[Bro] Adding options to bro managed by broctl

[James Lay]

On 2014-08-28 08:50, inetjunkmail wrote:
> Wed like to start bro with a tcpdump filter of, for example, -f net
> 1.0.0.0/24 [1] or port 443.  We use broctl to manage the bro process.
>  Where is the appropriate place to add the desired filter so that
> broctl appends it to any instantiation of a bro process?
>
> Thanks for your help
>
> Links:
> ------
> [1] http://1.0.0.0/24

Add:

broargs = -f 'net 1.0.0.0/24 or port 443'

to your broctl.cfg file.

James