I am against overloading the rules language at all and would prefer that
meta data be kept out of rules completely however why not use something
like
reference:url,mailto://bmc@snort.org
Frank Knobbe wrote:
Greetings,
I would like to propose the addition of an author reference to the
rules. This is not to gloat about rules (although it might entice people
to submit rules as their name in the rule shows their active community
participation). But the main idea is to put some accountability on the
submitter in hopes to raise the quality of community submitted rules.
Since there is no "author:" tag in Snort, or a comment field, my thought
was to use the "reference:" field for that purpose. So I would like to
propose the addition of "author" as a reference type. That way rules can
be referenced to their submitter (and subsequent people that modify,
tweak and improve the rule). I envision something like
"reference:author,bmc@snort.org;".
Again, the main goals are to a) improve active participation (much like
with the documentation efforts), and b) to cause people to create better
quality rules before their name gets attached to it.
What is the thought of the community of this idea?
Regards,
Frank
-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
