[Dshield] Again

Joel Esler esler at knology.net
Tue Oct 26 15:43:20 GMT 2004


Thanks.  I always forget about awk, sed, and uniq for stuff like that.  
grr..  thanks!

Joel

On Oct 26, 2004, at 11:08, Mark Tombaugh wrote:

> On Monday 25 October 2004 4:02 pm, Esler, Joel - Contractor wrote:
>> I have my sid-msg.map...  For Snort...  How can I write a
>> query/command/whatever to check it for duplicate signature numbers?
>
>
> awk '{print $1}' sid-msg.map | uniq -d
>
> -- 
> Mark Tombaugh <mtombaugh at alliedcc.com>
> Allied Computer Corporation <http://www.alliedcc.com>
> USiHOST, iNC. <http://www.usihost.com>
> _______________________________________________
> DShield and the Internet Storm Center are sponsored by the SANS 
> Institute.
> To learn more about current SANS training, see http://www.sans.org .
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list