Disabling mailed trace-summary reports

Zeek
1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,

Has anyone found a way to disable the trace-summary traffic reports?
The only way I've been able to do it, short of modifying the script code
itself, is to unset the SendMail variable in broctl.cfg. There must be
a better way.

I also wonder how good the IPV6 support is in 2.1. Maybe someone can
comment on that. On the system I do use the reports with, I had to
write my own wrappers to the inet_aton and inet_ntoa functions and then
comment out the IPV6 subnets in networks.cfg. That seems a lot hackier
than I like, but I understand that v6 isn't officially supported in 2.0.

- -Lou

2

Has anyone found a way to disable the trace-summary traffic reports?

Adding a line "TraceSummary=" to broctl.cfg (i.e., clearing that
option) should disable it.

I also wonder how good the IPV6 support is in 2.1. Maybe someone can
comment on that. On the system I do use the reports with,

The reports will fully support IPv6 in 2.1. The main piece of that (in
addition to the inet_aton changes) is adding support to the underlying
Python library doing subnet lookups. We have a contributed patch for
that already but not yet merged it in
(http://tracker.bro-ids.org/bro/ticket/750).

Robin