[Bro] did my signature in site loaded?

[Robin Sommer]

On Sat, Aug 26, 2006 at 19:27 +0800, Ong hean kuan wrote:

> # @load brolite-sigs
> 
> @ifdef ( use_signatures )
>        # Load Bro signatures.  This is the default file containing Bro
>        # signatures.
>        redef signature_files += "signatures";
> @endif

"use_signatures" is only defined when brolite-sigs is loaded so, no,
the signatures are not used in this case. The most direct way to
make sure that a signature file is loaded, is to use the "redef"
line just by itself:

     redef signature_files += "signatures";

I.e., no @ifdef/@endif around it.

Hope this helps,

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
ICIR/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org