Snort mailing list archives

Signature names


From: "Mike Macias" <mike.macias () caci-nsg com>
Date: Tue, 23 Apr 2002 21:00:39 -0400

Is there any work being done to shorten/standardize snort sig names?
The current sig names are unwieldy and they make programming tools(command line) for analysis difficult.
I'm currently making tools that will, among other things, allow you to query a db looking for matching sig names:

snort_tool -s <sig_name>

However, when it comes to some of the snort sig names:

snort_tool -s "WEB-MISC technote main.cgi file directory traversal attempt"

I can imagine an analyst pulling his/her hair out typing this in.

Thanks,
Mike 

Current thread: