[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    Re: [Bro] Advanced filtering
From:       Seth Hall <seth () icir ! org>
Date:       2012-01-24 16:06:18
Message-ID: 912E1F77-721E-46D0-8734-0C950E1807F1 () icir ! org
[Download RAW message or body]


On Jan 24, 2012, at 10:39 AM, Thomas, Eric D wrote:

> for performance and log size reasons.

One more thought actually.  If you are concerned with log size, you really have no \
limitations for filtering and redirecting your logs with the logging framework.  I'm \
hoping to do a short blog post today demonstrating some of the logging filters that I \
have created recently for various people.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/


[prev in list] [next in list] [prev in thread] [next in thread]