[Discussion] Configuration file conditional preprocessor

[Victor Julien]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Martin Fong wrote:
> Matt,
> 
>> So we're only loading certain modules for detection if they are
>> specifically called for? I.e. don't load the pcre module if there are no
>> rules asking for pcre?
> 
> One specific use case is having two different set of preprocessor
> parameters depending on whether the sensor is in front of or behind
> a firewall -- this would eliminate the need for building two different,
> but mostly identical, configuration files.

I understand your goal and I like it. However one of our goals is to
make the configuration & tuning less complex. Adding this type of
complexity could conflict with that goal. On the other hand just having
to configure one config that could be deployed everywhere in your
organization may make it simpler again... thoughts?

Cheers,
Victor

- --
- ---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
- ---------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkmRP6wACgkQiSMBBAuniMdmsQCbBRAuRmJXP++QVye6fBmjHDDY
9UEAn2axA1U+Cuv56931Fi/AUAq4YQIB
=Nbj1
-----END PGP SIGNATURE-----