I have a Bro box monitoring traffic on a wireless network.
At night traffic is very light and sporadic and I get a lot of
is not seeing any packets on interface
and
is seeing packets again on interface
messages
what is the best way to suppress these?
The only way currently is to pretend you don't have the capstats tool
installed. Try adding "CapstatsPath=" to broctl.cfg (i.e., set it to
an empty value). You will however also loose the "capstats" command
and the traffic stats in stats.log.
Alternatively, you could hack the source: delete lines 119-123 in
aux/broctl/BroControl/cron.py.
Robin