Snort signature

Antonatos Spiros antonat at ics.forth.gr
Thu Nov 21 02:53:08 PST 2002



Antonatos Spiros


On Thu, 21 Nov 2002, Wang Shaofu wrote:

> > > thanks for your interest. i didn't see the -s option :) and i was
> giving
> > > the rules file as a policy script. BTW, bro performs strings searching
>                                                          ~~~~~~~~~~~~~~~~~
>                     Do you mean strings comparing? Or to verify some string
> is in or not in the packet payload?
>
I mean verifying that a string is contained in packet's payload
> > > by using an automaton?
> >
> >Yes, it compiles the regular expressions into DFAs.
>                                                ~~~~~~I can not understand.
>
I think DFA is Deterministic Finite Automaton. May I assume it is
Aho-Corasick-like automaton?

> Have a nice day!
> Ciao
> Cloud
>
> _________________________________________________________________
> ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/lccn/
>
>




More information about the Bro mailing list