[Bro] Emerging Threats signatures on Bro ids ?

Seth Hall seth at icir.org
Sun Aug 12 18:52:55 PDT 2012


On Aug 12, 2012, at 7:01 PM, rmkml <rmkml at yahoo.fr> wrote:

> Im always interested if you have comments/feedback/flame/performance/FP/FN please.


Have you tried running Bro on live traffic with this script?  I looked through it briefly and it seems like it would severely impact performance.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list