[Bro-Dev] alarm function

Vern Paxson vern at icir.org
Fri Jun 3 13:42:44 PDT 2011


> Is more of a purpose to the alarm function than just printing to the alarm.log file?

Originally it was the interface to syslog.  This has now been factored out
into alarm_hook, which alarm will invoke if it's present.  In principle
we could get rid of it by replacing it with explicit calls to alarm_hook
(if it's defined).  I don't view this as a priority, though.

		Vern


More information about the bro-dev mailing list