[Bro] BRO hourly summary connectivity reports - geoip?
Justin Azoff
JAzoff at albany.edu
Wed Nov 13 19:49:00 PST 2013
On Wed, Nov 13, 2013 at 07:01:23PM -0500, Konrad Weglowski wrote:
> Thanks Justin.
>
> I am a newbie to BRO. Where would I put that code? Would that be a separate
> script which would need to be loaded in local.bro?
Yep.. You could add the lines directly to local.bro but that gets messy
fast. I would make a 'notice-locations.bro' in the site directory what
contains the location specific tweaks, then add a simple
@load notice-locations
in local.bro
--
-- Justin Azoff
-- Network Security & Performance Analyst
More information about the Bro
mailing list