[Bro] Adding options to bro managed by broctl

James Lay jlay at slave-tothe-box.net
Thu Aug 28 08:07:49 PDT 2014

On 2014-08-28 08:50, inetjunkmail wrote:
> Wed like to start bro with a tcpdump filter of, for example, -f net
> [1] or port 443.  We use broctl to manage the bro process.
>  Where is the appropriate place to add the desired filter so that
> broctl appends it to any instantiation of a bro process?
> Thanks for your help
> Links:
> ------
> [1]


broargs = -f 'net or port 443'

to your broctl.cfg file.


More information about the Bro mailing list