[Bro] broccoli tests

[Christian Kreibich]

On Thu, 2005-06-09 at 14:11 -0500, Mike Muratet wrote:
> Scott
> 
> As I said in my last post, I had tried all the combinations of broping, 
> broping-record and broping, broping -r. I see in the broping.bro and 
> broping-record.bro scripts that printing 'Received ping...' is part of the 
> pong event.

Note that it doesn't make sense to try all these combinations. Either
use broping and broping.bro, or broping -r and broping-record.bro. In
the former case, all parameters for the pong event are sent separately,
in the latter case, a Bro record type is used to bundle them up.

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org