[Bro] Question on "already defined (Notice::policy)" error
James Lay
jlay at slave-tothe-box.net
Thu Oct 9 13:44:12 PDT 2014
On 2014-10-09 14:39, Gary Faulkner wrote:
> Have you tried something like this for defining notices you want
> emails on:
>
> redef Notice::emailed_types += {
> PacketFilter::Dropped_Packets,
> };
>
>
> On 10/9/2014 2:55 PM, James Lay wrote:
>> Hi All,
>>
>> I'm dabbling with getting Bro to email, so I've added this to my
>> local.bro:
>>
>> redef Notice::mail_dest = "myemail at address.com";
>>
>> redef Notice::policy += {
>> [$result = Notice::ACTION_EMAIL,
>> $pred(n: Notice::Info) =
>> { return n$note == PacketFilter::Dropped_Packets; }
>> ]
>> };
>>
>> but I'm getting:
>>
>> error in /usr/local/bro/share/bro/base/frameworks/notice/./main.bro,
>> line 183 and /usr/local/bro/share/bro/site/local.bro, line 101:
>> already
>> defined (Notice::policy)
>>
>> Is there something I'm missing? Thank you.
>>
>> James
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
Giving that a go now...thanks Gary.
James
More information about the Bro
mailing list