From: Ron Jenkins (rjenkinsdibr.net)
Date: Sun Sep 25 2005 - 22:18:34 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Me too.

-----Original Message-----
From: snort-users-adminlists.sourceforge.net
[mailto:snort-users-adminlists.sourceforge.net] On Behalf Of Jeff Kell
Sent: Sunday, September 25, 2005 10:17 PM
To: Bleeding Sigs; snort-userslists.sourceforge.net
Subject: [Snort-users] Duplicate SIDs recently?

My last oinkmaster cycle (and retries since) have flagged duplicates
with sourcefire sids:

WARNING: duplicate SID in downloaded archive, SID=2380
WARNING: duplicate SID in downloaded archive, SID=2379
WARNING: duplicate SID in downloaded archive, SID=2378
WARNING: duplicate SID in downloaded archive, SID=2507
WARNING: duplicate SID in downloaded archive, SID=2350
WARNING: duplicate SID in downloaded archive, SID=3157
WARNING: duplicate SID in downloaded archive, SID=2351
WARNING: duplicate SID in downloaded archive, SID=3156
WARNING: duplicate SID in downloaded archive, SID=2404
WARNING: duplicate SID in downloaded archive, SID=2352
WARNING: duplicate SID in downloaded archive, SID=3158
WARNING: duplicate SID in downloaded archive, SID=2192
WARNING: duplicate SID in downloaded archive, SID=2251
WARNING: duplicate SID in downloaded archive, SID=3198
WARNING: duplicate SID in downloaded archive, SID=2403
WARNING: duplicate SID in downloaded archive, SID=2508
WARNING: duplicate SID in downloaded archive, SID=3159
WARNING: duplicate SID in downloaded archive, SID=2190
WARNING: duplicate SID in downloaded archive, SID=3197
WARNING: duplicate SID in downloaded archive, SID=2527

Grepping on SIDs I can't find any duplicates, making me think it's a
goof in the downloaded packages. I'm using snort-2.4 rules plus current
bleeding. Anyone else having this issue?

Jeff

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]