Julien T wrote: > * as for the rules/decoder, I'm also for a separate repository. git/svn > them once a day/week/whatever would be nice
I kind of like this kind of model. Obviously there need to be some basic default decoders/rules in the base release.. Or, at least I would think that would be needed.. But having some sort of repo with rules would be awesome. IF things were to proceed in that direction, then a definitive guide should be put together for the rule numbering. The current numbering is perfectly acceptable, but there should be a standard as to what numbers are reserved by the core rules team. The standard I've been using myself is to merely add 100000 to the current rules range and use that for my own local stuff. The more I think about it, the more I like the repo rules database bit.. That would be really nice... > Cheers, > > Julien -- --------------------------- Jason 'XenoPhage' Frisvold [email protected] --------------------------- "Any sufficiently advanced magic is indistinguishable from technology.\" - Niven's Inverse of Clarke's Third Law -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
