[Bro] file identification modification

Seth Hall seth at icir.org
Thu Oct 20 07:13:33 PDT 2016


> On Oct 19, 2016, at 7:22 AM, erik clark <philosnef at gmail.com> wrote:
> 
> Actually, I do not see file-ident.sig anywhere in the source tree, or my deployment tree. Where is this kept? Thanks!

This was broken out a couple of releases ago.  There are a bunch of file signature files in base/frameworks/files/magic/

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list