zeek/scripts/base/frameworks/signatures
Jon Siwek 186e67ec1d Allow logging filters to inherit default path from stream.
This allows the path for the default filter to be specified explicitly
when creating a stream and reduces the need to rely on the default path
function to magically supply the path.

The default path function is now only used if, when a filter is added to
a stream, it has neither a path nor a path function already.

Adapted the existing Log::create_stream calls to explicitly specify a
path value.

Addresses BIT-1324
2015-03-19 14:49:55 -05:00
..
__load__.bro Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
main.bro Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
README Add more script package README files 2013-10-23 16:36:14 -05:00

The signature framework provides for doing low-level pattern matching.  While
signatures are not Bro's preferred detection tool, they sometimes come in
handy and are closer to what many people are familiar with from using
other NIDS.