[Bro-Dev] [Bro-Commits] [git/bro] topic/matthias/notary: Factor notary code into separte file. (382262e)

Seth Hall seth at icir.org
Fri Dec 21 19:28:29 PST 2012

On Dec 21, 2012, at 9:00 PM, Matthias Vallentin <vallentin at icir.org> wrote:

> Repository : ssh://git@bro-ids.icir.org/bro
>   Factor notary code into separte file.

Please move the notary script to policy and move the definition for the Info record back into main.bro.

I see why you did it the way you did, but what I would rather see is that you implement a way to asynchronously add data to the SSL log with some sort of "delay ticket" like I implemented in the notice framework to delay sending emails while more data is collected.  It's possible that this is even something we should generically add to the logging framework.

Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list