security.ids.snort.sigs (thread)

WEB-IIS Translate update..., Erik Fichtner
Some intresting stats on base components of rules, Sean Wheeler
Simple Question!!, SAM IDS
- Re: Simple Question!!, Nigel Houghton
  - Re: Simple Question!!, SAM IDS
    - Re: Simple Question!!, Nigel Houghton
- Simple Question!!, SAM IDS
Snort-sigs -- confirmation of subscription -- request 711881, Scott Weller
Flex Response + NIC, Dusty Hall
Snort SIG update - false positives on SID 2329, Dr. Christoph Wegener
- Re: Snort SIG update - false positives on SID 2329, Nigel Houghton
Need Some Explanation about Sigs, SAM IDS
- Re: Need Some Explanation about Sigs, Alejandro Flores
  - Re: Need Some Explanation about Sigs, Brian
some corrections to rules incorrectly refering to a reference resource not located in etc/reference.config, Sean Wheeler
Does rules 2159 make sense ?, Sean Wheeler
writing signatures from isolated viruses, Cory Hollingsworth
- Re: writing signatures from isolated viruses, pieter claassen
- Re: writing signatures from isolated viruses, Jason Haar
False positive found for rule side=1634, Bobby Kuzma
error running snort, MEGA Hospedagem
- Re: error running snort, Dale L. Handy
Re: [ISSForum] Witty signature, Sergey V Soldatov
- Re: [ISSForum] Witty signature, Sergey V Soldatov
Slight mistake in SID 2197, Christian Robottom Reis
Any signatures for msclock.exe ?, Meinecke, Dennis
snort whitelist, MEGA Hospedagem
- Re: snort whitelist, frank
- Re: snort whitelist, Dale L. Handy
- Re: snort whitelist, Carl Gibbons
Duplicate 732, Hugo van der Kooij
Netsky.P Signature, Cam Beasley, ISO
- Re: Netsky.P Signature, Brian
- Re: Netsky.P Signature, Mark . Schutzmann
  - Re: Netsky.P Signature, Jason Haar
- RE: Netsky.P Signature, Adrian Marsden
snort-rules 2.1.* update @ Mon Mar 22 14:15:27 2004, bmc
snort-rules CURRENT update @ Sat Mar 20 20:15:26 2004, bmc
Performance Monitor, Rodrigo B. Ramos
Witty signature, todb
- Re: Witty signature, todb
- Re: Witty signature, Brian
  - Re: Witty signature, todb
- Re: Witty signature, Russell Fulton
  - Re: Witty signature, Jason
ACID Response Table Bug, King Jr, Charles (Contractor)
query, jayarajd
- RE: query, Michael Miller
false positives for attack-response rules (and suggested fix), Milani Paolo
- Re: false positives for attack-response rules (and suggested fix), Brian
pcre syntax error for sid 1229, Milani Paolo
- Re: pcre syntax error for sid 1229, Brian
Hidden message, bmc
Re: Hi, bmc
Hotbar, Rowland, Krisa W ERDC-ITL-MS Contractor
Anonymous Proxy Server Detection, eric . ferguson
- RE: Anonymous Proxy Server Detection, Kreimendahl, Chad J
Phatbot Sigs, Dan Michitsch
Threshold in signatures, Roach4
snort rule 2329, Ekblad, Eric M
A question about comparing IDSs, Islam Hegazy
- RE: A question about comparing IDSs, Yaakov Yehudi
- RE: A question about comparing IDSs, Martin Dion
FP on "NETBIOS DCERPC Remote Activation bind attempt", Jason Haar
Phatbot signatures, Joe Stewart
FP on sid=535, Jason Haar
Rule naming inconsistancy for C$/D$ SMB access, Jason Haar
Shouldn't all chat.rules be "policy violation"?, Jason Haar
- Re: Shouldn't all chat.rules be "policy violation"?, Brian
FP with sid=2403, Jason Haar
detection time, Islam Hegazy
- detection time, Islam Hegazy
  - Re: detection time, Hugo van der Kooij
Sid 2343, Steven Alexander
Sid 2340, Steven Alexander
Sid 2338, Steven Alexander
Sid 2337, again, Steven Alexander
Documentation sid 2337, Steven Alexander
- Re: Documentation sid 2337, Nigel Houghton
Question about rule 1549, Federico Petronio
- Re: Question about rule 1549, Brian
  - Re: Question about rule 1549, Federico Petronio
False positive, Michaël Catroux
- Re: False positive, Hugo van der Kooij
snort ID: 525 BAD-TRAFFIC udp port 0 traffic, Ilango S Allikuzhi
False positive generated on SID 2329, Jonathon Leszczynski
- False positive generated on SID 2329, Jonathon Leszczynski
Sid:628 update suggestion, Affeld, James
False positive on SID 1561 (pcap attached), JStarke
imesh signature?, Jasmine CHUA
- RE: imesh signature?, Tony Hernandez
Sober.D - a new variant, Chintan Gosalia
Bad rule... Bad bad rule, Kreimendahl, Chad J
Pure Not Rule not Supported?, Amanda Meyer
- Re: Pure Not Rule not Supported?, Michael Sconzo
- Re: Pure Not Rule not Supported?, Matt Kettler
Help, Rodrigo Albernaz Bezerra
- Re: Help, Jimmi Andersen
- Help, Rodrigo Albernaz Bezerra
  - Re: Help, Alberto Gonzalez
W32.Beagle.J Worm Signature?, Mark . Schutzmann
- Re: W32.Beagle.J Worm Signature?, Hugo van der Kooij
  - Re: W32.Beagle.J Worm Signature?, Jason Haar
- Re: W32.Beagle.J Worm Signature?, RuthAnne Bevier
- RE: W32.Beagle.J Worm Signature?, Cam Beasley, ISO
- Re: Re: W32.Beagle.J Worm Signature?, Mark . Schutzmann
pass rules, Rowland, Krisa W ERDC-ITL-MS Contractor
- Re: pass rules, John B.
  - Re: pass rules, Dale L. Handy
Netsky.c + others? attachment sid, Scott Zawalski
- Re: Netsky.c + others? attachment sid, John B.
  - Re: Netsky.c + others? attachment sid, John B.
    - Re: Netsky.c + others? attachment sid, Hugo van der Kooij
    - Re: Netsky.c + others? attachment sid, John B.
    - Re: Netsky.c + others? attachment sid, Hugo van der Kooij
    - Re: Netsky.c + others? attachment sid, John B.
snort-rules 2.1.* update @ Mon Mar 1 14:15:28 2004, bmc
Re: Here are some Netsky Worm Sigs, Tom . Mclaughlin
- Re: Here are some Netsky Worm Sigs, Mark . Schutzmann
snort-rules CURRENT update @ Mon Mar 1 09:40:19 2004, bmc
snort-rules 2.1.* update @ Mon Mar 1 09:40:19 2004, bmc
Snort false positive for SID 218, Matt Linton