[Bro] Script Question
Seth Hall
seth at icir.org
Mon Feb 20 18:03:23 PST 2012
On Feb 20, 2012, at 4:41 PM, Mike Sconzo wrote:
> I'm still trying to get a handle on script writing, but I have a
> question on one of the events.
You may need to send along more of the script for use to help debug it. One thought I have though, is did you make sure and include the &log attribute on the record type that you are logging?
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the Bro
mailing list