[Snort-sigs] OT: cleanup in Bleeding edge rules

Jason Haar Jason.Haar at ...651...
Sun Feb 13 13:03:00 EST 2005

Sorry, I'm not a member of the Bleeding edge list, but I know they 
listen here

Can the rules be tidied up a bit? Currently if you do:

egrep -v 'msg:"BLEEDING-EDGE |msg: "BLEEDING-EDGE ' 
~/bleeding-all.rules|grep ^al

there are 5 that don't match - one BLEEDING_EDGE and the rest don't have 
BLEED* at all.

Perhaps standardize them on 'msg:"BLEEDING-EDGE '? It just makes 
sed's/etc a lot easier when they all start with the same string :-)



Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

More information about the Snort-sigs mailing list