[Bro-Dev] #903: -b turns off -f

Bro Tracker bro at tracker.bro-ids.org
Wed Oct 17 18:24:54 PDT 2012

#903: -b turns off -f
 Reporter:  vern     |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro2.2
Component:  Bro      |    Version:  git/master
 Keywords:           |
 Running with -b (bare bones) disables processing by -f.  Boy did this take
 me a long time to figure out :-(.

 Reproduce using the appended trace.  Invoking with '''-e 'event
 connection_established(c:connection) { print "yep"; }'''' will print
 "yep".   Invoking with that plus '''-f 'not tcp'''' won't print anything.
 But invoking with '''-f  'not tcp' -b''' ''does'' print "yep".

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/903>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list