[Bro] Hui Lin_Enable Protocol Analyzer in Bro bare mode
Seth Hall
seth at icir.org
Mon Jun 25 13:39:41 PDT 2012
On Jun 25, 2012, at 4:34 PM, Hui Lin (Hugo) wrote:
> I also like to use a Syslog analyzer to analyze syslog_message event. I define syslog_message event in my own script, but this event handler is not executed under bare mode? I am wondering what scripts should be loaded to enable Syslog analyzer.
It's enabled by default. Can you show the code you are using that isn't working?
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the Bro
mailing list