[Bro] [Non-DoD Source] Re: BroCtl plugin - Hooking into install command (UNCLASSIFIED)

Knick, Scott E CTR (US) scott.e.knick.ctr at mail.mil
Thu Apr 28 06:28:59 PDT 2016


CLASSIFICATION: UNCLASSIFIED

Thanks for the recommendation! I'll take a look.

-----Original Message-----
From: Daniel Thayer [mailto:dnthayer at illinois.edu] 
Sent: Wednesday, April 27, 2016 9:55 PM
To: Knick, Scott E CTR (US) <scott.e.knick.ctr at mail.mil>; bro at bro.org
Subject: [Non-DoD Source] Re: [Bro] BroCtl plugin - Hooking into install command (UNCLASSIFIED)

Have you tried a pre-deploy plugin (i.e., cmd_deploy_pre)?
That might be a better fit for what you're trying to accomplish, unless there's some reason why you would prefer to not use the deploy command.


On 04/27/2016 01:45 AM, Knick, Scott E CTR (US) wrote:
> CLASSIFICATION: UNCLASSIFIED
>
> CLASSIFICATION: UNCLASSIFIED
>
> Thanks. This seems non-intuitive, but regardless, can anyone offer any suggestions to implement what I'm describing using a BroCtl plugin, or am I purely barking up the wrong tree? Thanks.
>
CLASSIFICATION: UNCLASSIFIED
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5633 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160428/10f12d14/attachment.bin 


More information about the Bro mailing list