Snort signature

Wang Shaofu wsffree at hotmail.com
Thu Nov 21 02:18:01 PST 2002


> > thanks for your interest. i didn't see the -s option :) and i was 
giving
> > the rules file as a policy script. BTW, bro performs strings searching
                                                         ~~~~~~~~~~~~~~~~~
                    Do you mean strings comparing? Or to verify some string 
is in or not in the packet payload?

> > by using an automaton?
>
>Yes, it compiles the regular expressions into DFAs.
                                               ~~~~~~I can not understand.

Have a nice day!
Ciao
Cloud

_________________________________________________________________
与联机的朋友进行交流,请使用 MSN Messenger: http://messenger.msn.com/lccn/ 




More information about the Bro mailing list