On Wed, 18 Feb 2004 12:15:05 -0800, Matthew Trent wrote: > This is exactly what I've been complaining about with regard to too-long SA > reports (but kind of a different tack on it). These huge sets of little rules > (Tripwire, etc) would be much improved with a single additive score like Mr. > Hardin described.
In the meantime you could always try my http://www.snoweye.com/john/metatripwire.cf which converts the standard tripwire rules to __subrules and adds a number of meta rules to count the number of tripwire hits. John. -- -- Over 2400 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr
