[Bro] Script Question

Seth Hall seth at icir.org
Mon Feb 20 18:03:23 PST 2012


On Feb 20, 2012, at 4:41 PM, Mike Sconzo wrote:

> I'm still trying to get a handle on script writing, but I have a
> question on one of the events.


You may need to send along more of the script for use to help debug it.  One thought I have though, is did you make sure and include the &log attribute on the record type that you are logging?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/





More information about the Bro mailing list