[Bro] Bro email notice question

[Scotty Brown]

If we are ever in the same place Jan - beers on me!

Thanks.

Scotty

On 30/03/16 02:15, Jan Grashöfer wrote:
> Hi Scotty,
>
>> Thank you!  This is exactly what I was after.  I did have to add a
>> missing closing bracket ) to line 39.
> You are welcome! I fixed the bracket as well as the misleading
> indentation of the script.
>
>> Did you ever have any discussion on getting this added/changed to the
>> default do_notice that is distributed with bro?
> If I remember correctly, the intention of do_notice.bro was to provide
> an example how the intel-framework could be used in this context. I
> think the example somehow became the default. Therefore I was not sure
> whether these changes would be suited for the do_notice.bro shipped with
> Bro.
>
> Regards,
> Jan
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro