[Bro] Notice only every four hours

Jason Carr jcarr at andrew.cmu.edu
Thu Nov 11 14:33:59 PST 2010


I'm writing to a global table with two items in a set (global blah: set[addr,string] &write_expire = 4 hrs;)

I'm adding items into the table like this: add blah[a,b];, then adding a notice for an external parser to deal with.  Is there any way to only send the notice every four hours?

Thanks guys,

Jason





More information about the Bro mailing list