[Bro] Questions about signature regexes
aashish at uiuc.edu
Mon Jan 30 09:19:05 PST 2006
Hi Robin :
> (That reminds me that I've a prototypical pcre->bro converter lying
> around somewhere. But actually there doesn't seem to be much
> interest in automatically converting Snort sigs these days.)
We have been using snort2bro script, but it has quite a few limitations. A better, more comprehensive automatic conversion tool would definitely be something I would be interested in to use with our bro installation.
Just thought I should put it on the table.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 307 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20060130/6e93c969/attachment.bin
More information about the Bro