security.ids.snort.sigs (date)

March 31, 2004

WEB-IIS Translate update..., Erik Fichtner
Some intresting stats on base components of rules, Sean Wheeler
Re: Simple Question!!, Nigel Houghton
Re: Simple Question!!, SAM IDS

March 30, 2004

Re: Simple Question!!, Nigel Houghton
Simple Question!!, SAM IDS
Simple Question!!, SAM IDS

March 29, 2004

Re: Need Some Explanation about Sigs, Brian
Re: Need Some Explanation about Sigs, Alejandro Flores
Snort-sigs -- confirmation of subscription -- request 711881, Scott Weller
Flex Response + NIC, Dusty Hall
Re: Snort SIG update - false positives on SID 2329, Nigel Houghton
Re: [ISSForum] Witty signature, Sergey V Soldatov
Snort SIG update - false positives on SID 2329, Dr. Christoph Wegener
Need Some Explanation about Sigs, SAM IDS
some corrections to rules incorrectly refering to a reference resource not located in etc/reference.config, Sean Wheeler
Does rules 2159 make sense ?, Sean Wheeler

March 26, 2004

Re: writing signatures from isolated viruses, Jason Haar
Re: writing signatures from isolated viruses, pieter claassen

March 25, 2004

writing signatures from isolated viruses, Cory Hollingsworth
False positive found for rule side=1634, Bobby Kuzma
Re: snort whitelist, Carl Gibbons
Re: snort whitelist, Dale L. Handy
Re: error running snort, Dale L. Handy
Re: Help, Alberto Gonzalez
Re: snort whitelist, frank
error running snort, MEGA Hospedagem
Re: [ISSForum] Witty signature, Sergey V Soldatov
Slight mistake in SID 2197, Christian Robottom Reis
Help, Rodrigo Albernaz Bezerra
Any signatures for msclock.exe ?, Meinecke, Dennis
snort whitelist, MEGA Hospedagem
Duplicate 732, Hugo van der Kooij

March 24, 2004

RE: Netsky.P Signature, Adrian Marsden
Re: Netsky.P Signature, Jason Haar

March 23, 2004

Re: Netsky.P Signature, Mark . Schutzmann
Re: Netsky.P Signature, Brian

March 22, 2004

Netsky.P Signature, Cam Beasley, ISO
snort-rules 2.1.* update @ Mon Mar 22 14:15:27 2004, bmc
snort-rules CURRENT update @ Sat Mar 20 20:15:26 2004, bmc
False positive generated on SID 2329, Jonathon Leszczynski
Performance Monitor, Rodrigo B. Ramos

March 21, 2004

Re: Witty signature, Jason
Re: Witty signature, todb
Re: Witty signature, Russell Fulton

March 20, 2004

March 19, 2004

ACID Response Table Bug, King Jr, Charles (Contractor)
Re: false positives for attack-response rules (and suggested fix), Brian
Re: pcre syntax error for sid 1229, Brian
RE: query, Michael Miller
query, jayarajd
false positives for attack-response rules (and suggested fix), Milani Paolo
pcre syntax error for sid 1229, Milani Paolo
Hidden message, bmc
Re: Hi, bmc

March 18, 2004

Hotbar, Rowland, Krisa W ERDC-ITL-MS Contractor
RE: Anonymous Proxy Server Detection, Kreimendahl, Chad J

March 17, 2004

Anonymous Proxy Server Detection, eric . ferguson
Phatbot Sigs, Dan Michitsch
Re: Question about rule 1549, Federico Petronio
Threshold in signatures, Roach4

March 16, 2004

RE: A question about comparing IDSs, Martin Dion
snort rule 2329, Ekblad, Eric M
RE: A question about comparing IDSs, Yaakov Yehudi
A question about comparing IDSs, Islam Hegazy

March 15, 2004

FP on "NETBIOS DCERPC Remote Activation bind attempt", Jason Haar
Phatbot signatures, Joe Stewart
FP on sid=535, Jason Haar
Rule naming inconsistancy for C$/D$ SMB access, Jason Haar
Re: Question about rule 1549, Brian
Re: Shouldn't all chat.rules be "policy violation"?, Brian
Shouldn't all chat.rules be "policy violation"?, Jason Haar

March 14, 2004

FP with sid=2403, Jason Haar
Re: detection time, Hugo van der Kooij
detection time, Islam Hegazy

March 13, 2004

detection time, Islam Hegazy

March 12, 2004

Sid 2343, Steven Alexander
Re: Documentation sid 2337, Nigel Houghton
Sid 2340, Steven Alexander
Re: False positive, Hugo van der Kooij
Sid 2338, Steven Alexander
Sid 2337, again, Steven Alexander
Documentation sid 2337, Steven Alexander
RE: imesh signature?, Tony Hernandez
Question about rule 1549, Federico Petronio
False positive, Michaël Catroux
snort ID: 525 BAD-TRAFFIC udp port 0 traffic, Ilango S Allikuzhi
False positive generated on SID 2329, Jonathon Leszczynski
Sid:628 update suggestion, Affeld, James

March 11, 2004

False positive on SID 1561 (pcap attached), JStarke

March 10, 2004

imesh signature?, Jasmine CHUA

March 09, 2004

Sober.D - a new variant, Chintan Gosalia
Bad rule... Bad bad rule, Kreimendahl, Chad J

March 08, 2004

Re: Help, Jimmi Andersen
Re: Pure Not Rule not Supported?, Matt Kettler
Re: Pure Not Rule not Supported?, Michael Sconzo
Pure Not Rule not Supported?, Amanda Meyer
Help, Rodrigo Albernaz Bezerra

March 04, 2004

Re: pass rules, Dale L. Handy
Re: Re: W32.Beagle.J Worm Signature?, Mark . Schutzmann
RE: W32.Beagle.J Worm Signature?, Cam Beasley, ISO
Re: W32.Beagle.J Worm Signature?, RuthAnne Bevier
Re: W32.Beagle.J Worm Signature?, Jason Haar

March 03, 2004

Re: W32.Beagle.J Worm Signature?, Hugo van der Kooij
Re: Netsky.c + others? attachment sid, John B.
W32.Beagle.J Worm Signature?, Mark . Schutzmann
Re: Netsky.c + others? attachment sid, Hugo van der Kooij
Re: pass rules, John B.
pass rules, Rowland, Krisa W ERDC-ITL-MS Contractor
Re: Netsky.c + others? attachment sid, John B.

March 02, 2004

Re: Netsky.c + others? attachment sid, Hugo van der Kooij
Re: Netsky.c + others? attachment sid, John B.
Re: Netsky.c + others? attachment sid, John B.

March 01, 2004

Re: Here are some Netsky Worm Sigs, Mark . Schutzmann
Netsky.c + others? attachment sid, Scott Zawalski
snort-rules 2.1.* update @ Mon Mar 1 14:15:28 2004, bmc
Re: Here are some Netsky Worm Sigs, Tom . Mclaughlin
snort-rules CURRENT update @ Mon Mar 1 09:40:19 2004, bmc
snort-rules 2.1.* update @ Mon Mar 1 09:40:19 2004, bmc
Snort false positive for SID 218, Matt Linton