[Snort-sigs] Signature Naming Convention

Robert Wagner rwagner at ...447...
Tue Apr 16 08:16:25 EDT 2002

I was wondering if we could use a standard naming convention across the
rules such that:
"INFO MSN chat access" in the logs would prompt me to look at the info.rules
if we want to change or disable the rule.  This rule is located in the
policy.rules. Should it read: "POLICY MSN chat access"?  All of the
policy.rules say INFO....

Any ideas?  Is it just me?


More information about the Snort-sigs mailing list