[Bro] did my signature in site loaded?
robin at icir.org
Mon Aug 28 20:53:03 PDT 2006
On Sat, Aug 26, 2006 at 19:27 +0800, Ong hean kuan wrote:
> # @load brolite-sigs
> @ifdef ( use_signatures )
> # Load Bro signatures. This is the default file containing Bro
> # signatures.
> redef signature_files += "signatures";
"use_signatures" is only defined when brolite-sigs is loaded so, no,
the signatures are not used in this case. The most direct way to
make sure that a signature file is loaded, is to use the "redef"
line just by itself:
redef signature_files += "signatures";
I.e., no @ifdef/@endif around it.
Hope this helps,
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
ICIR/ICSI * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro