[Bro] Modifying Report (Log Rotation?) Schedule + General Config Options
Robin Sommer
robin at icir.org
Wed Feb 17 08:51:08 PST 2010
On Wed, Feb 17, 2010 at 09:10 -0700, you wrote:
> On a default 1.5.1 install, I'm getting summary and alert emails every 12
These are indeed send out twice day per default. The intervals are
set in {standalone,cluster-manager}.rotate-logs.bro and
{standalone,cluster-manager}.mail-alarms.bro. Don't change them
there directly but use similar redef's as these scripts do.
> A larger question, what happened to all of the options from 1.4 that could
> be set in bro.cfg?
They are gone (sorry). The old bro.cfg and new broctl.cfg are
completely separate frameworks, broctl has been written from
scratch. broctl's README.html has a complete list of option that
broctl.cfg supports. If you find anything missing, please file a
feature request with tracker.icir.org.
Robin
--
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list