[Bro] Howto

Vern Paxson vern at icir.org
Thu Jul 21 09:59:58 PDT 2011


> 	if ( rec$not_valid_before > network_time() - 60*60*24*30 )

Note, this will need to be:

	if ( rec$not_valid_before > network_time() - 60*60*24*30 sec )

Bro won't allow mixing integers with time values.

		Vern



More information about the Bro mailing list