[Bro] ignoring all weird?

Justin Azoff JAzoff at uamail.albany.edu
Tue Mar 30 11:02:00 PDT 2010


On Tue, Mar 30, 2010 at 11:55:41AM -0500, Tim Rupp wrote:
> Is there a convenient way that I can suppress all weird messages that
> would otherwise bubble up to the weird log?

try something like this:

redef suppress_notice_actions += {
    Weird::ContentGap,
    Weird::AckAboveHole,
    Weird::WeirdActivity,
};

-- 
-- Justin Azoff
-- Network Security & Performance Analyst



More information about the Bro mailing list