[Bro-Dev] #457: Signatures only triggering once per connection

Bro Tracker bro at tracker.bro-ids.org
Sat May 14 13:31:53 PDT 2011


#457: Signatures only triggering once per connection
----------------------+------------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by robin):

 On Thu, May 12, 2011 at 11:50 -0000, you wrote:

 >  A specific signature looks like it will only trigger once per
 connection.

 Yes, that's actually by design. I don't recall all the specifics right
 now, but I think changing that, even if only for selected signatures,
 wouldn't be straight-forward. And given that in the future the file
 analyzer will take care of this anyway, I'd prefer to leave things as
 they are.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/457#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list