[Bro] Bro manager crashing

Siwek, Jonathan Luke jsiwek at illinois.edu
Mon Dec 16 07:26:06 PST 2013


On Dec 14, 2013, at 12:19 AM, Konrad Weglowski <konrad.weglowski at gmail.com> wrote:

> When I uncommented the following line in /opt/bro/share/bro/site/local.bro to enable email alerts on notice alarms and did install and restart on broctl  Bro Manager is crashing.
> 
>  redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority = 0] };

Unfortunately, that commented-out example in local.bro doesn’t reflect how to actually use Notice::policy in Bro 2.2.  Using code like the following should be equivalent:

        hook Notice::policy(n: Notice::Info)
            {
            add n$actions[Notice::ACTION_ALARM];
            }

- Jon



More information about the Bro mailing list