Re: [Prelude Hybrid IDS] #206: Knowing the ruleset id generating alerts
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#206: Knowing the ruleset id generating alerts
-------------------------+--------------------------------------------------
Reporter: toady | Owner: yoann
Type: enhancement | Status: assigned
Priority: normal | Milestone: Prelude-LML 0.9.9
Component: prelude-lml | Version: devel
Severity: normal | Resolution:
Keywords: |
-------------------------+--------------------------------------------------
Comment (by gegomez):
I'll opt for doing it in additional_data. It's probably a good idea to
add the revision in there, too.
In this case, the id and rev keywords lose their purpose, so a ruleset
change of this type would require all the rules to be touched (which isn't
a problem, just stating it)
--
Ticket URL: <https://trac.prelude-ids.org/ticket/206#comment:2>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel