Good Afternoon,
I have made it so far to Browsing Log Files in Bro via the documentation provided under the Quick Start Guide and Managing Bro with BroControl. I am now in the Redefining Script Option Variables section and am trying to understand the documentation regarding adding the statement to local.bro:
I browsed out to the below location and tried to insert the above text but don’t know where to insert it. Can this be anywhere in the document? Also, how would you know to look into main.bro at the module notice and derive what needs to be added to local.bro, in this example or others?
Thank you,
Charles
Good Afternoon,
I have made it so far to Browsing Log Files in Bro via the documentation provided under the Quick Start Guide and Managing Bro with BroControl. I am now in the Redefining Script Option Variables section and am trying to understand the documentation regarding adding the statement to local.bro:
redef Notice::ignored_types += { SSL::Invalid_Server_Cert };
I browsed out to the below location and tried to insert the above text but don’t know where to insert it. Can this be anywhere in the document? Also, how would you know to look into main.bro at the module notice and derive what needs to be added to local.bro, in this example or others?
/usr/local/bro/share/bro/site
Thank you,
Charles
The Quick Start guide is intended to give a (very) quick
tour of some things you can do with Bro, so don't worry
if you don't understand why the examples are written the
way they are.
There is more complete documentation in the "Reference"
section. For example, the "Notice Framework" document gives
more background information that will help you understand
the example in the Quick Start guide.
For documentation about specific Bro scripts, the
"Bro Package Index" or "Bro Script Index" pages are
quite useful (these are listed on the table of contents of the
Bro Manual).
