[Bro] Allowing only certain log types

Sherif Eldeeb archeldeeb at gmail.com
Tue Jun 13 07:43:54 PDT 2017


We are planning to only use the "logging" features of Bro, and for certain
types, on a 10G link.

I'd appreciate pointing me to right direction to only enable (conn.log,
dns.log, http.log and ssl.log) while disabling all the others (to save
processing cycles and storage) for the types that we won't use/need.

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170613/97cdb2fd/attachment.html 


More information about the Bro mailing list