[Bro] Seeing packets
Siwek, Jonathan Luke
jsiwek at illinois.edu
Thu Jun 13 11:05:51 PDT 2013
On Jun 9, 2013, at 8:03 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> Any way to disable these types of emails:
> localhost is seeing packets again on interface eth0
I don't see any options to tweak how the output of `broctl cron` is constructed/emailed. You can add a feature request at http://tracker.bro.org/bro.
The quick and dirty way to disable it would be to directly remove or comment out the code that generates those messages in /usr/local/bro/lib/broctl/BroControl/cron.py. (looks like for v2.1, that's lines 119-123).
More information about the Bro