[Bro] - Skip Weird or ProtocolViolation analyzer

william de ping bill.de.ping at gmail.com
Sun Jun 4 08:06:53 PDT 2017


Hi all,

I am trying to save bro unnecessary events, weird is has quit a few hits
that are not relevant to me.
I see that under HTTP.cc or DNS.cc I have some redirection to WEIRD or
ProtocolViolation analyzers.
How can I delete the connection at this stage instead of sending it to
another costly analyzer ?

can I just comment it out ?

Thank you,
B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170604/99aa6ad9/attachment.html 


More information about the Bro mailing list