[Bro] Internal hostname in mail.log
baxterw3232 at gmail.com
Mon May 2 11:18:54 PDT 2011
Perfect! Thanks Robin!
On Mon, May 2, 2011 at 2:13 PM, Robin Sommer <robin at icir.org> wrote:
> On Mon, May 02, 2011 at 12:36 -0400, you wrote:
>> Can anyone help me determine which broctl script/postprocessor (I'm
>> assuming) is adding an internal hostname (user.host.com) to mail.log.
> It's done inside Bro actually, see the
> aux/broctl/policy/mail-alarms.bro script.
> Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
> ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro