[Bro-Dev] notice actions
robin at icir.org
Tue Jul 19 14:58:19 PDT 2011
On Tue, Jul 19, 2011 at 16:35 -0400, you wrote:
> I'm trying to come up with a way to add the code to make it possible
> to determine which notice policy item added an action to a notice and
> I'm running into some trouble.
Is it sufficient to record just the notice item but not the action
type? Then you could do just set[count].
Or you do the table but manually turn it into a string for logging.
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev