[Bro] Bro as a fancy pcap filter

[Christian Kreibich]

On Mon, 2005-11-21 at 19:04 -0800, Robin Sommer wrote:
> On Mon, Nov 21, 2005 at 21:15 -0500, Ruoming Pang wrote:
> 
> > And you can imagine calling dump_packets_of_connection() in all kinds 
> > of other events.
> 
> Alternatively, and more fine-grained, there is 
> 
> global dump_current_packet: function(file_name: string): bool;

Nice! That's exactly what I need -- thanks a bunch guys.

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org