turing this off

Vern Paxson vern at icir.org
Wed Oct 8 16:07:23 PDT 2003


> Can somebody suggest how do I turn off the generation of this:
> 
> 'WeirdActivity ** non_IPv4_packet'
> 
> I am getting loads of those in my honeynet.

This should do the trick:

	redef weird_action += { ["non_IPv4_packet"] = WEIRD_IGNORE };

- Vern



More information about the Bro mailing list