[Bro] Modifying Report (Log Rotation?) Schedule + General Config Options

Robin Sommer robin at icir.org
Wed Feb 17 08:51:08 PST 2010

On Wed, Feb 17, 2010 at 09:10 -0700, you wrote:

> On a default 1.5.1 install, I'm getting summary and alert emails every 12

These are indeed send out twice day per default. The intervals are
set in {standalone,cluster-manager}.rotate-logs.bro and
{standalone,cluster-manager}.mail-alarms.bro. Don't change them
there directly but use similar redef's as these scripts do.

> A larger question, what happened to all of the options from 1.4 that could
> be set in bro.cfg?

They are gone (sorry). The old bro.cfg and new broctl.cfg are
completely separate frameworks, broctl has been written from
scratch. broctl's README.html has a complete list of option that
broctl.cfg supports. If you find anything missing, please file a
feature request with tracker.icir.org.


Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list