[Bro] I have some questions about Bro, thanks!

[邱憲璋]

Dear all:

I want to get some statistics about past connections.
But the record_connection function in the "conn.bro",  it seems to deal with one connection.
So I need to get the past connection, but I have no idea that which function/event should I modify .

In the Ref-Manual document, I saw the log_hook predefined fumction.
I guess maybe this function is the key for my question.
But I can't find this function in any file.
Where can I find this function, or I have to create by myself ?
If I have to create by myself, which file  should  add this funciotn ? (I mean which file should include this function.)

My english is no well, so if it is impolite.
Sorry about that.
Thanks!

Best Regards,
Jack
2007/2/2




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070202/bc8a8829/attachment.html