[Bro] broctl Email Reports
christopher.p.crawford at gmail.com
Thu May 31 06:22:53 PDT 2012
Hmm...I restarted bro and it's still sending Connection Summary
reports every hour.
On Wed, May 30, 2012 at 3:16 PM, Seth Hall <seth at icir.org> wrote:
> On May 30, 2012, at 3:04 PM, Chris Crawford wrote:
>> I tried adding what you recommended to my local.bro and then did a
>> broctl install
>> broctl update
>> but the connection summary email is still going out on the hour.
> Try restarting. bro_init handlers aren't invoked when updating. I'm not even sure that the logging framework is modifiable at runtime (we had a discussion about this a long time ago).
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
More information about the Bro