Snort mailing list archives
Re: Duplicate Rules
From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Fri, 29 Jul 2016 18:59:02 +0000
Are you running both, the community ruleset, and the Snort Subscriber Rule Set? -- Joel Esler Manager, Threat Intelligence Team & Open Source Talos Group http://www.talosintelligence.com <http://www.talosintelligence.com/>
On Jul 29, 2016, at 2:06 PM, Omar Osta <o.osta1978 () gmail com> wrote: I was disbaling some rules and when I grep them from dowloaded.conf file, to verify they were disblaed, they came up twice. Here is what I greped to find them: "sid:31975;" "sid:31976;" "sid:31977;" "sid:31978;" "sid:32039;" sid:32038;" "sid:32043;" "sid:32069;" ------------------------------------------------------------------------------ _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail
------------------------------------------------------------------------------
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Duplicate Rules Omar Osta (Jul 29)
- Re: Duplicate Rules Joel Esler (jesler) (Jul 29)