[Bro] Adding options to bro managed by broctl

inetjunkmail inetjunkmail at gmail.com
Thu Aug 28 07:50:11 PDT 2014


We'd like to start bro with a tcpdump filter of, for example, -f 'net
1.0.0.0/24 or port 443'.  We use broctl to manage the bro process.  Where
is the appropriate place to add the desired filter so that broctl appends
it to any instantiation of a bro process?

Thanks for your help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140828/c449348a/attachment.html 


More information about the Bro mailing list