[Bro-Dev] #903: -b turns off -f
Bro Tracker
bro at tracker.bro-ids.org
Wed Oct 17 18:24:54 PDT 2012
#903: -b turns off -f
---------------------+------------------------
Reporter: vern | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.2
Component: Bro | Version: git/master
Keywords: |
---------------------+------------------------
Running with -b (bare bones) disables processing by -f. Boy did this take
me a long time to figure out :-(.
Reproduce using the appended trace. Invoking with '''-e 'event
connection_established(c:connection) { print "yep"; }'''' will print
"yep". Invoking with that plus '''-f 'not tcp'''' won't print anything.
But invoking with '''-f 'not tcp' -b''' ''does'' print "yep".
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/903>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list