[Bro-Dev] On the topic of MailTo/MailAlarmsTo...

Vlad Grigorescu vladg at cmu.edu
Mon Dec 17 20:14:26 PST 2012

That sounds good to me. While I don't like overcomplicating things, I don't see any other way to do this without a 3rd option. I think the new names are clearer than the existing ones.


On Dec 17, 2012, at 7:52 PM, Robin Sommer <robin at icir.org> wrote:

> So, yeah, that looks like we need third category, but maybe we one for
> the summaries. How about this:
>     - Bro Notice::ACTION_EMAIL     -> MailTo
>     - Bro Notice::ACTION_ALARM     -> MailSummariesTo
>     - broctl summarize-connections -> MailSummariesTo
>     - broctl crash reports         -> MailAdminTo
>     - broctl cron output           -> MailAdminTo
> MailSummariesTo and MailAdminTo would default to MailTo.

More information about the bro-dev mailing list