[Bro] example from manual

Seth Hall seth at icir.org
Thu Jun 27 10:13:39 PDT 2013


On Jun 27, 2013, at 1:11 PM, John Babio <jbabio at po-box.esu.edu> wrote:

> In the example, if I wanted it to log this info instead of ACTION_EMAIL,
> what would I change it too? ACTION_ALARM or ACTION_LOG?


All notices are logged by default in notice.log.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list