[Bro] Additional service ports

Seth Hall seth at icir.org
Wed Nov 13 09:39:14 PST 2013


On Nov 13, 2013, at 10:59 AM, anthony kasza <anthony.kasza at gmail.com> wrote:

> The 'Determining Analyzer Activation' section in the following link might be helpful.
> http://www.bro.org/development/howtos/dpd.html

Oops!  That section should have been deprecated with 2.2, it doesn't work that way anymore. You can do the following, but I'm not sure if it overwrites the default list of ports used or not...

event bro_init()
	{
	Analyzer::register_for_ports(Analyzer::ANALYZER_HTTP, set(12345/tcp));
	}

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131113/07792a8e/attachment.bin 


More information about the Bro mailing list