[Bro] Questions about signature regexes

Aashish Sharma aashish at uiuc.edu
Mon Jan 30 09:19:05 PST 2006


Hi Robin : 

> (That reminds me that I've a prototypical pcre->bro converter lying
> around somewhere. But actually there doesn't seem to be much
> interest in automatically converting Snort sigs these days.)
> 

We have been using snort2bro script, but it has quite a few limitations. A better, more comprehensive automatic conversion tool would definitely be something I would be interested in to use with our bro installation. 

Just thought I should put it on the table. 

Thanks 
Aashish Sharma 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20060130/6e93c969/attachment.bin 


More information about the Bro mailing list