On Dec 21, 2012, at 9:00 PM, Matthias Vallentin <[email protected]> wrote:
> Repository : ssh://[email protected]/bro > Factor notary code into separte file. Please move the notary script to policy and move the definition for the Info record back into main.bro. I see why you did it the way you did, but what I would rather see is that you implement a way to asynchronously add data to the SSL log with some sort of "delay ticket" like I implemented in the notice framework to delay sending emails while more data is collected. It's possible that this is even something we should generically add to the logging framework. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
