creating bro scripts

Zeek
1

Thanks Anthony,
Here is what I have so far. How do I create a notice out of it?

event dns_request(c: connection, msg: dns_msg, query: string, qtype: count, qclass: count) &priority=5
        {
        if ( c$dns$qtype == PTR )
                return;
}

2

See the ‘raising notices’ section here
http://bro.org/sphinx/notice.html