Re: daily updates

[Henry Stern]

If SARE provides me with a corpus and patch file, I will tune and run the perceptron for them. Henry Fred wrote: Justin Mason wrote: BTW, I think you guys (SARE that is) are using mass-check to measure accuracy, right? Yes we have 3 members who test against a corpus using Bobs mass-check script. We plan to use the perceptron when 3.0 is released to score our rules by taking the stock rules into consideration, hoping to make life better for all. (BTW I should qualify what Daniel means by "non-heavyweight" -- in other words, the rule doesn't greatly affect speed/RAM usage. I think that's what he means at least.) That's how I took it, now with the plugin ability I wanted to convert my tripwire ruleset into a plugin, do you see any possible way to do this and use less memory than my current approach? If we can work something out, that'll be great ;) I agree, we always wanted to keep things close without crossing lines, those lines are hard to see but each step taken helps define it all. I congradulate you on the great project you have on your hands, I just wish I could offer more valuable help (ie perl coding ;).