Re: [IDMEF][Issue 10] Severity scale too narrow

On Tue, 2004-01-27 at 13:54, Herve Debar wrote:
>  > On Sun, 11 Jan 2004, David A. Curry wrote:
>  >
>  >
>  >>I am way skeptical of any scheme that purports to assign numerical
>  >>values to this type of data and claim that they are "accurate" in any
>  >>meaningful way.
>  >>
>  >>As I recall, the group was similarly skeptical when the idea was
>  >>proposed in the past (and it was proposed more than once).
> 
> I think in similar terms. I'd like to propose an enumerated, textual 
> list, and let people assign whatever internal numerical values they 
> want. Maybe this "numerical" value could be provided for as an option, 
> but the enumerated string would be mandatory.

Wouldn't numerical value be a problem for interoperability between
products ?

-- 
Yoann Vandoorselaere, http://www.prelude-ids.org

"Programming is a race between programmers, who try and make more and 
 more idiot-proof software, and universe, which produces more and more 
 remarkable idiots. Until now, universe leads the race"  -- R. Cook

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBAFqVF4tfUv0C+vv8RAj4gAJ0aS1FW4t2MeVLog9tw+O2kgnu2uACdHj37
+f5hNk4NymxpHbOoG4fhPH4=
=Vkir
-----END PGP SIGNATURE-----