Snort mailing list archives

FATAL ERROR - Preproc Rule Help - rule duplicates


From: Matthew White <on3moda () gmail com>
Date: Wed, 25 May 2016 11:17:52 -0500

I am trying to tune Snort at the processor level in the flow before info is
processed to lighten the CPU usage.

Steps I have tried to no avail
1. Commenting the rule out using #.
2. Changing alert to pass instead of alert to get the following error.

FATAL ERROR: /etc/snort/preproc_rules/preprocessor.rules(29) GID 119 SID 15
in rule duplicates previous rule, with different type.

Instructions I am following

https://www.snort.org/faq/readme-decoder_preproc_rules

Is there something else I am missing?

Thanks,

Matthew
------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: