[Snort-sigs] Duplicate Rules

Joel Esler (jesler) jesler at ...3865...
Fri Jul 29 14:59:02 EDT 2016


Are you running both, the community ruleset, and the Snort Subscriber Rule Set?

--
Joel Esler
Manager, Threat Intelligence Team & Open Source
Talos Group
http://www.talosintelligence.com <http://www.talosintelligence.com/>

> On Jul 29, 2016, at 2:06 PM, Omar Osta <o.osta1978 at ...2420...> wrote:
> 
> I was disbaling some rules and when I grep them from dowloaded.conf file, to verify they were disblaed,  they came up twice.  Here is what I greped to find them:
> 
> "sid:31975;"
> "sid:31976;"
> "sid:31977;"
> "sid:31978;"
> "sid:32039;"
>  sid:32038;"
> "sid:32043;"
> "sid:32069;"
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
> 
> 
> Please visit http://blog.snort.org for the latest news about Snort!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20160729/b9af5b09/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20160729/b9af5b09/attachment.sig>


More information about the Snort-sigs mailing list