Project

General

Profile

Actions

Bug #3174

closed

Handle duplicate filenames in different rulesets.

Added by Jason Ish about 5 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
High
Assignee:
Target version:
Affected Versions:
Effort:
medium
Difficulty:
low
Label:

Description

Currently if two upstream rule sources both have a file of the same name (ie: rules/ftp.rules), only that last one loaded will be retained. This can currently be seen if you load the Snort Talos rules and ET-Pro, but could happen with other rulesets as well.

In the dict that holds the files we should probably prefix the filenames with part of the source name to work around this issue, making sure filename matchers work as they do now.

Actions

Also available in: Atom PDF