Me too.
-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Jeff Kell
Sent: Sunday, September 25, 2005 10:17 PM
To: Bleeding Sigs; snort-users@lists.sourceforge.net
Subject: [Snort-users] Duplicate SIDs recently?
My last oinkmaster cycle (and retries since) have flagged duplicates
with sourcefire sids:
WARNING: duplicate SID in downloaded archive, SID=2380
WARNING: duplicate SID in downloaded archive, SID=2379
WARNING: duplicate SID in downloaded archive, SID=2378
WARNING: duplicate SID in downloaded archive, SID=2507
WARNING: duplicate SID in downloaded archive, SID=2350
WARNING: duplicate SID in downloaded archive, SID=3157
WARNING: duplicate SID in downloaded archive, SID=2351
WARNING: duplicate SID in downloaded archive, SID=3156
WARNING: duplicate SID in downloaded archive, SID=2404
WARNING: duplicate SID in downloaded archive, SID=2352
WARNING: duplicate SID in downloaded archive, SID=3158
WARNING: duplicate SID in downloaded archive, SID=2192
WARNING: duplicate SID in downloaded archive, SID=2251
WARNING: duplicate SID in downloaded archive, SID=3198
WARNING: duplicate SID in downloaded archive, SID=2403
WARNING: duplicate SID in downloaded archive, SID=2508
WARNING: duplicate SID in downloaded archive, SID=3159
WARNING: duplicate SID in downloaded archive, SID=2190
WARNING: duplicate SID in downloaded archive, SID=3197
WARNING: duplicate SID in downloaded archive, SID=2527
Grepping on SIDs I can't find any duplicates, making me think it's a
goof in the downloaded packages. I'm using snort-2.4 rules plus current
bleeding. Anyone else having this issue?
Jeff
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list
