[Snort-sigs] Unsubscribe

go95 go95 at ...20...
Thu May 19 01:04:30 EDT 2011


Unsubscribe

Thank You,
Gregg Olsen
(646) 688-4435

On May 18, 2011, at 6:58 PM, snort-sigs-request at lists.sourceforge.net wrote:

> Send Snort-sigs mailing list submissions to
>    snort-sigs at lists.sourceforge.net
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>    https://lists.sourceforge.net/lists/listinfo/snort-sigs
> or, via email, send a message with subject or body 'help' to
>    snort-sigs-request at lists.sourceforge.net
> 
> You can reach the person managing the list at
>    snort-sigs-owner at lists.sourceforge.net
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Snort-sigs digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: performance criteria (Jamie Riden)
>   2. Re: performance criteria (evilghost at ...3397...)
>   3. Sourcefire VRT Certified Snort Rules Update 2011-05-18 (Research)
>   4. Your Webinar Invitation: Join us for "Snort Webinar --    Proper
>      implementation of Multiconfig -- John Gay" (Joel Esler)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Mon, 16 May 2011 21:27:46 +0100
> From: Jamie Riden <jamie.riden at ...2420...>
> Subject: Re: [Snort-sigs] performance criteria
> To: "evilghost at ...3397..." <evilghost at ...3397...>
> Cc: "snort-sigs at lists.sourceforge.net"
>    <snort-sigs at lists.sourceforge.net>
> Message-ID: <BANLkTik6Jyi5_eSU4mAyijK1stj4UykdRw at ...2421...>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Yes, heaven forbid we should discuss IDS performance metrics on an IDS
> sigs list.
> 
> On 16 May 2011 04:07, evilghost at ...3397... <evilghost at ...3397...> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> This question was also posed in a different form, via thread hi-jacking, on
>> Emerging-Threats as well. ?Obvious troll is obvious; do not respond.
>> 
>> Jules you need to work on your troll-craft and I'm willing to offer up some
>> after hour tutoring if you want to better hone your skills.
>> 
>> Here is your scoring breakdown for this attempt:
>> 
>> 1) Subtle controversial topic; +10 points
>> 2) Thread hi-jacking a proposed signature ET thread; -5 points.
>> 3) Dual-posting to both Snort-Sigs and ET; -5 points
>> 4) Poorly structured question; -5 points
>> 5) Weakly structured veiled question to incite conflict; -5 points.
>> 
>> Total score: -5 points. ?Feel free to follow up with me on tutoring.
>> 
>> 
>> 
>> On 05/15/11 08:20, Jules Pagna Disso wrote:
>>> hi,
>>> 
>>> I know this is not directly related to rules but I think you would be the
>>> best to help me with the criteria/parameters that need considering when
>>> evaluating and IDS performance or when comparing two IDS.
>>> 
>>> thanks,
>>> Jules
> 
> -- 
> Jamie Riden / jamie at ...3509... / jamie.riden at ...2420...
> http://uk.linkedin.com/in/jamieriden
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Mon, 16 May 2011 15:33:20 -0500
> From: "evilghost at ...3397..." <evilghost at ...3397...>
> Subject: Re: [Snort-sigs] performance criteria
> To: Jamie Riden <jamie.riden at ...2420...>
> Cc: "snort-sigs at lists.sourceforge.net"
>    <snort-sigs at lists.sourceforge.net>
> Message-ID: <4DD18A10.6010402 at ...3397...>
> Content-Type: text/plain; charset="us-ascii"
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 05/16/11 15:27, Jamie Riden wrote:
>> Yes, heaven forbid we should discuss IDS performance metrics on an IDS
>> sigs list.
> 
> My thoughts exactly...
> 
> - -- 
> 
> - -evilghost
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> 
> iQIcBAEBAgAGBQJN0YoQAAoJENgimYXu6xOHJEMP/igVOTfAcS4UTu0Y+8MaYnEw
> E1lrrhjCjw0/FuemAKp34IvczQmGV0gaTYoqV3uFoFe5OeDW6wKKjbS4uwKD0gAf
> tNbzJsPffKStUIs+Fd1+d9j23P3WV8vs2s8p5HrYm7B9k30+o6fBRvigTORwXxlM
> m07ODGes8UvWAlb6mxdROHdz2IXF90cpW91HM6TvzKAzcRz2ieIi2g0bY43XT5En
> 29VQlMbpb5c6UTqnvLhGw8mZjK++osDLdm8wJlXhQlHm+u2fPiEfIDO6czIoLYpv
> AJ//sskImrvut5sPWl2bYhGWzD5OzX8bx/giu7KA0LDgI9r98ajztVPdvOn/yr10
> NLc2K0CRYO73w1iD6yMMNvOPo3XxQ5PJ2F/+uXvrmT1QiaFEbyHOFBDzKg4M5cfB
> 5qxY5CXEMpW29K62NBW44o4oXYc/DaMbFrYqqOzUa879OiVsP2EYX7cdA9PphFeZ
> skWDL+MfEjcX4qoGoBe6p53H9hrOpTfb5Ajoz0y6uFvRlqrwix7UCjcNU0Nilui+
> hYt/aMVsIYj6xhpWbae8mAkvQM0mdj71QLU6Zeh/cunD7TUTzQjz02OL7Lsx6WJb
> IsdS29O1oHIHchmaYCYKOTRhDw9oaaynjRLjY4CwGXAs4TDKi/j7ipkvRelzCS8z
> pJj9blKY/GhU8Mr/F/X9
> =I+kp
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Wed, 18 May 2011 13:14:35 -0400 (EDT)
> From: Research <research at ...435...>
> Subject: [Snort-sigs] Sourcefire VRT Certified Snort Rules Update
>    2011-05-18
> To: snort-sigs at lists.sourceforge.net
> Message-ID: <20110518171435.B5B846CC12D at ...435...>
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> Sourcefire VRT Certified Snort Rules Update
> 
> Synopsis:
> This release adds and modifies rules in several categories.
> 
> Details:
> The Sourcefire VRT has added and modified multiple rules in the
> backdoor, blacklist, botnet-cnc, exploit, oracle, policy,
> specific-threats, web-activex and web-misc rule sets to provide
> coverage for emerging threats from these technologies.
> 
> For a complete list of new and modified rules please see:
> 
> http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2011-05-18.html
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
> 
> iD8DBQFN0/4saBoqZBVJfwMRAjIbAKCCHWdAfY99fNv2I5KhvmQHqb2S9QCglZ8B
> 9ggBgJ4KiGf2RNwLa82kbio=
> =Gpec
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> ------------------------------
> 
> Message: 4
> Date: Wed, 18 May 2011 18:57:58 -0400
> From: Joel Esler <jesler at ...435...>
> Subject: [Snort-sigs] Your Webinar Invitation: Join us for "Snort
>    Webinar --    Proper implementation of Multiconfig -- John Gay"
> To: snort-users <snort-users at lists.sourceforge.net>,
>    snort-sigs at lists.sourceforge.net, snortsigs at ...3575...,
>    snortusers at ...3575...
> Message-ID: <29404FF6-0D11-4CE9-B1BB-76F280A18558 at ...435...>
> Content-Type: text/plain; charset="iso-8859-1"
> 
>> 
>> 
>> 
>>    
>> 
>> Snort Webinar -- Proper implementation of Multiconfig -- John Gay
>> Join us for a Webinar on May 25
>> 
>> Space is limited.
>> Reserve your Webinar seat now at:
>> https://www3.gotomeeting.com/register/146516590
>> John Gay, Instructor and Courseware Developer for Sourcefire explains the proper implementation of multiple Snort configuration
>> Title:    Snort Webinar -- Proper implementation of Multiconfig -- John Gay
>> Date:    Wednesday, May 25, 2011
>> Time:    12:00 PM - 1:00 AM EDT
>> After registering you will receive a confirmation email containing information about joining the Webinar.
>> System Requirements
>> PC-based attendees
>> Required: Windows? 7, Vista, XP or 2003 Server
>> Macintosh?-based attendees
>> Required: Mac OS? X 10.4.11 (Tiger?) or newer
>> 
>> 
> 
> -------------- next part --------------
> An HTML attachment was scrubbed...
> 
> ------------------------------
> 
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its 
> next-generation tools to help Windows* and Linux* C/C++ and Fortran 
> developers boost performance applications - including clusters. 
> http://p.sf.net/sfu/intel-dev2devmay
> 
> ------------------------------
> 
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> 
> 
> End of Snort-sigs Digest, Vol 60, Issue 3
> *****************************************




More information about the Snort-sigs mailing list