[Bro-Dev] #336: Global config variable to disable packet filtering (i.e., accept all packets)

Bro Tracker bro at tracker.icir.org
Wed Dec 8 17:36:49 PST 2010


#336: Global config variable to disable packet filtering (i.e., accept all
packets)
------------------------------+--------------------
  Reporter:  gregor           |      Owner:
      Type:  Feature Request  |     Status:  new
  Priority:  Normal           |  Milestone:  Bro1.6
 Component:  Bro              |    Version:
Resolution:                   |   Keywords:
------------------------------+--------------------

Comment (by gregor):

 {{{
 #!rst

 That should be fairly easy to achieve. However, I guess the question is:

 * should this global flag disable all filters for good (sort of like using
 -f),
 * or should it just disable the default filter (which is constructed from
 restrict_filters and
   capture_filters), but still enable users to use precompile_pcap_filter()
 and
   install_pcap_filter() bifs. (See, e.g., load-level.bro, remote-pcap.bro,
 peer-status.bro,
   remote.bro)

 print-filter.bro should probably be adjusted as well.


 }}}

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/336#comment:2>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list