On Nov 13, 2013, at 11:39 AM, Seth Hall <seth at icir.org> wrote:
> You can do the following, but I'm not sure if it overwrites the default list of ports used or not...
>
> event bro_init()
> {
> Analyzer::register_for_ports(Analyzer::ANALYZER_HTTP, set(12345/tcp));
> }
It’s additive; doesn’t overwrite.
- Jon