[Bro-Dev] notice actions

Robin Sommer robin at icir.org
Tue Jul 19 14:58:19 PDT 2011


On Tue, Jul 19, 2011 at 16:35 -0400, you wrote:

> I'm trying to come up with a way to add the code to make it possible
> to determine which notice policy item added an action to a notice and
> I'm running into some trouble.

Is it sufficient to record just the notice item but not the action
type? Then you could do just set[count].

Or you do the table but manually turn it into a string for logging.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list