[Bro] Configuring MAIL FROM:

[Seth Hall]

On Dec 5, 2012, at 9:16 AM, Paul Halliday <paul.halliday at gmail.com> wrote:

>>       redef Notice::mail_from = "Big Brother <bro at host.domain.ca>";


The mailfrom (or MailFrom, it's case insensitive) option in broctl.cfg actually sets this same variable.  It's likely overwriting what you are setting in local.bro anyway. :)

Glad it's working now.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/