From: Corey Thomas Date: Tue, 2 Mar 2021 16:16:21 +0000 (-0500) Subject: rules/decoder-events: fix duplicate sid X-Git-Tag: suricata-5.0.7~12 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7fcc9a50669080b998c18988e3ffcd396e0cd004;p=thirdparty%2Fsuricata.git rules/decoder-events: fix duplicate sid --- diff --git a/rules/decoder-events.rules b/rules/decoder-events.rules index 3dea158ac1..515e93325d 100644 --- a/rules/decoder-events.rules +++ b/rules/decoder-events.rules @@ -143,6 +143,6 @@ alert pkthdr any any -> any any (msg:"SURICATA ERSPAN too many vlan layers"; dec # Cisco Fabric Path/DCE alert pkthdr any any -> any any (msg:"SURICATA DCE packet too small"; decode-event:dce.pkt_too_small; classtype:protocol-command-decode; sid:2200110; rev:2;) -alert pkthdr any any -> any any (msg:"SURICATA packet with too many layers"; decode-event:too_many_layers; classtype:protocol-command-decode; sid:2200111; rev:1;) -# next sid is 2200112 +alert pkthdr any any -> any any (msg:"SURICATA packet with too many layers"; decode-event:too_many_layers; classtype:protocol-command-decode; sid:2200116; rev:1;) +# next sid is 2200117