[Bro] minimalistic bro setup
william de ping
bill.de.ping at gmail.com
Wed Apr 5 05:40:37 PDT 2017
any ideas on how to turn off unwanted plugins\analyzers ?
On Tue, Apr 4, 2017 at 1:07 PM, william de ping <bill.de.ping at gmail.com>
> Hi all,
> I would like to make bro real thin by not loading all unnecessary
> I have tweaked init-bare and init-default scripts, yet when I see the
> loaded-scripts, I see that many plugins are loaded.
> How can I turn off plugins effectively ?
> when I edit base/bif/plugins/__load__.bro to not load ,say, FTP, I get
> many errors that some FTP fields are not recognized and preventing the
> cluster from running.
> I basically need only UDP and DNS events and have no need for the moment
> for other down stream analyzers\plugins.
> Thanks in advance
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro