[Bro] Seeing packets

[Siwek, Jonathan Luke]

On Jun 9, 2013, at 8:03 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> Any way to disable these types of emails:
> 
> localhost is seeing packets again on interface eth0

I don't see any options to tweak how the output of `broctl cron` is constructed/emailed.  You can add a feature request at http://tracker.bro.org/bro.

The quick and dirty way to disable it would be to directly remove or comment out the code that generates those messages in /usr/local/bro/lib/broctl/BroControl/cron.py.  (looks like for v2.1, that's lines 119-123).

- Jon