[Bro-Dev] #697: Equivalent of capture-events.bro in 2.x

Bro Tracker bro at tracker.bro-ids.org
Wed Nov 23 14:26:50 PST 2011


#697: Equivalent of capture-events.bro in 2.x
-----------------------+------------------------
  Reporter:  matthias  |      Owner:
      Type:  Problem   |     Status:  new
  Priority:  Normal    |  Milestone:  Bro2.1
 Component:  Bro       |    Version:  git/master
Resolution:            |   Keywords:
-----------------------+------------------------

Comment (by matthias):

 Replying to [comment:0 seth]:
 > {{{
 > bro -r traffic.trace capture_events=events.bst
 > }}}

 Now to be really consistent, the counterpart to `-x` could be `-X`, giving
 us

 {{{
 bro -r traffic.trace -X events.bst
 }}}

 for recording and

 {{{
 bro -r traffic.trace -x events.bst
 }}}

 for replay.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/697#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list