[Bro-Dev] [Bro-Commits] [git/bro] topic/matthias/notary: Factor notary code into separte file. (382262e)

[Seth Hall]

On Dec 21, 2012, at 9:00 PM, Matthias Vallentin <vallentin at icir.org> wrote:

> Repository : ssh://git@bro-ids.icir.org/bro
>   Factor notary code into separte file.

Please move the notary script to policy and move the definition for the Info record back into main.bro.

I see why you did it the way you did, but what I would rather see is that you implement a way to asynchronously add data to the SSL log with some sort of "delay ticket" like I implemented in the notice framework to delay sending emails while more data is collected.  It's possible that this is even something we should generically add to the logging framework.

  .Seth
 
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/