Re: Pulledpork duplicate rules

[waldo kitty <wkitty42 () windstream net>]

On 10/15/2013 7:13 AM, James Lay wrote:
> On Oct 15, 2013, at 4:14 AM, "Stark, Vernon L." <Vernon.Stark () jhuapl edu> wrote:
>
> > That should have been:
> >
> > # cat VRT-server-webapp.rules | grep "sid:24291;" | wc -l
> > 4
> >
> > Vern
>
> What's the output of:
>
> grep "sid:24291:" VRT-server-webapp.rules?

typo alert! that should be "sid:24291;" (semicolon instead of colon) ;)

> Mine show just one ruler, but I'd like to see what yours are…are some commented out, different revs, etc.



-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!