[Bro-Dev] [Bro-Commits] [git/bro] topic/seth/notice-framework-updates: Update notice framework documentation to represent the new reality. (e56a33b)

[Seth Hall]

On Mar 6, 2013, at 12:23 PM, Matthias Vallentin <vallentin at icir.org> wrote:

>> +Hooks can also abort later hook bodies with the ``break`` keyword. This
>> +is primarily useful if one wants to completely preempt processing by
>> +lower priority :bro:see:`Notice::policy` hooks.
> 
> Is this replacing the $halt functionality? So would I just use a
> high-prioritized Notice::policy hook and break if I wanted to skip a
> certain notice?


Correct.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/