[Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/input: first test. (029871e)
Seth Hall
seth at icir.org
Mon Nov 21 09:18:47 PST 2011
On Nov 21, 2011, at 11:18 AM, Robin Sommer wrote:
> On Sun, Nov 20, 2011 at 13:42 -0800, Bernhard wrote:
>
>> + # first read in the old stuff into the table...
>> + Input::create_stream(A::LOG, [$source="input.log"]);
>> + Input::add_filter(A::LOG, [$name="ssh", $idx=idx, $val=val, $destination=servers]);
>> + Input::force_update(A::LOG);
>> + print servers;
>
> Nice!
Seriously! This is awesome!
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the bro-dev
mailing list