I sent this to Vern, but thought a wider audience might be interested, or have some answers. Thanks Vern: I'm planning on using the snort engine to extend KO (Kazaa Obliterator). It looks like I could use a policy script like this: signature kazaa-seen { ip-proto == tcp dst-ip == whateve…

Bro <-> Snort documentation

Topic		Replies	Views
Bro <-> Snort documentation Zeek	1	89	May 6, 2022
policy for IMAP signatures Zeek	4	148	May 6, 2022
load snort signature in bro Zeek	1	124	May 6, 2022
Clarification on Backdoor Event Engine Zeek	1	70	May 6, 2022
Signature example Zeek	1	169	May 6, 2022