! Syntax Highlighting pattern for Snort rules ! (*.snort *.rules) ! Author: Nigel Houghton ! ! In NEdit Version 5.0.1 and beyond, load this pattern by starting nedit with: ! ! nedit -import ! ! Then, check that the patterns were loaded correctly, and choose Save Defaults ! from the Preferences menu. The new patterns will now be incorporated into ! your own .nedit file, so the next time you start NEdit, you will no longer ! need to use -import. ! nedit.highlightPatterns: \ Snort:1:0{\n\ Comment:"#":"$"::Comment::\n\ message:"[\\\\""]":"[\\\\""];"::Character Const::\n\ variables:"\\$[A-Z]|any":" "::Identifier1::\n\ References:"www.|CAN-|CVE-":";"::String1::\n\ Keyword:"log|pass|activate|msg|fragbits|reference|classtype|sid|rev|seq|flags|alert|content|depth|flow|uricontent|ip_proto|within":":| "::Keyword::\n\ protocol:"icmp|tcp|udp":::Identifier::\n\ }\n\ nedit.languageModes: \ Snort:.snort .rules:::Continuous:::\n\