Removing GeoIP Location from Bro

Zeek
1

All,

I am trying to remove Geo IP capability from Bro and have most of it
removed but when I attempt to remove the global variable, the bro
check fails.

What are the steps for removing Geo IP from Bro?

Thanks
John

2

You’ll need to remove references to it in a CPP and header file (I forget which ones right now bit will get back to you). You need to remove the functions that use the geoip record type from the bifs. You’ll also need to remove ant references to the geoip functions and the geoip record type definition from script land.

-AK