[Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/input: first test. (029871e)

Seth Hall seth at icir.org
Mon Nov 21 09:18:47 PST 2011


On Nov 21, 2011, at 11:18 AM, Robin Sommer wrote:

> On Sun, Nov 20, 2011 at 13:42 -0800, Bernhard wrote:
> 
>> +	# first read in the old stuff into the table...
>> +	Input::create_stream(A::LOG, [$source="input.log"]);
>> +	Input::add_filter(A::LOG, [$name="ssh", $idx=idx, $val=val, $destination=servers]);
>> +	Input::force_update(A::LOG);
>> +	print servers;
> 
> Nice!


Seriously!  This is awesome!

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list