Snort signature

[Robin Sommer]

On Tue, Nov 19, 2002 at 16:51 +0100, Robin Sommer wrote:

> Currently, snort2bro needs a full Snort configuration (snort.cfg)
> incl. variable definitions. Perhaps you've tried to convert only the
> signatures themselves without the surrounding definitions given in
> snort.cfg?

In addition (because, as it seems, it's not snort2bro which
complains but Bro itself): How did you call Bro? You need to specify
the converted signature file via the -s option as it's not a Bro
policy script.

Eventually, I will write some documentation of the signature
engine...

Robin

-- 
Robin Sommer * Room        01.08.055 * 
TU Munich    * Phone (089) 289-18006 * sommer at in.tum.de 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20021119/475c3247/attachment.bin