[Bro] Signature payload matching

Robin Sommer robin at icir.org
Thu Jul 7 15:09:56 PDT 2011


On Thu, Jul 07, 2011 at 19:30 +0200, you wrote:

> The tar files are those related to the output of bro with their according
> signature.

The matches reported in auto/signatures.log and auto/notices.log are
the same as far as I can see. And I don't see any reported in test/*.
So not sure what the problem is?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list