[Bro] Is it applicapable to specific target ip using command line in bro?

Readon Shaw xydarcher at 163.com
Tue Dec 6 17:19:36 PST 2011

>> bro -r xxx.pcap yyyy.bro.
>> But here the bro script can't get the target ip through this kind of command.
>> Is there any mechanism in bro to fulfull this requirement?
>You can set any &redef variable from the command line.  e.g. if yyyy.bro contains:
>    const target_ip: addr &redef;
>    event bro_init()
>        {
>        print target_ip;
>        }
>Then you can do the following:
>    $ bro yyyy.bro  target_ip=
>Does that help?
This is wonderful.
It's fit for me very well.
Readon Shaw

More information about the Bro mailing list