When one starts Bro with no scripts at all (e.g., "bro -i ix1"), it
doesn't do anything because it will try to read from stdin. Seems we
should change that now so that it will just start processing?
Robin
Oh, I didn't realize this was behaving differently when sniffing a live interface. It already does this when reading a tracefile. It seems reasonable to me to make this the global behavior.
What was the reason for being able to provide Bro scripts on stdin? Does anyone use this functionality?
.Seth