problems using Bro (http)

[rmkml]

thanks for your help Robin

Regards
Rmkml at Wanadoo.fr


On Tue, 15 Jun 2004, Robin Sommer wrote:

> Date: Tue, 15 Jun 2004 17:24:04 +0200
> From: Robin Sommer <sommer at in.tum.de>
> To: rmkml <rmkml at wanadoo.fr>
> Cc: bro at lbl.gov
> Subject: Re: problems using Bro (http)
> 
>
> On Tue, Jun 15, 2004 at 16:55 +0200, rmkml wrote:
>
>> $ /usr/src/bro/bro-pub-0.9a2/bro -i eth0 bro.init mt http
>
> You should use "http-request" (and perhaps "http-reply") instead of
> http.
>
>> and why bro write weird.log only after stop bro ?
>
> Most of the log files are buffered, i.e. output is written in larger
> chunks (and at termination).
>
> Robin
>
> --
> Robin Sommer * Room        01.08.055 * www.net.in.tum.de
> TU Muenchen  * Phone (089) 289-18006 *  sommer at in.tum.de
>