Package: base/frameworks/signatures

The signature framework provides for doing low-level pattern matching. While signatures are not Bro’s preferred detection tool, they sometimes come in handy and are closer to what many people are familiar with from using other NIDS.



Script level signature support. See the signature documentation for more information about Bro’s signature engine.