[Bro] Properly disabling certain rules

James Lay jlay at slave-tothe-box.net
Wed Jun 18 07:53:18 PDT 2014


On 2014-06-18 08:09, James Lay wrote:
> Team,
>
> So...after upgrading to Bro 2.3, syslog and ssl have returned, which 
> I
> do not want to see.  I commented them out in init-default.bro, which 
> is
> not the right way to go I know.  How can I disable these in my
> local.bro?  Thank you.
>
> James
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

Heh...got it already:

event bro_init()
        {
        Log::disable_stream(Syslog::LOG);
        }

Thanks all.

James



More information about the Bro mailing list