[Bro] Snort to Bro

Jules jferdinand at thescholars.info
Fri Mar 9 11:29:59 PST 2007

Thanks Robin

is there any better solution? Can i just rely on Bro policies? will that 
be enough? is there a real difference betwen the snort rules and Bro 

Robin Sommer wrote:
> On Fri, Mar 09, 2007 at 09:53 +0000, Jules wrote:
>> How can i convert Snort rules to BRO ?
> Bro ships with a script snort2bro but is it somewhat outdated and
> does not support some of the newer Snort options.
> Robin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070309/51f9d5a8/attachment.html 

More information about the Bro mailing list