[Bro] Internal hostname in mail.log

[Will]

Perfect! Thanks Robin!

Will

On Mon, May 2, 2011 at 2:13 PM, Robin Sommer <robin at icir.org> wrote:
>
> On Mon, May 02, 2011 at 12:36 -0400, you wrote:
>
>> Can anyone help me determine which broctl script/postprocessor (I'm
>> assuming) is adding an internal hostname (user.host.com) to mail.log.
>
> It's done inside Bro actually, see the
> aux/broctl/policy/mail-alarms.bro script.
>
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
> ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org
>