<DIV>
<BLOCKQUOTE id=ori dir=ltr style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; FONT: 9pt 宋体; MARGIN-LEFT: 10px; BORDER-LEFT: rgb(0,0,0) 2px solid; MARGIN-RIGHT: 0px; font-size-adjust: none; font-stretch: normal">
<DIV style="FONT: 9pt 宋体; font-size-adjust: none; font-stretch: normal">hi,all:</DIV>
<DIV style="FONT: 9pt 宋体; font-size-adjust: none; font-stretch: normal"> I try to use "bro -r cap file local.lite" to test bro's signature function. I found that the log file signatures.log cannot be appended. Everytime when rule is matched the file signatures.log would be rewrited, so every time the file has only one record. how to make signatures.log can be appended log.</DIV>
<DIV style="FONT: 9pt 宋体; font-size-adjust: none; font-stretch: normal"> </DIV>
<DIV style="FONT: 9pt 宋体; font-size-adjust: none; font-stretch: normal">regards</DIV>
<DIV style="FONT: 9pt 宋体; font-size-adjust: none; font-stretch: normal">wcl</DIV></BLOCKQUOTE></DIV><br><hr size="1"><br> <style type="text/css">
<!--
a {font-size:12px;color:black}
a:hover {font-size:12px;text-decoration:underline}
.b{font-family:Arial; font-size:80%; margin-bottom:2px;color:#0000CC}
.pp{font-family:Arial;font-size:10px}
-->
</style>
<table border=0>
<tr><td height=18>
<!--<a href="http://goto.mail.sohu.com/goto.php3?code=mailadt-ta1" target="_blank">亲爱的老师，我要谢谢您！ </a>-->
<a href="http://ad1.adpolestar.net/ADPolestar/lgs/way/;er=&mv=710&pu=qiwei&ad=0018235?http://tl.sohu.com/events/gzj/index.shtml?rcc_id=33ea059aef6f6da076517d3fe4a5e074" target="_blank">古怪美女 妖孽？邻家mm？</a>
<!--<a href="http://ad1.adpolestar.net/ADPolestar/lgs/way/;er=&mv=710&pu=qiwei&ad=0018235?http://tl.sohu.com/events/qhdigong/?rcc_id=d85a750ef07b8482aeff682ed9e455f3" target="_blank">千年兵马俑复活 谁能阻击</a>-->
<!--<a href="http://ad1.adpolestar.net/ADPolestar/lgs/way/;er=&mv=710&pu=qiwei&ad=0018235?http://tl.sohu.com/events/zhans/?rcc_id=0860b8cd100d1d146601c5a0129477fd" target="_blank">【抢】666份千元现金白送！</a>-->
<!--<a href="http://my.51job.com/my/trace.php?adsnum=14050&ajp=aHR0cDovL3d3dy41MWpvYi5jb20v" target="_blank">上51job，轻松搞定好工作！</a>-->
<!--<a href="http://doc.go.sohu.com/200805/2688c1caac7fa59b755127cc9de8117b.php" target=_blank>送你08年最惹火的礼物（多图）</a>-->
</td></tr>
<!--<tr><td height=18><a href="http://goto.mail.sohu.com/goto.php3?code=mailadt-ta" target="_blank">搜狐闪电邮奥运特别版，登录有无限惊喜</a>-->
<!--<tr><td height=18><a href="http://ad1.adpolestar.net/ADPolestar/lgs/way/;er=&mv=710&pu=qiwei&ad=0018235?http://tl.sohu.com/?rcc_id=39301ddf7a8b8ac30517413e5d8787da" target="_blank">网游玩家必看>>>>08年绝对不能错过的好游戏!</a>-->
<!--<tr><td height=18><a href="http://goto.mail.sohu.com/goto.php3?code=jifen-jiaozhu" target="_blank">搜狐闪邮积分 金秋大兑奖！</a>-->
<tr><td height=18><a href="http://goto.mail.sohu.com/goto.php3?code=jifen-jiaozhu" target="_blank">国庆购物最明智之选，先领优惠券！</a>
</td></tr>
</table>