- replace parentheses and exclamation points in all comments with spaces - note REJECT recommended - "Failed" on particular sids if known bad. - log sid if no cve - check for >29 character log-prefix - shell is grabbing * and treating it as a file wildcard; search through output for filenames and fix.