[Bro] ignoring all weird?
Justin Azoff
JAzoff at uamail.albany.edu
Tue Mar 30 11:02:00 PDT 2010
On Tue, Mar 30, 2010 at 11:55:41AM -0500, Tim Rupp wrote:
> Is there a convenient way that I can suppress all weird messages that
> would otherwise bubble up to the weird log?
try something like this:
redef suppress_notice_actions += {
Weird::ContentGap,
Weird::AckAboveHole,
Weird::WeirdActivity,
};
--
-- Justin Azoff
-- Network Security & Performance Analyst
More information about the Bro
mailing list