[Bro] Use BRO as an offline L7-filter

[Robin Sommer]

On Mon, Nov 10, 2008 at 16:19 +0100, you wrote:

> Now I'm a bit lost, where I have to copy the signatures? 

Have you seen this (and the Wiki page it points to)?

     http://blog.icir.org/2008/06/bro-signature-engine.html

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org