[Bro-Dev] controlling what's loaded

Seth Hall seth at icir.org
Tue Jul 19 12:28:33 PDT 2011

On Jul 19, 2011, at 1:51 PM, Vern Paxson wrote:

> When I run Bro 2.0 with just the script "protocols/dns", it pulls in (among
> other things) frameworks/packet-filter/netstats.bro , which strikes me as
> definitely something optional rather than necessary.  If I wanted to
> suppress that behavior, how would I do it?

That's a good point, I think you've identified a place where we don't want a script to be loaded by default.  We're including a local.bro script with Bro now too that's intended to be edited locally after installation as a "recommended" load set so we can do recommended loads there and not make them load by default anymore.  I'll change that now and keep the list of odd-to-load-by-default scripts coming. :)

My comment to Robin yesterday was that you can think of the new site/local.bro script like the old brolite script except that it's meant to be edited now.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list