[Bro] broctl and filtering

James Lay jlay at slave-tothe-box.net
Fri Sep 20 06:13:42 PDT 2013


Hey all…trying to pass this:

broargs = --filter not ip6

a few different ways, but I'm not having much luck:

broargs = --filter not ip6
broargs = --filter 'not ip6'
broargs = --filter "not ip6"

==== stderr.log
error: can't open ip6

or

==== stderr.log
/usr/local/bro/share/broctl/scripts/broctl-config.sh: line 67: ip6: command not found
error: can't open ip6

==== .cmdline
-i eth1 -U .status -p broctl -p broctl-live -p standalone -p local -p bro local.bro broctl broctl/standalone broctl/auto --filter not ip6

Any hints on how to pass the filter the right way?  Thanks all.

James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130920/036f0c85/attachment.bin 


More information about the Bro mailing list