[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton
Robin Sommer
robin at icir.org
Fri Feb 21 13:35:15 PST 2014
On Fri, Feb 21, 2014 at 09:57 -0600, you wrote:
> Rather than wedge it in to existing "signature" engine, another idea
> would be to create a new "magic" engine that parallels it.
Wedging it in is fine for now. Eventually we might end up doing a
larger redesign of the signature engine to improve performance and
broaden its use cases. Creating a separate magic engine now doesn't
seem to be worth the effort.
More information about the bro-dev
mailing list