[Bro] Broctl policy files

M K mkhan04 at gmail.com
Tue Apr 29 06:17:15 PDT 2014

Is there any guidance/information as to how things should be split up
between the 3 types of site policies (manager, proxy, worker). Can it
actually make a difference in performance or is it mainly there for
organization purposes?

As far as I can tell the docs only mention that notice filtering needs to
be done on the manager and everything else can go into the generic
local.bro file. Is there any further guidance?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140429/25a563c5/attachment.html 

More information about the Bro mailing list