[Bro] Additional service ports

James Lay jlay at slave-tothe-box.net
Wed Nov 13 10:20:01 PST 2013


On 2013-11-13 10:39, Seth Hall wrote:
> On Nov 13, 2013, at 10:59 AM, anthony kasza <anthony.kasza at gmail.com> 
> wrote:
>
>> The 'Determining Analyzer Activation' section in the following link 
>> might be helpful.
>> http://www.bro.org/development/howtos/dpd.html
>
> Oops!  That section should have been deprecated with 2.2, it doesn't
> work that way anymore. You can do the following, but I'm not sure if
> it overwrites the default list of ports used or not...
>
> event bro_init()
> 	{
> 	Analyzer::register_for_ports(Analyzer::ANALYZER_HTTP, 
> set(12345/tcp));
> 	}
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/

Thanks Seth...I'll give that a go.

James



More information about the Bro mailing list