[Bro-Dev] [Bro-Commits] [git/bro] topic/seth/notice-framework-updates: Update notice framework documentation to represent the new reality. (e56a33b)
Matthias Vallentin
vallentin at icir.org
Wed Mar 6 09:23:50 PST 2013
> +Hooks can also abort later hook bodies with the ``break`` keyword. This
> +is primarily useful if one wants to completely preempt processing by
> +lower priority :bro:see:`Notice::policy` hooks.
Is this replacing the $halt functionality? So would I just use a
high-prioritized Notice::policy hook and break if I wanted to skip a
certain notice?
Matthias
More information about the bro-dev
mailing list