Introduction to Shared Object Rules blog post

[Patrick Mullen <pmullen () sourcefire com>]

All,

I would like to direct your attention to a blog post that just went up
that gives an introduction to shared object rules development and the
snort text rule to shared object rule converter that is available on
the VRT Labs site (http://labs.snort.org) --

http://vrt-sourcefire.blogspot.com/2010/02/introduction-to-shared-object-rules.html

Please give it a read and let me know what you think.  It's the first
in a series that is intended to finally provide some documentation
around SO rules, but as the post states this is an introduction that
simply goes ahead and puts the idea out there and leaves a lot of
interpretation to the reader.  My hope is that it spurs discussion, so
please feel free to comment on the blog, on the list, or to me
personally.  Questions about why something was done a particular way
or why something was done (or not done) are welcomed and appreciated.


Thanks!

~Patrick

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users