[Bro] A question about loading signature files

zhiquan lai laizhiquan at gmail.com
Wed Oct 19 09:02:21 PDT 2011


I wrote a simple Bro policy file test.bro to load signatures in
snort-default.sig file by redef "signature_files".
However, when Bro loaded test.bro, many errors like
"smtp_servers(http_servers ...) didn't defined".

Should I define these variables in my test.bro file?
Or is there any common configure file to defined them?

Thanks in advance

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20111020/ee647ebf/attachment.html 

More information about the Bro mailing list