Re: [Snort-sigs] Proposal for addition of author to standard rule listings

On  0, Frank Knobbe <frank@knobbe.us> allegedly wrote:
> On Wed, 2004-11-03 at 13:22, Brian wrote:
> > Rule documentation has that already.
>
> Yes, but these attribution are only done to official Snort rules. In
> other words, they are snort-rules dependent. I was hoping to link the
> dependency directly to the rules themselves so that third parties, like
> Bleeding, could use it as well. That way the attribution is linked
> directly to the rule, not the repository.

My recommendation would be that bleeding.rules also include associated
documentation. It kinda helps when you want to know why a rule fired.

+-----------------------------------------------------------------+
    Nigel Houghton      Research Engineer       Sourcefire Inc.
                  Vulnerability Research Team

 Cat: "Forget red - let's go all the way up to brown alert!"
 Kryten: "There's no such thing as a brown alert sir."
 Cat: "You won't be saying that in a minute!"

pgpdZnUDcasMl.pgp
Description: PGP signature