[Bro-Dev] [JIRA] (BIT-1143) Investigate replacing libmagic w/ signatures for file identificaiton

Robin Sommer robin at icir.org
Fri Feb 21 13:35:15 PST 2014



On Fri, Feb 21, 2014 at 09:57 -0600, you wrote:

> Rather than wedge it in to existing "signature" engine, another idea
> would be to create a new "magic" engine that parallels it.

Wedging it in is fine for now. Eventually we might end up doing a
larger redesign of the signature engine to improve performance and
broaden its use cases. Creating a separate magic engine now doesn't
seem to be worth the effort.




More information about the bro-dev mailing list