Snort mailing list archives

Re: Pulledpork duplicate rules


From: JJ Cummings <cummingsj () gmail com>
Date: Mon, 14 Oct 2013 13:40:49 -0600

Only if it is duplicated in multiple files 

Sent from the iRoad

On Oct 14, 2013, at 13:21, James Lay <jlay () slave-tothe-box net> wrote:

On 2013-10-14 12:59, carlopmart wrote:
On 14/10/13 14:50, James Lay wrote:
Got a rule SID that's duping?  I'm going to bet it's a rule that was
moved from one ruleset to a different set.

Uhmm .. I doubt this .. I haven't added any rule manually. I only use
emergingthreats in this sensor ...


--
CL Martinez

Can you give a SID that shows up as a duplicate?

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: