Package: base/frameworks/signatures

The signature framework provides for doing low-level pattern matching. While signatures are not Bro’s preferred detection tool, they sometimes come in handy and are closer to what many people are familiar with from using other NIDS.

base/frameworks/signatures/__load__.bro

base/frameworks/signatures/main.bro

Script level signature support. See the signature documentation for more information about Bro’s signature engine.