[Bro] 回复: Bro Digest, Vol 30, Issue 7

[Robin Sommer]

On Thu, Oct 09, 2008 at 07:34 +0000, wcl5303 at sohu.com wrote:

>    appended. Everytime when rule is matched the file signatures.log
>    would be rewrited, so every time the file has only one record.
>    how to make signatures.log can be appended log.

I would expect signature.log to be emptied everytime you *start*
Bro. Is that what you're saying? Or are you seeing that *during* a
single run, every signature match creates a new signature.log? 

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org