[Bro-Dev] [Bro-Commits] [git/bro] topic/seth/notice-framework-updates: Update notice framework documentation to represent the new reality. (e56a33b)

Matthias Vallentin vallentin at icir.org
Wed Mar 6 09:23:50 PST 2013


> +Hooks can also abort later hook bodies with the ``break`` keyword. This
> +is primarily useful if one wants to completely preempt processing by
> +lower priority :bro:see:`Notice::policy` hooks.

Is this replacing the $halt functionality? So would I just use a
high-prioritized Notice::policy hook and break if I wanted to skip a
certain notice?

    Matthias


More information about the bro-dev mailing list