[Bro] DNS logging

Tyler Schoenke Tyler.Schoenke at colorado.edu
Wed Nov 11 14:40:32 PST 2009

I noticed that the DNS.log is no longer being created when running the 
cluster.  I don't think I changed anything to disable it.  It is still 
being loaded by local.bro.  I am running the latest trunk.

$ broctl print DNS::logging

    manager   DNS::logging = F
    proxy-1   DNS::logging = F
   worker-1   DNS::logging = F

The dns.bro script shows logging defaulted to true.  Where is it getting 
set to false when the cluster runs?


Tyler Schoenke
Network Security Analyst
IT Security Office
University of Colorado - Boulder

More information about the Bro mailing list