[Bro] ignoring ContentGap and friends

0100 suroot at gmail.com
Mon Dec 8 13:44:50 PST 2008


Thanks! That seems to work. I will request a wiki account and update the
docs if that's okay.

0100

On Mon, Dec 8, 2008 at 1:38 PM, Vern Paxson <vern at icir.org> wrote:

> > redef notice_action_filters += {
> >      WeirdActivity, ContentGap = ignore_notice,
> > };
>
> Along with the scoping issues that others have discussed, there's
> a syntax problem here (which explains your follow-on problem).  The
> above needs to be:
>
>        redef notice_action_filters += {
>                [[Weird::WeirdActivity, Weird::ContentGap]] = ignore_notice,
>        };
>
> - Vern
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20081208/cb73a425/attachment.html 


More information about the Bro mailing list