[Bro] example from manual

Seth Hall seth at icir.org
Thu Jun 27 10:13:39 PDT 2013

On Jun 27, 2013, at 1:11 PM, John Babio <jbabio at po-box.esu.edu> wrote:

> In the example, if I wanted it to log this info instead of ACTION_EMAIL,
> what would I change it too? ACTION_ALARM or ACTION_LOG?

All notices are logged by default in notice.log.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list