[Bro] BRO hourly summary connectivity reports - geoip?

Justin Azoff JAzoff at albany.edu
Wed Nov 13 19:49:00 PST 2013


On Wed, Nov 13, 2013 at 07:01:23PM -0500, Konrad Weglowski wrote:
> Thanks Justin.
> 
> I am a newbie to BRO. Where would I put that code? Would that be a separate
> script which would need to be loaded in local.bro?

Yep.. You could add the lines directly to local.bro but that gets messy
fast.  I would make a 'notice-locations.bro' in the site directory what
contains the location specific tweaks, then add a simple

    @load notice-locations

in local.bro

-- 
-- Justin Azoff
-- Network Security & Performance Analyst



More information about the Bro mailing list