Snort mailing list archives

Duplicate SIDs recently?


From: Jeff Kell <jeff-kell () utc edu>
Date: Sun, 25 Sep 2005 23:17:18 -0400

My last oinkmaster cycle (and retries since) have flagged duplicates with sourcefire sids:

WARNING: duplicate SID in downloaded archive, SID=2380
WARNING: duplicate SID in downloaded archive, SID=2379
WARNING: duplicate SID in downloaded archive, SID=2378
WARNING: duplicate SID in downloaded archive, SID=2507
WARNING: duplicate SID in downloaded archive, SID=2350
WARNING: duplicate SID in downloaded archive, SID=3157
WARNING: duplicate SID in downloaded archive, SID=2351
WARNING: duplicate SID in downloaded archive, SID=3156
WARNING: duplicate SID in downloaded archive, SID=2404
WARNING: duplicate SID in downloaded archive, SID=2352
WARNING: duplicate SID in downloaded archive, SID=3158
WARNING: duplicate SID in downloaded archive, SID=2192
WARNING: duplicate SID in downloaded archive, SID=2251
WARNING: duplicate SID in downloaded archive, SID=3198
WARNING: duplicate SID in downloaded archive, SID=2403
WARNING: duplicate SID in downloaded archive, SID=2508
WARNING: duplicate SID in downloaded archive, SID=3159
WARNING: duplicate SID in downloaded archive, SID=2190
WARNING: duplicate SID in downloaded archive, SID=3197
WARNING: duplicate SID in downloaded archive, SID=2527

Grepping on SIDs I can't find any duplicates, making me think it's a goof in the downloaded packages. I'm using snort-2.4 rules plus current bleeding. Anyone else having this issue?
Jeff


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: