[Bro] How filter machine name registration?

[Vito Logrillo]

Ok,
thanks for your reply.
Without any change on source code, what event you suggest to use to handle
these data?
Also an event able to give me additional RRs as row data could be fine.
Vito

2014-10-28 13:13 GMT+01:00 Seth Hall <seth at icir.org>:

>
> On Oct 28, 2014, at 3:59 AM, Vito Logrillo <vitologrillo at gmail.com> wrote:
>
> > I've tried your solution without any result.
> > Below you can see the bro script that i've used
>
> Oh, sorry.  That was only part of the solution.  Those records attached to
> the connection record are filled out by scripts, but we don't have scripts
> that deal with additional RRs.  You will have to handle the appropriate
> events and write your own script to do something with the data.
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20141028/08542488/attachment.html