[Bro] Bro manager crashing
Konrad Weglowski
konrad.weglowski at gmail.com
Tue Dec 17 01:31:03 PST 2013
Hello Jon,
Thank you for very much. I put this directly inside local.bro. Is that the
right way of doing it or should I be inserting this in another or a new
file and then loading it inside local.bro?
Thanks,
Konrad
On Mon, Dec 16, 2013 at 10:26 AM, Siwek, Jonathan Luke
<jsiwek at illinois.edu>wrote:
>
> On Dec 14, 2013, at 12:19 AM, Konrad Weglowski <konrad.weglowski at gmail.com>
> wrote:
>
> > When I uncommented the following line in
> /opt/bro/share/bro/site/local.bro to enable email alerts on notice alarms
> and did install and restart on broctl Bro Manager is crashing.
> >
> > redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority =
> 0] };
>
> Unfortunately, that commented-out example in local.bro doesn’t reflect how
> to actually use Notice::policy in Bro 2.2. Using code like the following
> should be equivalent:
>
> hook Notice::policy(n: Notice::Info)
> {
> add n$actions[Notice::ACTION_ALARM];
> }
>
> - Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131217/03605760/attachment.html
More information about the Bro
mailing list