[Bro-Dev] #482: Bro command line filter doesn't work anymore

[Bro Tracker]

#482: Bro command line filter doesn't work anymore
----------------------+------------------------
  Reporter:  gregor   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------

Comment (by seth):

 > But FYI, it appears that on topic/policy-scripts-new
 > one can now override a command line specified filter with the
 > install_pcap_filter() BiF. (Which is not necessarily bad, we should just
 > be aware of it).

 Yes, that's deliberate.  I figure 99% of people will just be using the
 shipped scripts and the shipped scripts still follow that behavior.  I see
 no reason stop people from shooting themselves in the foot if they really
 want to. :)

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/482#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker