[Bro] Issue defining "Site::local_admins" variable

Seth Hall seth at corelight.com
Thu May 11 20:23:15 PDT 2017


For context on this functionality, it was written for Universities with distributed administrators for all of the networks.  It was written so I could load the database of network admins into Bro and have it email the responsible party automatically.

  .Seth

> On May 8, 2017, at 12:11 PM, Espresso Beanies <espressobeanies at gmail.com> wrote:
> 
> I see. Thanks again.
> 
> On Mon, May 8, 2017 at 12:06 PM, Azoff, Justin S <jazoff at illinois.edu> wrote:
> 
> > On May 8, 2017, at 12:04 PM, Espresso Beanies <espressobeanies at gmail.com> wrote:
> >
> > Thanks Justin. That worked. :)
> >
> > Out of curiosity, what does the "print Site::get_emails()" statement do?
> 
>     ## Function that returns a comma-separated list of email addresses
>     ## that are considered administrators for the IP address provided as
>     ## an argument.
>     ## The function inspects :bro:id:`Site::local_admins`.
>     global get_emails: function(a: addr): string;
> 
> --
> - Justin Azoff
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

--
Seth Hall * Corelight, Inc * seth at corelight.com * www.corelight.com




More information about the Bro mailing list