[Bro-Dev] alarm function

Seth Hall seth at icir.org
Fri Jun 3 19:39:57 PDT 2011


On Jun 3, 2011, at 5:04 PM, Vern Paxson wrote:

> One benefit is that alarm.log is often much smaller than notice.log
> (a factor of 10,000 smaller for my ICSI config).  Sure, one can figure


Sounds good.  I'll put a filter in the notice script that filters alarms into a file named alarm.log.

  .Seth




More information about the bro-dev mailing list