[Bro] Problem with Broccoli connection

[Seth Hall]

On Dec 3, 2012, at 12:04 AM, Seth Hall <seth at icir.org> wrote:

> 
> On Dec 2, 2012, at 9:47 PM, Daniel Wyschogrod <dwyschogrod at bbn.com> wrote:
> 
>> 	["local"] = [$host=127.0.0.1, $class="barnyard",$events=/Barnyard2:barnyard_alert/,$connect=F]
>> 	};
> 
> You need two commas in that event name. 

Arg!  Two colons. :)  You could even just use /Barnyard2::.*/

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/