[Bro] Broctl policy files

[M K]

Is there any guidance/information as to how things should be split up
between the 3 types of site policies (manager, proxy, worker). Can it
actually make a difference in performance or is it mainly there for
organization purposes?


As far as I can tell the docs only mention that notice filtering needs to
be done on the manager and everything else can go into the generic
local.bro file. Is there any further guidance?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140429/25a563c5/attachment.html