[Bro] HTTP not being seen

[Keith Butler]

Maybe tell Bro to ignore checksums?

http://www.bro.org/documentation/faq.html#why-isn-t-bro-producing-the-logs-i-expect-a-note-about-checksums

Option 1 would probably entail:
If you are using broctl, in your broctl.cfg file add the line (then install and restart in broctl)?
broargs = --no-checksums


On Sep 13, 2013, at 7:51 PM, James Lay <jlay at slave-tothe-box.net> wrote:

> active_connection_reuse

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130914/ff0f4049/attachment.html