Snort signature

Zeek
1

> thanks for your interest. i didn't see the -s option :slight_smile: and i was

giving

2

Antonatos Spiros

> > thanks for your interest. i didn't see the -s option :slight_smile: and i was
giving
> > the rules file as a policy script. BTW, bro performs strings searching
                                                         ~~~~~~~~~~~~~~~~~
                    Do you mean strings comparing? Or to verify some string
is in or not in the packet payload?

I mean verifying that a string is contained in packet's payload

> > by using an automaton?
>
>Yes, it compiles the regular expressions into DFAs.
                                               ~~~~~~I can not understand.

I think DFA is Deterministic Finite Automaton. May I assume it is
Aho-Corasick-like automaton?