[Bro] Bro manager crashing

Konrad Weglowski konrad.weglowski at gmail.com
Tue Dec 17 01:31:03 PST 2013


Hello Jon,

Thank you for very much. I put this directly inside local.bro. Is that the
right way of doing it or should I be inserting this in another or a new
file and then loading it inside local.bro?

Thanks,

Konrad


On Mon, Dec 16, 2013 at 10:26 AM, Siwek, Jonathan Luke
<jsiwek at illinois.edu>wrote:

>
> On Dec 14, 2013, at 12:19 AM, Konrad Weglowski <konrad.weglowski at gmail.com>
> wrote:
>
> > When I uncommented the following line in
> /opt/bro/share/bro/site/local.bro to enable email alerts on notice alarms
> and did install and restart on broctl  Bro Manager is crashing.
> >
> >  redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority =
> 0] };
>
> Unfortunately, that commented-out example in local.bro doesn’t reflect how
> to actually use Notice::policy in Bro 2.2.  Using code like the following
> should be equivalent:
>
>         hook Notice::policy(n: Notice::Info)
>             {
>             add n$actions[Notice::ACTION_ALARM];
>             }
>
> - Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131217/03605760/attachment.html 


More information about the Bro mailing list