[Bro-Dev] On the topic of MailTo/MailAlarmsTo...
vladg at cmu.edu
Mon Dec 17 20:14:26 PST 2012
That sounds good to me. While I don't like overcomplicating things, I don't see any other way to do this without a 3rd option. I think the new names are clearer than the existing ones.
On Dec 17, 2012, at 7:52 PM, Robin Sommer <robin at icir.org> wrote:
> So, yeah, that looks like we need third category, but maybe we one for
> the summaries. How about this:
> - Bro Notice::ACTION_EMAIL -> MailTo
> - Bro Notice::ACTION_ALARM -> MailSummariesTo
> - broctl summarize-connections -> MailSummariesTo
> - broctl crash reports -> MailAdminTo
> - broctl cron output -> MailAdminTo
> MailSummariesTo and MailAdminTo would default to MailTo.
More information about the bro-dev