OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [snort] Can't get whisker scan to log
From: Martin Roesch (roeschhiverworld.com)
Date: Mon Mar 06 2000 - 22:36:59 CST


Maybe I could all a "-Wall" switch (like in gcc) that would be
especially verbose with warnings when parsing the rules file.

I think -W is still available.....

Joey McAlerney wrote:
>
> I think a warning might be nice. Some will probably disagree. There are
> probably people who use variable redefinition to their advantage. Of course,
> it could take some time to prevent users from making all the silly mistakes.
> After spending time catching this one, I know I won't be doing it again anytime
> soon. :-)
>
> -Joey M.
>
> Martin Roesch wrote:
>
> > Hmm, maybe I should pop a message when variables get redefined to
> > prevent (well, illuminate) such potential problems...
> >
> > Thoughts anyone?
> >
> > -Marty
> >
> > Joey McAlerney wrote:
> > >
> > > Disregard this. I found a blasted $HOME_NET redeclaration where it should
> > > not have been.
> >
> > --
> > Martin Roesch <roeschhiverworld.com>
> > Director of Forensic Systems http://www.hiverworld.com
> > Hiverworld, Inc. Enterprise Network Security
> > Network Forensics, Intrusion Detection and Risk Assessment

-- 
Martin Roesch                      <roeschhiverworld.com>
Director of Forensic Systems     http://www.hiverworld.com
Hiverworld, Inc.               Enterprise Network Security
Network Forensics, Intrusion Detection and Risk Assessment