[Bro] Bro Signatures

Vlad Grigorescu vladg at cmu.edu
Sun Feb 23 06:57:27 PST 2014

Bro isn't a signature based IDS. While there is a signature framework, it's not used for large scale signature matching as your e-mail seems to imply. I'd encourage you to review some of the documentation and training material on bro.org to get a better understanding of Bro. If you have any specific questions at that point, we'd love to hear them and help you with them. Of course, it'd be useful if you could give us more than the weekend to reply to you before sending another e-mail...


On Feb 23, 2014, at 5:51 AM, Mr Smith <engineer.demo2020 at gmail.com> wrote:

> Hi
> I have a question about Bro-ids.
> How many signatures are exist on the latest version of the Bro?
> And, how i can deactivate or activate some of these signatures? 
> Thanks
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140223/ae5d239f/attachment.bin 

More information about the Bro mailing list