[Bro] HTTP not being seen

James Lay jlay at slave-tothe-box.net
Sat Sep 14 05:24:06 PDT 2013


On Sep 14, 2013, at 3:04 AM, Keith Butler <kebutler at gmail.com> wrote:

> Maybe tell Bro to ignore checksums?
> 
> http://www.bro.org/documentation/faq.html#why-isn-t-bro-producing-the-logs-i-expect-a-note-about-checksums
> 
> Option 1 would probably entail:
> If you are using broctl, in your broctl.cfg file add the line (then install and restart in broctl)?
> broargs = --no-checksums
> 
> 
> On Sep 13, 2013, at 7:51 PM, James Lay <jlay at slave-tothe-box.net> wrote:
> 
>> active_connection_reuse
> 

Hey hey!  I think that was just the ticket.  Thanks so much Keith!

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130914/0cb60aab/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130914/0cb60aab/attachment.bin 


More information about the Bro mailing list