[Bro] broctl Email Reports

[Seth Hall]

On May 30, 2012, at 3:04 PM, Chris Crawford wrote:

> I tried adding what you recommended to my local.bro and then did a
> 
> broctl install
> broctl update
> 
> but the connection summary email is still going out on the hour.


Try restarting.  bro_init handlers aren't invoked when updating.  I'm not even sure that the logging framework is modifiable at runtime (we had a discussion about this a long time ago).

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/