[Bro] Disable session processing

Seth Hall seth at icir.org
Thu Mar 13 06:05:05 PDT 2014


On Mar 13, 2014, at 7:54 AM, Eddi Linder <eddi at guardicore.com> wrote:

> If I know that the current tcp session is not interesting and I want to ease the load over bro, Is it possible to tell bro to stop processing the current session?

Yep, that's nice and easy. :)

http://www.bro.org/sphinx/scripts/base/bif/bro.bif.html#id-skip_further_processing

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140313/ecd2ec2d/attachment.bin 


More information about the Bro mailing list