[Bro] ignoring ContentGap and friends

Robin Sommer robin at icir.org
Mon Dec 8 12:56:32 PST 2008


On Mon, Dec 08, 2008 at 12:09 -0800, 0100 wrote:


> http://www.bro-ids.org/wiki/index.php/User_Manual:_Customizing_Bro) on how

You're likely using a newer version than this was written for (as it
seems you already guessed). The variables from weird.bro are now in
a namespace Weird so you should write Weird::WeirdActivity etc. (and
also @load weird).

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list