[Bro] CIF and Bro Integration

Bernhard Amann bernhard at ICSI.Berkeley.EDU
Wed Mar 26 18:46:26 PDT 2014


On Mar 26, 2014, at 6:14 PM, Jon Schipp <jonschipp at gmail.com> wrote:

> I'm not so certain anymore ;)
> It looks like you're right [1] that the mode is set to REREAD [1].
> Though, I'm pretty sure that I've read in the documentation that a restart is required for the removal of items.
> Maybe that was a mistake. Oh well. 

You are right about that. Even though reread supports the removal of items,
the current way in which it is used in the intelligence framework does not seem to.

I have to ask Seth why that is the case - it should be easy to change this.

Bernhard



More information about the Bro mailing list