<Warning> - [ERRCODE: SC_ERR_DUPLICATE_SIG(176)]

Rules
1

Hello,
Why “suricata -T” command show me below error:

<Warning> - [ERRCODE: SC_ERR_DUPLICATE_SIG(176)] - Signature with newer revision, so the older sig replaced by this new signature "alert ip [193.27.228.0/24,45.129.33.0/24,194.26.25.0/24,193.228.91.0/24,87.251.74.0/24,194.87.138.0/24,45.227.255.0/24,45.95.168.0/24,141.98.81.0/24,5.188.86.0/24,167.248.133.0/24,185.175.93.0/24,176.113.115.0/24,94.102.51.0/24,192.241.214.0/24,83.97.20.0/24,195.54.161.0/24,88.214.24.0/24,103.145.13.0/24,94.102.49.0/24] any -> $HOME_NET any (msg:"ET DROP Dshield Block Listed Source group 1"; reference:url,feeds.dshield.org/block.txt; threshold: type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DshieldIP; sid:2402000; rev:5689; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag Dshield, signature_severity Major, created_at 2010_12_30, updated_at 2020_10_05;)"

Can I clear Suricata-IDS cache?

Thank you.

2

That doesn’t have to do anything with a cache. You have the same signature twice but with different revision, so the newer revision will be used. You might want to remove the old revision one.

3

What is the easiest way to find the old version?

4

Grep for the SID in your rule files and compare the rev number.