[Bro-Dev] changing Notice::policy mechanism

Robin Sommer robin at icir.org
Wed Nov 7 14:19:31 PST 2012


On Wed, Nov 07, 2012 at 17:04 -0500, you wrote:

> Instead of using the "policy" keyword, how does everyone feel about
> "rule"?

I still haven't fully caught up with this thread but I veto this
suggestion. :) Rule is already overloaded (the Snort association, and
also Bro already has "rules" (indeed in the Snort sense).

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list