[Bro] broctl Email Reports
Chris Crawford
christopher.p.crawford at gmail.com
Thu May 31 06:22:53 PDT 2012
Hmm...I restarted bro and it's still sending Connection Summary
reports every hour.
On Wed, May 30, 2012 at 3:16 PM, Seth Hall <seth at icir.org> wrote:
>
> On May 30, 2012, at 3:04 PM, Chris Crawford wrote:
>
>> I tried adding what you recommended to my local.bro and then did a
>>
>> broctl install
>> broctl update
>>
>> but the connection summary email is still going out on the hour.
>
>
> Try restarting. bro_init handlers aren't invoked when updating. I'm not even sure that the logging framework is modifiable at runtime (we had a discussion about this a long time ago).
>
> .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>
More information about the Bro
mailing list