Hi... I run snortsnarf for rules update and found that there are 3 rules that appears two time each in snortrules-snapshot-2_1.tar.gz The repeated sids are: 2106 imap.rules 2024 rpc.rules 1902 imap.rules Bye -- Federico Petronio petrus at ...2312...