[Bro] Adding options to bro managed by broctl
jlay at slave-tothe-box.net
Thu Aug 28 08:07:49 PDT 2014
On 2014-08-28 08:50, inetjunkmail wrote:
> Wed like to start bro with a tcpdump filter of, for example, -f net
> 184.108.40.206/24  or port 443. We use broctl to manage the bro process.
> Where is the appropriate place to add the desired filter so that
> broctl appends it to any instantiation of a bro process?
> Thanks for your help
>  http://220.127.116.11/24
broargs = -f 'net 18.104.22.168/24 or port 443'
to your broctl.cfg file.
More information about the Bro