[Bro-Dev] #336: Global config variable to disable packet filtering (i.e., accept all packets)
Bro Tracker
bro at tracker.icir.org
Wed Dec 8 17:36:49 PST 2010
#336: Global config variable to disable packet filtering (i.e., accept all
packets)
------------------------------+--------------------
Reporter: gregor | Owner:
Type: Feature Request | Status: new
Priority: Normal | Milestone: Bro1.6
Component: Bro | Version:
Resolution: | Keywords:
------------------------------+--------------------
Comment (by gregor):
{{{
#!rst
That should be fairly easy to achieve. However, I guess the question is:
* should this global flag disable all filters for good (sort of like using
-f),
* or should it just disable the default filter (which is constructed from
restrict_filters and
capture_filters), but still enable users to use precompile_pcap_filter()
and
install_pcap_filter() bifs. (See, e.g., load-level.bro, remote-pcap.bro,
peer-status.bro,
remote.bro)
print-filter.bro should probably be adjusted as well.
}}}
--
Ticket URL: <http://tracker.icir.org/bro/ticket/336#comment:2>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list