[Bro] Request: summarize-connections and email

[Castle, Shane]

I don't want to disable the scan summaries; they can be useful. I just want to disable the emails of them. I can still see them in the log hierarchy if I want to.

-- 
Shane Castle
Data Security Mgr, Boulder County IT

-----Original Message-----
From: Robin Sommer [mailto:robin at icir.org] 
Sent: Monday, December 10, 2012 09:25
To: Castle, Shane
Cc: bro at bro-ids.org
Subject: Re: [Bro] Request: summarize-connections and email


On Mon, Dec 10, 2012 at 15:03 +0000, you wrote:

> I'd like to stop the hourly emails sent by the summarize-connections
> script. There is not an option to turn these off;

Adding a line "TraceSummary=" to broctl.cfg (i.e., clearing that
option) should disable them.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org