[Bro] Broccoli + Intel framework

Brian Little blittle766 at gmail.com
Mon Jul 8 05:11:37 PDT 2013


Is there a recommended way to modify Bro data on the fly with Broccoli, and
to have those changes saved upon a restart of Bro?

I've looked at the Intel framework, thinking that broccoli could update
files on disk (which then get automatically read into the intel framework),
but it seems like a bit of a roundabout method.

1) What are other people using to update bro variables/configs/tables on
the fly? Is Broccoli the best tool to use?

2) What is the best method of updating bro variables using broccoli so that
they get kept between bro restarts?

Thanks,
B Little
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130708/6ff0f307/attachment.html 


More information about the Bro mailing list