[Bro] Snort to Bro
Jules
jferdinand at thescholars.info
Fri Mar 9 11:29:59 PST 2007
Thanks Robin
is there any better solution? Can i just rely on Bro policies? will that
be enough? is there a real difference betwen the snort rules and Bro
policies?
Robin Sommer wrote:
> On Fri, Mar 09, 2007 at 09:53 +0000, Jules wrote:
>
>
>> How can i convert Snort rules to BRO ?
>>
>
> Bro ships with a script snort2bro but is it somewhat outdated and
> does not support some of the newer Snort options.
>
> Robin
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070309/51f9d5a8/attachment.html
More information about the Bro
mailing list