[Bro] change notice$note to match signature

Seth Hall seth at icir.org
Wed Jun 26 07:27:17 PDT 2013

On Jun 26, 2013, at 9:47 AM, 김희철 <hckim at narusec.com> wrote:

> all the signature notice$note comes out with Signatures::Sensitive_Signature
> I want to change the  notice$note to signature ID or custom name 

I understand what you want to happen, but I don't really understand how you're trying to approach it.  Your code doesn't even look like it's valid syntax (the log_signature part).


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list