[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    Re: [Bro] did my signature in site loaded?
From:       Robin Sommer <robin () icir ! org>
Date:       2006-08-29 3:53:03
Message-ID: 20060829035303.GC31924 () icir ! org
[Download RAW message or body]


On Sat, Aug 26, 2006 at 19:27 +0800, Ong hean kuan wrote:

> # @load brolite-sigs
> 
> @ifdef ( use_signatures )
>        # Load Bro signatures.  This is the default file containing Bro
>        # signatures.
>        redef signature_files += "signatures";
> @endif

"use_signatures" is only defined when brolite-sigs is loaded so, no,
the signatures are not used in this case. The most direct way to
make sure that a signature file is loaded, is to use the "redef"
line just by itself:

     redef signature_files += "signatures";

I.e., no @ifdef/@endif around it.

Hope this helps,

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin@icir.org 
ICIR/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org

[prev in list] [next in list] [prev in thread] [next in thread]