[Snort-devel] [PATCH]: Fix Snort references parsing

BOfH BOfH at ...2862...
Fri Feb 17 07:15:04 EST 2006


On  0, Yoann Vandoorselaere <yoann.v at ...2801...> scribed:
> On Thu, 2006-02-16 at 17:41 -0500, Matthew Watchinski wrote:
> > Just an FYI, the VRT rule merge and build system strips spaces after 
> > "x:" by default, as this problem has occured with other keywords.  You 
> > shouldn't ever see this issue in any of the VRT Certified rule packages.
> 
> Yes, the 'reference: ' issue was seen with bleeding snort rulesets. I'd
> still suggest, however, that the spaces be stripped (as it is done for
> some others Snort keywords), for sanity.
 
I'd rather see the rules themselves fixed.

-- 
BoFH

excuse #446:
Mailer-daemon is busy burning your message in hell




More information about the Snort-devel mailing list