[Bro] ignoring ContentGap and friends
Robin Sommer
robin at icir.org
Mon Dec 8 12:56:32 PST 2008
On Mon, Dec 08, 2008 at 12:09 -0800, 0100 wrote:
> http://www.bro-ids.org/wiki/index.php/User_Manual:_Customizing_Bro) on how
You're likely using a newer version than this was written for (as it
seems you already guessed). The variables from weird.bro are now in
a namespace Weird so you should write Weird::WeirdActivity etc. (and
also @load weird).
Robin
--
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list