RE: Duplicate SIDs recently?

["Ron Jenkins" <rjenkins () dibr net>]

Me too.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Jeff Kell
Sent: Sunday, September 25, 2005 10:17 PM
To: Bleeding Sigs; snort-users () lists sourceforge net
Subject: [Snort-users] Duplicate SIDs recently?

My last oinkmaster cycle (and retries since) have flagged duplicates
with sourcefire sids:

WARNING: duplicate SID in downloaded archive, SID=2380
WARNING: duplicate SID in downloaded archive, SID=2379
WARNING: duplicate SID in downloaded archive, SID=2378
WARNING: duplicate SID in downloaded archive, SID=2507
WARNING: duplicate SID in downloaded archive, SID=2350
WARNING: duplicate SID in downloaded archive, SID=3157
WARNING: duplicate SID in downloaded archive, SID=2351
WARNING: duplicate SID in downloaded archive, SID=3156
WARNING: duplicate SID in downloaded archive, SID=2404
WARNING: duplicate SID in downloaded archive, SID=2352
WARNING: duplicate SID in downloaded archive, SID=3158
WARNING: duplicate SID in downloaded archive, SID=2192
WARNING: duplicate SID in downloaded archive, SID=2251
WARNING: duplicate SID in downloaded archive, SID=3198
WARNING: duplicate SID in downloaded archive, SID=2403
WARNING: duplicate SID in downloaded archive, SID=2508
WARNING: duplicate SID in downloaded archive, SID=3159
WARNING: duplicate SID in downloaded archive, SID=2190
WARNING: duplicate SID in downloaded archive, SID=3197
WARNING: duplicate SID in downloaded archive, SID=2527

Grepping on SIDs I can't find any duplicates, making me think it's a
goof in the downloaded packages.  I'm using snort-2.4 rules plus current
bleeding.  Anyone else having this issue?  

Jeff


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users