yookd / pulledpork

Automatically exported from code.google.com/p/pulledpork
GNU General Public License v2.0
0 stars 0 forks source link

Sid Ranges do not function in disablesid #54

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. In disablesid.conf, enter:
   1:3000-1:4000   # comment
2. Run pulledpork -v -c /etc/snort/pulledpork.conf
3. Review disabled output to see that only the start and end of the
   range have been processed, not the entire range:
   Processing /etc/snort/disablesid.conf....
        Disabled 1:3000
        Disabled 1:4000
        Modified 2 rules

What is the expected output? What do you see instead?
Expect sids 3000 through 4000 to be disabled.  Instead only sids 3000 AND 4000 
were disabled.  3001, 3002, etc were not disabled as expected.

What version of the product are you using? On what operating system?
0.5

Please provide any additional information below.
This seems like a pretty bad bug, can you reproduce or is there a flaw in my 
config elsewhere that might cause this to happen.

Original issue reported on code.google.com by mikeloc...@gmail.com on 23 Dec 2010 at 11:53

GoogleCodeExporter commented 9 years ago
Oops, managed to double-report this with a double-click.  This is a dupe.

Original comment by mikeloc...@gmail.com on 23 Dec 2010 at 11:54

GoogleCodeExporter commented 9 years ago

Original comment by Cummin...@gmail.com on 3 Jan 2011 at 8:33