Snort signature
Antonatos Spiros
antonat at ics.forth.gr
Thu Nov 21 02:53:08 PST 2002
Antonatos Spiros
On Thu, 21 Nov 2002, Wang Shaofu wrote:
> > > thanks for your interest. i didn't see the -s option :) and i was
> giving
> > > the rules file as a policy script. BTW, bro performs strings searching
> ~~~~~~~~~~~~~~~~~
> Do you mean strings comparing? Or to verify some string
> is in or not in the packet payload?
>
I mean verifying that a string is contained in packet's payload
> > > by using an automaton?
> >
> >Yes, it compiles the regular expressions into DFAs.
> ~~~~~~I can not understand.
>
I think DFA is Deterministic Finite Automaton. May I assume it is
Aho-Corasick-like automaton?
> Have a nice day!
> Ciao
> Cloud
>
> _________________________________________________________________
> ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/lccn/
>
>
More information about the Bro
mailing list