[Bro] How can I invoke event tcp_option()?

Thomas Tan thomastan81 at gmail.com
Wed Oct 7 06:38:42 PDT 2015

Dear All,

I am new to Bro. I am testing the “*event tcp_option ()*”.  However, the
event is not invoked by the event engine.  Can anyone kindly advise me what
I have done wrong? My code is as follows.


@load base/protocols/conn

event bro_init() {

    print "Hello, World!";


event tcp_option (c:connection, is_orig:bool, opt:count, optlen:count){

                print "inside the tcp_option";


event bro_done() {

    print "Goodbye, World!";



Best regards,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151007/8262815b/attachment.html 

More information about the Bro mailing list