@snort =("large","packet","bad","traffic","inbound","attempt","web","IIS","cmd.exe","cgi","access","multiple","decode");
####
@snort = qw(large packet bad traffic inbound attempt web
IIS cmd.exe cgi access multiple decode);
####
my @watcher = ( \@pix, \@denies);
...
my @global = @{$watcher[$i]};
####
if($global[$x]=~/ZSP/i){
@ret=split(/ZSP/,$global[$x]);
$global[$x]="";
$global[$x]=join(' ',@ret);
}
####
if (my @ret = split /ZSP/, $global[$x]) {
$global[$x] = join ' ', @ret;
}
####
foreach my $r (@spy) {
if($input =~ /$r/i){
$findings .= ' ' . $r;
$fn++;
}
}