Re: Oinkmaster Update

[Andreas Östling <andreaso () it su se>]

On Monday 24 October 2005 05:01, Bill Parker wrote:
> Hi All,
>
>     I was doing my weekly check through for oinkmaster, and I got the
> following messages:
...
> WARNING: duplicate SID in downloaded archive, SID=3156
...
> Has anyone else seen this behavior with OinkMaster?

They introduced rules with duplicate sids in the rules archives again
(it has nothing to do with Oinkmaster except that it will detect it and 
warn you). snortrules-snapshot-2.3.tar.gz currently contains dups for 
sid 3157, 3156, 2190, 3197. snortrules-snapshot-2.4.tar.gz contains dup 
for sid 2350. Oinkmaster will only keep the rule with the highest 
revision number so it's harmless but annoying.

/Andreas



-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users