[Bro-Dev] Notice::Info$src

[Robin Sommer]

On Tue, Nov 01, 2011 at 11:57 -0400, you wrote:

> Are you reading the notice framework documentation I pushed out last night?

Will do. This came up when I saw alarm summaries claiming
Server_Founds to be about a connection "A -> A" due to using $src for
the origniator.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org