[Bro] Newb with a couple questions

[Seth Hall]

On Mar 13, 2013, at 5:13 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> But that seems to point to filtering columns, and not protocols.  
> Thanks for any insight.


I wrote a blog post about log filtering a while ago that should help you out:
	http://blog.bro.org/2012/02/filtering-logs-with-bro.html

Does that help?

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/