fix #9, #23, #25

add sniffs to ruleset.xml