[Bro] Removing GeoIP Location from Bro
anthony kasza
anthony.kasza at gmail.com
Wed Feb 11 09:33:54 PST 2015
You'll need to remove references to it in a CPP and header file (I forget
which ones right now bit will get back to you). You need to remove the
functions that use the geoip record type from the bifs. You'll also need to
remove ant references to the geoip functions and the geoip record type
definition from script land.
-AK
On Feb 11, 2015 9:25 AM, "John Rote" <john.rote at shadownetworks.com> wrote:
> All,
>
> I am trying to remove Geo IP capability from Bro and have most of it
> removed but when I attempt to remove the global variable, the bro
> check fails.
>
> What are the steps for removing Geo IP from Bro?
>
> Thanks
> John
>
> --
> John Rote
> Director, Security Architecture - Shadow Labs
> Shadow Networks
> john.rote at shadownetworks.com
> 408-242-9688
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150211/e870a5e7/attachment-0001.html
More information about the Bro
mailing list