[Bro] minimalistic bro setup

william de ping bill.de.ping at gmail.com
Wed Apr 5 05:40:37 PDT 2017

any ideas on how to turn off unwanted plugins\analyzers ?


On Tue, Apr 4, 2017 at 1:07 PM, william de ping <bill.de.ping at gmail.com>

> Hi all,
> I would like to make bro real thin by not loading all unnecessary
> plugins\analyzers.
> I have tweaked init-bare and init-default scripts, yet when I see the
> loaded-scripts, I see that many plugins are loaded.
> How can I turn off plugins effectively ?
> when I edit base/bif/plugins/__load__.bro  to not load ,say, FTP, I get
> many errors that  some FTP fields are not recognized and preventing the
> cluster from running.
> I basically need only UDP and DNS events and have no need for the moment
> for other down stream analyzers\plugins.
> Thanks in advance
> B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170405/8b5c9f87/attachment.html 

More information about the Bro mailing list