[Bro] 回复: Bro Digest, Vol 30, Issue 7

Robin Sommer robin at icir.org
Thu Oct 9 08:47:54 PDT 2008

On Thu, Oct 09, 2008 at 07:34 +0000, wcl5303 at sohu.com wrote:

>    appended. Everytime when rule is matched the file signatures.log
>    would be rewrited, so every time the file has only one record.
>    how to make signatures.log can be appended log.

I would expect signature.log to be emptied everytime you *start*
Bro. Is that what you're saying? Or are you seeing that *during* a
single run, every signature match creates a new signature.log? 


Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list