--On Friday, November 05, 2004 04:20:33 PM -0500 "Andrew R. Baker"
<andrewb@xxxxxxxxx> wrote:
Is that supposed to be 10 billion? The maximum value for a sid is a
signed 32 but integer (thus the 2 billion value lists above). Snort does
not range check the sid value so you will not get an error if it out of
bounds. Try reducing the sid value down to a more reasonable number.
Thanks Andrew. Never would have thought of that. :-)
I changed all the dmca sids to 1000000xx. We'll see what happens.
Sure would be odd of it was overflowing and generating and integer value
that exactly matched the value in a byte test rule, but then this is
computers.......
Paul Schmehl (pauls@xxxxxxxxxxxx)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
| 
