[Bro] 回复: Bro Digest, Vol 30, Issue 7
wcl5303 at sohu.com
wcl5303 at sohu.com
Thu Oct 9 00:34:19 PDT 2008
hi,all:
I try to use "bro -r cap file local.lite" to test bro's signature function. I found that the log file signatures.log cannot be appended. Everytime when rule is matched the file signatures.log would be rewrited, so every time the file has only one record. how to make signatures.log can be appended log.
regards
wcl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081009/9a2d6aad/attachment.html
More information about the Bro
mailing list