[Bro-Dev] notice tags?
seth at icir.org
Fri Jun 3 09:02:33 PDT 2011
On Jun 3, 2011, at 11:35 AM, Gregor Maier wrote:
> Do we still need the tags once we have unique connids for grepping?
It might be worthwhile still. It was interesting to me to see all of the notices attached to a connection. I'm a big proponent of browsing Bro logs and I like anything that makes my browsing experience better. :)
International Computer Science Institute
(Bro) because everyone has a network
More information about the bro-dev