Re: Snare - Windows ruleset for Prelude-LML

Hi Nicholas,

Le lundi 30 novembre 2009 à 12:42 -0600, Nicholas Nachefski a écrit :
> Here is the latest beta version of the Snare/Windows ruleset for use with
> Prelude-LML.  I've made the corrections recommended by the community and
> developers.  The Win 2003 rules are pretty stable and well tested, however,
> the 2008 ruleset will probably require further development.

Thanks for this great contribution! It has been checked into the
Prelude-LML GIT repository, with a few changes:

- Add missing copyright notice

- Avoid greedy regexp at the beginning of the pattern, which can be a
performance killer

- Attempt to share more regexp code by using Prelude-LML goto


https://dev.prelude-ids.com/repositories/diff/prelude-lml?rev=220e43e61099810876a44fb9e647708690178f45


Thanks!

-- 
Yoann Vandoorselaere | Directeur Technique/CTO | PreludeIDS Technologies
Tel: +33 (0)1 40 24 65 10                      Fax: +33 (0)1 40 24 65 28
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user