[Bro-Dev] #457: Signatures only triggering once per connection
Bro Tracker
bro at tracker.bro-ids.org
Sat May 14 13:31:53 PDT 2011
#457: Signatures only triggering once per connection
----------------------+------------------------
Reporter: seth | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro1.6
Component: Bro | Version: git/master
Resolution: | Keywords:
----------------------+------------------------
Comment (by robin):
On Thu, May 12, 2011 at 11:50 -0000, you wrote:
> A specific signature looks like it will only trigger once per
connection.
Yes, that's actually by design. I don't recall all the specifics right
now, but I think changing that, even if only for selected signatures,
wouldn't be straight-forward. And given that in the future the file
analyzer will take care of this anyway, I'd prefer to leave things as
they are.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/457#comment:0>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list