Hi all,
i'm studying the signature framework using the example described in
https://www.bro.org/sphinx/frameworks/signatures.html
I've made two files
-----mysig.sig----
signature my-first-sig {
ip-proto == tcp
dst-port == 80
payload /.*root.*/
event "Found root!"
}