[Bro] broccoli tests

Christian Kreibich christian at whoop.org
Sun Jun 12 18:44:12 PDT 2005

On Thu, 2005-06-09 at 14:11 -0500, Mike Muratet wrote:
> Scott
> As I said in my last post, I had tried all the combinations of broping, 
> broping-record and broping, broping -r. I see in the broping.bro and 
> broping-record.bro scripts that printing 'Received ping...' is part of the 
> pong event.

Note that it doesn't make sense to try all these combinations. Either
use broping and broping.bro, or broping -r and broping-record.bro. In
the former case, all parameters for the pong event are sent separately,
in the latter case, a Bro record type is used to bundle them up.


More information about the Bro mailing list