[Snort-sigs] Re: "bad guy" tagging

Michael Boman michael.boman at ...267...
Thu Jul 17 15:35:32 EDT 2003


On Thu, 2003-07-17 at 19:16, Chris Green wrote:
> Martin Olsson <elof at ...1288...> writes:
> >
> > Ok, it might not be the most beautiful solution, but putting this standard
> > word first in the msg-tag works.
> >
> > When can we expect an official anouncement?
> 
> This was a possible solution, not a planned course of action. I'll
> talk it over with local people here but do realize that it means
> potentially touching 2000+ things.

Adding a keyword is many, many lines of code and changing 2000+ rules ;)

Of course, a keyword would be neat...

Best regards
 Michael Boman

-- 
Michael Boman
Security Architect, SecureCiRT Pte Ltd
http://www.securecirt.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20030717/e1b3845c/attachment.sig>


More information about the Snort-sigs mailing list