[Bro] How to suppress: is not seeing any packets on interface

[Robin Sommer]

On Thu, May 10, 2012 at 08:52 -0500, James Eyrich wrote:

> is not seeing any packets on interface

> what is the best way to suppress these?

The only way currently is to pretend you don't have the capstats tool
installed. Try adding "CapstatsPath=" to broctl.cfg (i.e., set it to
an empty value). You will however also loose the "capstats" command
and the traffic stats in stats.log.

Alternatively, you could hack the source: delete lines 119-123 in
aux/broctl/BroControl/cron.py.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org