 14)
Question about var SERVICE_PORTS Schmehl, Paul L (Jan 09)
RE: 2.1.0 compile problems and primary development platform Schmehl, Paul L (Feb 23)
RE: Using snort to listen on a nic without an IP Schmehl, Paul L (Jan 21)
RE: Problems with snort-2.1.0] Schmehl, Paul L (Jan 13)
RE: Snort 2.1.0 - Shutting up http_inspect on non web servers Schmehl, Paul L (Jan 14)

Scot Scot

Re: Win32 - multiple interfaces? Scot Scot (Jan 01)

Scott Bounds

Snort, MySql, Apache, & PHP Problem - Checked by Vexira - Scott Bounds (Mar 12)

Scott Elgram

Re: RE: Bad Loop Back Traffic Scott Elgram (Feb 25)
Re: Bad Loop Back Traffic Scott Elgram (Feb 27)
Bad Loop Back Traffic Scott Elgram (Feb 24)
Re: Bad Loop Back Traffic Scott Elgram (Feb 25)
Re: ACID Scott Elgram (Feb 24)

Scott Skrogstad

Re: Is ACID Dead? Scott Skrogstad (Jan 15)

Scott Weller

RE: MYSQL Error on Windows XP snort install Scott Weller (Jan 05)

Scott Zawalski

Re: [Snort-users] AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Scott Zawalski (Jan 09)

Sean Lazar

Re: double decoding attack Sean Lazar (Mar 01)
Re: DNS server keeps communicating with Darkprofits.net and darkprofits.com Sean Lazar (Feb 02)

Sean Wheeler

Auto magically building active host lists and ports...your thoughts ? Sean Wheeler (Mar 25)
AW: OpenSource Alternative to SourceFire's RNA Sean Wheeler (Mar 31)

Sekurity Wizard

Snort rule "pass" not working right with -o option... Sekurity Wizard (Jan 14)

Semerjian, Ohanes

RE: make: Fatal error in reader: Makefile, line 484 : Unexpected end o f line seen Semerjian, Ohanes (Feb 26)
make: Fatal error in reader: Makefile, line 484: Unexpected end o f line seen Semerjian, Ohanes (Feb 23)
RE: NetSky worm signature definition...!!! Semerjian, Ohanes (Feb 19)
NetSky worm signature definition...!!! Semerjian, Ohanes (Feb 18)

senthu

Problem stopping snort senthu (Mar 12)

Shabbar Arsiwala

Snort Install Shabbar Arsiwala (Mar 03)
Snort Install Shabbar Arsiwala (Mar 08)

shadow man

Upgrade to 2.1.0 help needed shadow man (Jan 12)

Shaffer, Paul D

RE: SNORT Rule for netbios brute force break-in Shaffer, Paul D (Feb 11)
RE: Puresecure... Shaffer, Paul D (Feb 23)
RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
RE: SNORT and Linux 8.0 Shaffer, Paul D (Feb 02)
RE: Hummm... Shaffer, Paul D (Mar 17)

Shane Cooper

Snort Install - troubles Shane Cooper (Mar 25)

Shane Williams

RE: NetSky worm signature definition...!!! Shane Williams (Feb 19)

Shannon M. Anderson

www.snort.org down due to DNS failure.... Shannon M. Anderson (Mar 03)
FW: No logs in MYSQL Database but logs on localhost logfiles? Shannon M. Anderson (Mar 01)
Re: Hummm... Shannon M. Anderson (Mar 15)
No logs in MYSQL Database but logs on localhost logfiles? Shannon M. Anderson (Mar 01)
RE: Hummm... Shannon M. Anderson (Mar 16)

Shawn Kottke

RE: Snort stopped receiving alerts Shawn Kottke (Mar 25)
RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
RE: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)
RE: TCP and ACID Shawn Kottke (Mar 31)
RE: lost sensor Shawn Kottke (Mar 25)
RE: snortdb-extra.gz Shawn Kottke (Feb 26)
RE: DB SNORT Shawn Kottke (Feb 23)
RE: Snort Install Shawn Kottke (Mar 03)
Re: Snort not logging to the /var/log/snort/alert file Shawn Kottke (Mar 24)

Sheahan, Paul

Correct version of libpcap? Sheahan, Paul (Feb 02)
TTL LIMIT Exceeded Sheahan, Paul (Mar 25)

shivabasu

Incomplete RPC segment shivabasu (Mar 25)

Shoelace

anything wrong with arpspoof preprocessor? Shoelace (Feb 08)

Sigurd Urdahl

Re: Question about best hardware Sigurd Urdahl (Mar 12)
Unified log - how binary are they? Sigurd Urdahl (Mar 12)

Silva, Pedro

Pcap_loop error Silva, Pedro (Jan 14)

Simon Smith

Re: SUMMARY, CyberKit 2.2 Ping, its driven me Nuts.. Simon Smith (Dec 31)

Singh,Manoj [Ontario]

Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 22)
Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 21)
Snort 2.1.0 with snortsnarf Singh,Manoj [Ontario] (Jan 20)

Skip Carter

Re: snort and honeypot Skip Carter (Feb 04)
Re: Snort 2.1.0, getting mixed up signatures. Skip Carter (Feb 09)

slanducci

Help me it slanducci (Mar 08)
I think it ok slanducci (Mar 08)
Help me slanducci (Mar 08)

smbrown

Ethernet Tap Question smbrown (Feb 01)

SN ORT

RE: Re: [Snort-sigs] New Worm / Virus - WORM_MIMAIL.R? SN ORT (Feb 02)
RE: SNORT has memory leak on Linux Red hat 9 SN ORT (Mar 01)
Re: Bad Loop Back Traffic SN ORT (Feb 25)
RE: Snort+iptables in the same machine SN ORT (Mar 12)
Re: Segmentation Fault SN ORT (Jan 12)
Snort performance SN ORT (Feb 02)
Re: Snort-users] Here are my updated MyDoom/MIMAIL.R and Variant signatures for SN ORT (Feb 02)
Snort Variables SN ORT (Feb 06)
Re: Please post a good Nachi.B Signature SN ORT (Feb 23)
Re: Documentation!! SN ORT (Feb 11)
RE: Question about best hardware SN ORT (Mar 08)
RE: Snort readng across switches? SN ORT (Jan 27)
Re: Snort-users digest, Vol 1 #4056 - 9 msgs SN ORT (Mar 18)
RE: How to delete alerts without acid SN ORT (Mar 15)
RE: drowning in http inspect NON SN ORT (Feb 05)
Variables: How to read SN ORT (Feb 06)
RE: How to delete alerts without acid SN ORT (Mar 15)
RE: custom sig file SN ORT (Mar 05)
Documentation!! SN ORT (Feb 11)
RE: Documentation!! SN ORT (Feb 12)

SNORT

Re: ACID 2.0? SNORT (Mar 12)
Update rules....but not all SNORT (Mar 16)

snortdev

Re: [Snort-devel] Snort 2.1.1-RC1 Available snortdev (Feb 05)

Snort Man

127.0.0.1 Snort Man (Mar 30)

snort-ml

RE: Temporary "solution" to MyDoom worm snort-ml (Jan 30)

Snortty

RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 25)
Integrate Snort with Remedy, Anyone Please??? Snortty (Feb 12)
New snort rule for WORM_NETSKY.B yet PLEASE??? Snortty (Feb 18)
Re: Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
W32.Novarg.A@mm worm Work!, but.... Snortty (Feb 02)
ignorehost in snort.conf Dose Not ignore my scanner, why? Snortty (Mar 10)
RE: Disable alerts from certain machines - Not working for me? Snortty (Mar 26)
oinkmaster.pl - Unable to download rules, Why?? Snortty (Feb 05)
How to generate snort log file with the name format file_yyyymmdd Daily? Snortty (Jan 21)
Re: Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)
Latest Snort 2.1.x on Solaris 8, Can anyone confirm please? Snortty (Mar 19)

snort user

snort 2.1 and stream4 snort user (Jan 30)
2.1.0 Compile Probs On Windows snort user (Jan 06)
snort 2.1 & stream4 snort user (Jan 31)
2.1.0 Compile Probs On Windows snort user (Jan 06)

soidberg

Detecting http 'basic-auth' brute force soidberg (Mar 23)

soldier Mx

im getting alot of FAlse alert that are making my /var partition fUll soldier Mx (Jan 17)
What to do with malicius encrypted code!??i soldier Mx (Feb 02)
Hey, how could i delete the alert log cuz /var is full soldier Mx (Jan 16)
A manual-tutorial-txt-paper about RULE OPTIONS? and... soldier Mx (Jan 29)
Hey the option Dsize is useful against the buffer overflows ? soldier Mx (Jan 19)
have i beenn HACKED or rooted ?? soldier Mx (Mar 23)
I have deleted the file /var/log/snort/alert and i dont see snort writing on it now. soldier Mx (Jan 02)
Why the tag option and resp neither works! soldier Mx (Jan 21)
Hey who use SWATCH!?? when there is an scan, i get too many mails on root () domain com soldier Mx (Jan 14)
Why resp and session option Dont work!? soldier Mx (Jan 28)
i use /etc/iinit.d/snort start but... soldier Mx (Jan 22)
Why ionkmaster dont really upgrade rules,,? soldier Mx (Feb 18)
Where can i get a Simlation attack to see if all my rules work! ? soldier Mx (Jan 13)
hi, are there the signatures or rules of the new local bugs ,, do_mremap and do_brk() ??? soldier Mx (Jan 13)
the alert log is getting so huge in minutes! soldier Mx (Jan 19)
diferences between the rules of whitehats.com and snort.org soldier Mx (Jan 02)

Spencer, Arthur

RE: snort and tap ethernet Spencer, Arthur (Mar 30)

SRH-Lists

RE: Tell snort to resolve ip or use /etc/hosts? SRH-Lists (Jan 14)

Stephan Scholz

Re: Snort inline and ip_queue Stephan Scholz (Mar 23)

Stephen Meatheringham

Different Portscan format under 2.1.0 to 2.0.5 Stephen Meatheringham (Feb 15)
Difference Portscan format under 2.1.0 to 2.0.5 Stephen Meatheringham (Feb 16)

Stephen Reed

BUG in fpdetect.c (2.1.0)? Stephen Reed (Jan 12)

Stephen W. Corey - 5535

Is IPTables blocking Snort detection? Stephen W. Corey - 5535 (Jan 19)

Stephen W. Thompson

Re: Snort in VMware Stephen W. Thompson (Feb 19)

Steve Jacobsen

Upgrading from 2.0 to 2.1? Steve Jacobsen (Jan 12)
Upgrading from 2.0 to 2.1? Steve Jacobsen (Jan 12)
Upgrade 2.0 to 2.1 Steve Jacobsen (Jan 09)

Steve Johnson

Content Usage Steve Johnson (Mar 24)
Question about content keyword Steve Johnson (Mar 25)
Content Usage Steve Johnson (Mar 24)

Steven Suppe

FLOW question Steven Suppe (Feb 25)

Steve Thompson

Re: Snort Abend after BAD-TRAFFIC Steve Thompson (Mar 23)

Stiles, Eric

Snort Sensor Stiles, Eric (Feb 06)

Subramanikandan Somasundaram (Mani)

installing 2.1.0 on Solaris 8 - problems & solutions Subramanikandan Somasundaram (Mani) (Jan 12)

Sudhakar Gummadi

RE: Segmentation Fault Sudhakar Gummadi (Jan 09)
Segmentation Fault Sudhakar Gummadi (Jan 08)
Segmentation Fault Sudhakar Gummadi (Jan 12)

sumanth subramanian

Snort code sumanth subramanian (Mar 31)

sumit vora

(no subject) sumit vora (Feb 22)

Susan Coulter

snort rules with OS info? Susan Coulter (Feb 13)

sutra

About the ruletype syntax sutra (Jan 29)

Syed Ali

Email Syed Ali (Feb 12)
Error Installing PHP Syed Ali (Jan 14)

Sylvain BERTRAND

how to block P2P with snort Sylvain BERTRAND (Mar 31)
Re: how to block P2P with snort Sylvain BERTRAND (Mar 31)

Tao Peng

how to start to read the snort source code Tao Peng (Feb 03)

Ted Iglehart

monitoring only occuring on snort host Ted Iglehart (Feb 02)

Ted Kaczmarek

Re: Problem with compiling/installing snort 2.1.1 on RH 9.0 Ted Kaczmarek (Mar 16)
RE: Hummm... Ted Kaczmarek (Mar 16)

Thomas Bechtold

generators-files Thomas Bechtold (Mar 12)
Re: threshold and suppress ?? Thomas Bechtold (Mar 02)
Re: acid error Thomas Bechtold (Mar 01)
Re: Snort install Thomas Bechtold (Mar 14)

Thomas Reisinger

Are there any problems Snort 2.1.1 with ACID v0.9.6b23? Thomas Reisinger (Mar 16)
Problem with compiling/installing snort 2.1.1 on RH 9.0 Thomas Reisinger (Mar 16)
Snort output into MySQL with activate/dynamic rules Thomas Reisinger (Jan 14)

Thompson, Jimi

RE: SNORT and Linux 8.0 Thompson, Jimi (Feb 02)
RE: snort postgresql rpm problem Thompson, Jimi (Mar 01)

Tim Hergert

RE: NetSky worm signature definition...!!! Tim Hergert (Feb 19)

Timm Schneider

Re: oinkmaster.pl - Unable to download rules, Why?? Timm Schneider (Feb 05)

Tim Sutinen

Re: Off topic- Your Favorite Linux Distro Tim Sutinen (Feb 01)
Re: Installing Snort on SuSe Linux machine Tim Sutinen (Jan 31)

Tobias Rice

IPless interface on Debian... Tobias Rice (Feb 11)
Re: IPless interface on Debian... Tobias Rice (Feb 11)

Toby Rodwell

SnortCenter probelms Toby Rodwell (Feb 01)
Replicated sensors? Toby Rodwell (Feb 01)

Tod Beardsley

Re: Tuning Signatures Tod Beardsley (Mar 15)
Re: Witty worm sig Tod Beardsley (Mar 23)

Tomasz Piotr Palarz

Trouble compiling Snort-2.1.0: snprintf.c Tomasz Piotr Palarz (Feb 14)
Trouble compiling Snort-2.1.0: snprintf.c (fwd) Tomasz Piotr Palarz (Feb 15)
Re: Snort en mode NIDS Tomasz Piotr Palarz (Mar 23)

Tom Barcellona

Re: Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)
Bug: $eth0_ADDRESS parse error (FIXED?) Tom Barcellona (Feb 07)

Tom Cinqmars

Re: Snort + Acid Tom Cinqmars (Mar 29)
Re: Snort + Acid Tom Cinqmars (Mar 29)

Tom Fulton

cost/benefit analysis of running Snort Tom Fulton (Jan 26)

Tom Riley

Snort Deployment Suggestions Tom Riley (Feb 25)
Snort Deployment Suggestions Tom Riley (Feb 27)

Tony Fraser

Re: Snort on Linux with no IP Tony Fraser (Feb 23)

Tony Oger

2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
Re: AW: AW: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)
Re: AW: [Snort-users] 2.1.0 (build9) ERROR: unknown preprocessor "à_decode" Tony Oger (Jan 09)

Tony . Williams

Gigabit IDS Tony . Williams (Jan 05)
Hwscnqybfzr tony . williams (Jan 28)
(no subject) tony . williams (Jan 26)

Topper

Re: cannot resolve host error Topper (Jan 05)
cannot resolve host error Topper (Jan 04)
Re: cannot resolve host error Topper (Jan 04)

Troy Jordan

looking for working 2.1.0 Troy Jordan (Feb 01)

tslighter

Re: Snort Inline on Redhat 9 tslighter (Jan 08)
question tslighter (Jan 27)
Re: Snort Inline on Redhat 9 tslighter (Jan 08)
Re: Upgrade to 2.1.0 help needed tslighter (Jan 12)
bravo tslighter (Jan 28)

twig les

Investigating mangled packets from pre-processor twig les (Mar 01)
Re: Gigabit IDS twig les (Jan 06)
Re: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
Re: RE: Snort not logging to the /var/log/snort/alert file twig les (Mar 24)
RE: How to delete alerts without acid twig les (Mar 15)
Re: Question about passwd file twig les (Mar 10)
Re: how to enable portscan alert twig les (Feb 19)
Re: false positive generator twig les (Feb 10)
Re: Error while compile snort with mysql version 4.0.17 twig les (Jan 14)
Re: TCP Resets twig les (Feb 27)
Re: E-mail twig les (Mar 04)
Re: Performance Question twig les (Feb 19)
Re: Snort is exiting after start twig les (Mar 02)
Re: I have a problem with snort.conf twig les (Feb 24)
Re: have i been banned twig les (Mar 04)
Re: SNORT has memory leak on Linux Red hat 9 twig les (Feb 27)
Re: Needed: sample stunnel 4.04 stunnel.conf files twig les (Jan 28)
Re: sensor twig les (Mar 04)
Re: Keeping separate databases? twig les (Mar 15)
Re: SNORT and VLans twig les (Feb 26)

ultan lankford

snortsam problem ultan lankford (Feb 23)
Re: Snort-users digest, Vol 1 #3994 - 10 msgs ultan lankford (Feb 24)

unknown index

snort and mysql unknown index (Feb 02)

Uso

WinSNORT: PHP and MSSQL problem: Please recompile PHP with the necessary library (--enable-mssql) Uso (Mar 31)

uuyys84

cost/benefit of Snort uuyys84 (Jan 29)

vasanth b

NEW TO SNORT -HELP ME vasanth b (Jan 22)
PLEASE HELP HERE. vasanth b (Feb 08)
Please help here vasanth b (Jan 31)

Venkata Raghavan

resp:rst_all not working Venkata Raghavan (Mar 04)
Re: Repost: resp:rst_all not working Venkata Raghavan (Mar 05)
Repost: resp:rst_all not working Venkata Raghavan (Mar 05)

VIBE

ACID PHP MYSQL ERROR VIBE (Feb 12)
RULES -> Unknown Classtype: VIBE (Feb 11)

Victor Lamptey

compilation errors Victor Lamptey (Jan 09)
compiling snort-2.1 Victor Lamptey (Jan 02)
compiling snort-2.1 Victor Lamptey (Jan 02)

Vigilant Labs

RE: Using snort to listen on a nic without an IP Vigilant Labs (Jan 22)

Vijay Krishnan

Mysql Segmentation error and restarts Vijay Krishnan (Jan 22)

Vimal Goel

help Vimal Goel (Jan 21)
need help Vimal Goel (Jan 22)

Vines Scott D 2d Lt AFFTC/IT

ACID bug ?: changing pages within query result Vines Scott D 2d Lt AFFTC/IT (Feb 09)
Please virus scan your systems Vines Scott D 2d Lt AFFTC/IT (Feb 11)
RE: Updating Rules? Vines Scott D 2d Lt AFFTC/IT (Feb 12)

vmlinuz Mandrake

Snort log alert is not the same as the live alerts. vmlinuz Mandrake (Mar 18)
Snort log alert is not the same as the live alerts. vmlinuz Mandrake (Mar 04)

Vogle, Brian

RE: Swatch configuration problem Vogle, Brian (Mar 24)

Wally Bedford

RE: SQUID scan proxy attempt Wally Bedford (Feb 24)
Mysql is collecting data from snort, Acid won't display it. Wally Bedford (Feb 14)
RE: Mysql is collecting data from snort, Acid won't display it. Wally Bedford (Feb 15)

WAN FAT WU

IIS UNICODE Attack? WAN FAT WU (Feb 09)
Question on snort redirecting WAN FAT WU (Feb 04)
snort and honeypot WAN FAT WU (Feb 04)
Query on processor(frag2) WAN FAT WU (Jan 14)

Warner Joseph

ERROR: unknown preprocessor "http_decode" Warner Joseph (Jan 16)
FW: Alert Testing Warner Joseph (Jan 27)
RE: ERROR: unknown preprocessor "http_decode" Warner Joseph (Jan 16)
RE: Alert Testing Warner Joseph (Jan 23)
RE: snort: database: mysql_error: Duplicate entry Warner Joseph (Jan 30)
Alert Testing Warner Joseph (Jan 22)

Whitfield, Ken

Disable alerts from certain machines Whitfield, Ken (Mar 12)

Williams Jon

2.1.0 compile problems and primary development platform Williams Jon (Feb 23)
RE: Snort Virus Detector Williams Jon (Mar 29)

Witt, Allen

Needed: sample stunnel 4.04 stunnel.conf files Witt, Allen (Jan 27)

Yanyan Yang

Deleted FTP signatures Yanyan Yang (Feb 05)

Yonah Russ

compiling snort with icc 8.0 Yonah Russ (Mar 24)
Re: Snort on Linux with no IP Yonah Russ (Feb 24)

Your Name

Exhausted - SNORT not logging to MySQL database Your Name (Mar 20)

ypwhich

RE: Snort on Linux with no IP ypwhich (Feb 24)
Re: Source IP 173.80.0.0 [revisited], bug? ypwhich (Mar 02)
Re: Source IP 173.80.0.0 ypwhich (Feb 24)
RE: Hummm... ypwhich (Mar 14)
Re: Hummm... ypwhich (Mar 14)
Re: failure to generate alerts from tcpdump file ypwhich (Mar 10)
Re: SNORT has memory leak on Linux Red hat 9 ypwhich (Feb 27)
Re: Truncated Tcp Options? ypwhich (Mar 16)

yyyyyy yaher

Snort Implementation yyyyyy yaher (Jan 13)
Snort Implementation yyyyyy yaher (Jan 13)
Snort Implementation yyyyyy yaher (Jan 13)

Previous period

Next period