<div dir="ltr"><div> </div>
<div> I have read the whole Bro Reference Manual and others in <a href="http://www.bro-ids.org/" target="_blank">www.bro-ids.org</a>. The bro is running normally when using policy. I know how to write a signature, but these signatures had never been matched. I have used the local.lite.bro to activate Signature Engine, and the signature.log is nothing even using the simplest signature. I didn't find the reason. <br>
Someone can help me!</div>
<div> Thanks!<br> <br> eyoung</div></div>