[Bro] Disabling logs from loaded scripts

Knick, Scott E CTR USARMY RCERT-EUR (US) scott.e.knick.ctr at mail.mil
Wed May 7 01:26:29 PDT 2014


I want to tightly control what Bro outputs. As a result, I run it with the "bare" option enabled. This works well except any scripts I load end up logging their own stuff. For example, if my script loads base/protocols/http, then that module ends up logging stuff to files.log and http.log. I was able to cut out the files.log by loading specifically base/protocols/http/main.bro, but http.log is still generated. Is there some other option I can use, perhaps in my script?

Thanks.

--
Scott Knick





More information about the Bro mailing list