Snort mailing list archives
Re: Pulledpork duplicate rules
From: James Lay <digitalx00 () gmail com>
Date: Tue, 15 Oct 2013 05:13:12 -0600
On Oct 15, 2013, at 4:14 AM, "Stark, Vernon L." <Vernon.Stark () jhuapl edu> wrote:
That should have been: # cat VRT-server-webapp.rules | grep "sid:24291;" | wc -l 4 Vern
What's the output of: grep "sid:24291:" VRT-server-webapp.rules? Mine show just one ruler, but I'd like to see what yours areā¦are some commented out, different revs, etc. James ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: Pulledpork duplicate rules, (continued)
- Re: Pulledpork duplicate rules JJC (Oct 14)
- Re: Pulledpork duplicate rules James Lay (Oct 14)
- Re: Pulledpork duplicate rules carlopmart (Oct 14)
- Re: Pulledpork duplicate rules carlopmart (Oct 14)
- Re: Pulledpork duplicate rules James Lay (Oct 14)
- Re: Pulledpork duplicate rules JJ Cummings (Oct 14)
- Re: Pulledpork duplicate rules JJ Cummings (Oct 14)
- Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)
- Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)
- Re: Pulledpork duplicate rules James Lay (Oct 15)
- Re: Pulledpork duplicate rules waldo kitty (Oct 15)
- Re: Pulledpork duplicate rules Stark, Vernon L. (Oct 15)