[Bro] Disable some type of "alerts" for internal servers

C.L. Martinez carlopmart at gmail.com
Fri Mar 13 04:46:14 PDT 2015

Hi all,

  I am receiving a lot alerts like this:

  Bro SSL::Invalid_Server_Cert. (Unknown):3040 -> (Unknown):1610

  which it is correct: we are using a lot of certs auto-signed in our 

  Is it possible to disable this type of alert for an IP or a group of IP's?


More information about the Bro mailing list