Snort mailing list archives
duplicated sid;how is the best way to fix these issues
From: "Turnquist,Wayne" <WayneTurnquist () catholichealth net>
Date: Thu, 20 Oct 2005 10:20:11 -0500
windows 2000 patform using IDS The following is what i get when i run the check feature. Where/what files,what to delete to take care of this issue. What is actually going on? When a rule is down loaded, lets say sid 4140, if there is another rule by that sid, does ids then keep the rule but change its sid to 1000001? Once i fix these issues, what is the best method to keep this from happenning again? thanks for input wt #-------------------------------------------------- # http://www.activeworx.org Snort Ruleset # IDS Policy Manager Version: 1.7 Build(64) # New Rules on -- Oct 20, 2005 9:59 AM #-------------------------------------------------- Duplicate SID: 4140 Setting SID Value to: 1000001 Duplicate SID: 4141 Setting SID Value to: 1000002 Duplicate SID: 4142 Setting SID Value to: 1000003 Duplicate SID: 4143 Setting SID Value to: 1000004 Duplicate SID: 4144 Setting SID Value to: 1000005 Duplicate SID: 4145 Setting SID Value to: 1000006 ------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- duplicated sid;how is the best way to fix these issues Turnquist,Wayne (Oct 20)