security.ids.snort.sigs (date)

security.ids.snort.sigs (date)

December 31, 2002

Re: Yahoo IM Client Logon, J Irving
Re: Fwd: Re: [Snort-users] L3 Retriever Ping False Alarms, netsec novice
Re: Fwd: Re: [Snort-users] L3 Retriever Ping False Alarms, Ed Davison
Re: Land Attack, Ashley Thomas
Re: Land Attack, Phil Wood
RE: Yahoo IM Client Logon, Kreimendahl, Chad J
Land Attack, Ashley Thomas

December 30, 2002

RE: Yahoo IM Client Logon, spy guy

December 24, 2002

Help with content rules looking for the absence of a hex pattern (large ICMP modification), Matt Kettler
RE: Signature 1567 vs. 1568 (root.asp), Hicks, John
Nubie questions, Tom Shaw

December 23, 2002

Re: EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt, Michael Scheidell
Fwd: Re: [Snort-users] L3 Retriever Ping False Alarms, netsec novice
Re: EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt, Matt Kettler
Re: EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt, Matt Kettler
Re: Web Rules confusing me, Phillip G Deneault
Web Rules confusing me, Brian Jameson
Re: [Snort-users] Content list 2, larc
Re: Port 57 Scans, Mike Rondello
redundant oracle rules: 1692 & 1693, Andrew Hintz \(Drew\)
Re: Port 57 Scans, Mike Rondello
RE: Yahoo IM Client Logon, David Augros
"WEB-ATTACKS mail command attempt" - False Positives, Lars Borland
Rule for LIOTEN.WORM, Donovan.Tyler
Signature 1567 vs. 1568 (root.asp), Melanie Rieback
Content Rule, Aditya

December 19, 2002

SID 604 points to wrong reference., Mathew Johnston
RE: Yahoo IM Client Logon, Kreimendahl, Chad J
Yahoo IM Client Logon, spy guy
RE: EXPERIMENTAL WEB-CLIENT javascript URL host spoo fing attempt, Hicks, John
Re: EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt, remember-handsworth

December 18, 2002

Re: Preprocessors and SIDs, Nigel Houghton

December 17, 2002

[OT] Am I the only one getting rejection notices from geo-spectrum.com?, Matt Kettler
Re: Preprocessors and SIDs, Matt Kettler
ntpdx overflow attempt sig triggered by ntpdc query, james
Preprocessors and SIDs, Rodrigo Buarque Ramos

December 14, 2002

ntpdx overflow attempt sig triggered by ntpdc query, James-lists

December 13, 2002

redundant oracle rules: 1692 & 1693, Andrew Hintz \(Drew\)
EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt, Svein Erik Søberg

December 12, 2002

Re: Signature: EXPLOIT ssh CRC32 overflow filler, Matt Kettler
Signature: EXPLOIT ssh CRC32 overflow filler, Jukka Juslin

December 11, 2002

Re: kadmind exploit rules, Chris Green
Re: [Snort-sigs] kadmind exploit rules, anakata

December 10, 2002

Re: MSADC, Russell Fulton
MSADC, remember-handsworth

December 09, 2002

Re: Content list 2, larc

December 06, 2002

snort-rules CURRENT update @ Fri Dec 6 06:25:07 2002, bmc
Mail-Worm Holar.C, ElbTec GmbH

December 05, 2002

Re: Help w/multiple content matching, Jens Krabbenhoeft
Re: Snort Alert [1:1411:0] ) (etc) alerts, Jens Krabbenhoeft
hacking up the portscan preprocessor, John Hally
Help w/multiple content matching, John Hally
Snort Alert [1:1411:0] ) (etc) alerts, Michael Boman
Content list 2, Aditya
Re: Sid 488, Byron Copeland

December 04, 2002

Sid 488, Mathew Johnston

December 03, 2002

SID 1288 WEB-FRONTPAGE /_vti_bin/ access, Hicks, John
Re: Web Rules confusing me, Matt Kettler
SIDs 1293 & 1294 too general?, Bob Dehnhardt
FYI: Packet Log of port 57 Scans, Robert Wagner
Web Rules confusing me, Brian Jameson
Please Help me, Hany Tawakkol

December 02, 2002

(no subject), John Hally
(no subject), John Hally
RE: Port 57 Scans, Tim Hillyard, Monitored Security
Re: Snort online sig DB., Brian

December 01, 2002

Autoreply: Re: EXPERIMENTAL SIDs, rolandomorales
Re: EXPERIMENTAL SIDs, Chris Green

News | FAQ | advertise