This will continue to grow I'm afraid --- though later versions willJust an idea. How about doing what AV do? I mean, you only get new rulebases downloaded... Instad of downloading the whole 14mb, download just the updates, which probably are a couple of hundred K. And once a week or every two weebs, a whole rulebase can be downloaded that unifies everything.
deal with the file directly at some point. All of the rules that are
included in the rulebase file are live patterns that have seen recent
activity. The system automatically removes anything below your rule
strength threshold so that there are no inert rules in the system.
This mechanism is one of the critical things we do with reported log
files.
-- Jorge Asch Revilla CONEXION DCR www.conexion.co.cr 800-CONEXION
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
