inliniac/suricata — pull request #130 by kost (2012-10-07 19:09:07+00:00)
Title: Sqlite support with import scripts

Import scripts are now part of pull request and my sqlite-support branch. I have tested it thoroughly. Import script itself is written in Perl in order to reduce dependencies (AFAIK oinkmaster, pulledpork, polman and scripts in contrib/ are written in Perl).

I did not say that polman is using SQLite, but that everything is going into that direction. What I wanted to say that polman tries to mimic the database. But why mimic, when you can have one? ;)

I see value as easier rule management. It's easier to write UIs, have profiles for rules and having better control in general. Take a look at the README.sqlite in contrib/sqlite-support directory for few quick examples. I've managed to make quick Rule management in Rails for less than 2 hours (this was also part of test).