[Bro] - Exec::run when reading a pcap

william de ping bill.de.ping at gmail.com
Thu Oct 26 07:36:57 PDT 2017


Hi Seth,

after uncommenting this line, bro is stuck and won't terminate on its own..

On Thu, Oct 26, 2017 at 5:11 PM, Seth Hall <seth at corelight.com> wrote:

>
>
> On 26 Oct 2017, at 10:02, william de ping wrote:
>
> #redef exit_only_after_terminate=T;
>>
>
> Uncomment this and it works.  Bro can't do anything by blocking script
> execution but if there is no input or you haven't explicitly told it to
> avoid shutting down then it will shutdown when there is no more input.
>
>   .Seth
>
> --
> Seth Hall * Corelight, Inc * www.corelight.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171026/710f181a/attachment.html 


More information about the Bro mailing list