[Bro] signature configuration

Siwek, Jon jsiwek at illinois.edu
Fri Dec 19 07:24:32 PST 2014


> On Dec 19, 2014, at 5:52 AM, Sharath SN <shrtsns at gmail.com> wrote:
> 
> Can anyone suggest me how to add our own signatures.

Are you using the “@load-sigs” directive in a script or giving the “-s” flag to bro on the command line to tell it to use the custom signature file?  More documentation on signatures here:

https://www.bro.org/sphinx/frameworks/signatures.html

- Jon



More information about the Bro mailing list