Hi CzP, On Thu, Oct 14, 2010 at 12:12:03PM +0200, Peter Czanik wrote:
"Applications are grouped by their respective function and each application gets a single file that lists all the patterns of that application."
Seems clear enough.
So it would be more appropriate to rename imapd.pdb to wu-imapd.pdb (as it would only have patterns for Washington University IMAPd), and have a separate courier.pdb, or even courier-imapd.pdb and courier-pop3d.pdb. What do you think?
Yes, in the samples I have seen there are many Pattern DBs named after brands, companies, and/or specific software products (like WU IMAPd or Couried IMAPd, etc.) So I don't think there's anything wrong with naming your XMLs after the program they support. That makes it easy for the administrator to find and enable the right XMLs for their machines.
Bye, Peter Czanik (CzP) <czanik@balabit.hu>
Thanks for all the hard work making nice patterns. I have some I'll contribute soon once I've given them a proper production test. Regards, Matthew Hall.