[Bro] Regarding set_record_packets
robin at icir.org
Tue Apr 22 08:50:28 PDT 2008
On Tue, Apr 22, 2008 at 12:55 +0530, Sanmeet Bhatia wrote:
> Can u please tell me where the packets traced by set_record_packets() are
> stored in BRO?
They go into the trace file specified with -W. Note that when using
-W, capturing packets is the default for most connections so you
usually use this function to turn capturing *off*.
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro