* asciidoc from http://www.methods.co.nz/asciidoc/ to build the HTML
manual
+* check from http://check.sourceforge.net to build unit tests
+
* dblatex from http://dblatex.sourceforge.net to build the pdf manual (in
addition to asciidoc)
+* lzma from http://www.7-zip.org/sdk.html for decompression of SWF fles.
+
+* openssl from https://www.openssl.org for SHA and MD5 file signatures and
+ the protected_content rule option.
+
* w3m from http://sourceforge.net/projects/w3m/ to build the plain text
manual
-* check from http://check.sourceforge.net to build unit tests
-
=== Building
"<pcap>... (same as --pcap-list)" },
{ "-S", Parameter::PT_STRING, nullptr, nullptr,
- "<n=v> set rules file variable n equal to value v" },
+ "<x=v> set config variable x equal to value v" },
{ "-s", Parameter::PT_INT, "68:65535", "1514",
"<snap> (same as --snaplen)" },
"include year in timestamp in the alert and log files" },
{ "-z", Parameter::PT_INT, "0:", "1",
- "<count> maximum number of packet threads (same as --max-packet-threads)\n"
- " 0 gets the number of CPU cores reported by the system" },
+ "<count> maximum number of packet threads (same as --max-packet-threads); "
+ "0 gets the number of CPU cores reported by the system" },
{ "--alert-before-pass", Parameter::PT_IMPLIED, nullptr, nullptr,
"process alert, drop, sdrop, or reject before pass; "
"output help in asciidoc compatible format" },
{ "--max-packet-threads", Parameter::PT_INT, "0:", "1",
- "<count> configure maximum number of packet threads (same as -z)\n"
- " 0 gets the number of CPU cores reported by the system" },
+ "<count> configure maximum number of packet threads (same as -z)" },
{ "--nostamps", Parameter::PT_IMPLIED, nullptr, nullptr,
"don't include timestamps in log file names" },