[Bro-Dev] changing Notice::policy mechanism
Robin Sommer
robin at icir.org
Wed Nov 7 14:19:31 PST 2012
On Wed, Nov 07, 2012 at 17:04 -0500, you wrote:
> Instead of using the "policy" keyword, how does everyone feel about
> "rule"?
I still haven't fully caught up with this thread but I veto this
suggestion. :) Rule is already overloaded (the Snort association, and
also Bro already has "rules" (indeed in the Snort sense).
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev
mailing list