Speaking for the BS project and the community, I definitely agree that
docs are critical.
That said, we still don't have them. :) The forums and the
bleeding-sigs list are our temporary and crude attempt at it. We have
other goals, but daily operation is filling our time at the moment. (as
well as day jobs)
It is definitely on our future goals. A method where you can easily get
to the docs of a particular sig by hitting
www.bleedingsnort.com/docs.php?sid=2000000
At the basic level it shouldn't be too tough. But we've always tried to
tie that into larger projects (rule manager, etc) and we've not had the
time to do so. So it may be time to tackle this one without it's other
wishlist items.
Volunteers welcome. It shouldn't take but intermediate knowledge of php,
some mysql. I don't think any of the current admins have the capacity to
take that on at the moment though.
Matt
João Mota wrote:
I think that documenting a rule is as important as writing/tunning it.
What is an alert worth if you don't know anything about it?
Is there a repository to the signature comments (similar to the
snort-xxxxx/docs/signatures/*.txt) for bleeding snort rules? If so,
where can I find them?
João
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
--
--------------------------------------------
Matthew Jonkman, CISSP
Senior Security Engineer
Infotex
765-429-0398 Direct Anytime
765-448-6847 Office
866-679-5177 24x7 NOC
my.infotex.com
www.offsitefilter.com
www.bleedingsnort.com
--------------------------------------------
NOTICE: The information contained in this email is confidential
and intended solely for the intended recipient. Any use,
distribution, transmittal or retransmittal of information
contained in this email by persons who are not intended
recipients may be a violation of law and is strictly prohibited.
If you are not the intended recipient, please contact the sender
and delete all copies.
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
