Snort mailing list archives

duplicated sid;how is the best way to fix these issues


From: "Turnquist,Wayne" <WayneTurnquist () catholichealth net>
Date: Thu, 20 Oct 2005 10:20:11 -0500

windows 2000 patform using IDS

The following is what i get when i run the check feature.  Where/what files,what to delete to take care of this issue.

What is actually going on? When a rule is down loaded, lets say sid 4140, if there is another rule by that sid, does 
ids then keep the rule but change its sid to 1000001?

Once i fix these issues, what is the best method to keep this from happenning again?

thanks for input
wt

#--------------------------------------------------
#   http://www.activeworx.org Snort  Ruleset
#   IDS Policy Manager Version: 1.7 Build(64)
#    New Rules on -- Oct 20, 2005 9:59 AM
#--------------------------------------------------
Duplicate SID: 4140 Setting SID Value to: 1000001
Duplicate SID: 4141 Setting SID Value to: 1000002
Duplicate SID: 4142 Setting SID Value to: 1000003
Duplicate SID: 4143 Setting SID Value to: 1000004
Duplicate SID: 4144 Setting SID Value to: 1000005
Duplicate SID: 4145 Setting SID Value to: 1000006


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: