> +Hooks can also abort later hook bodies with the ``break`` keyword. This
> +is primarily useful if one wants to completely preempt processing by
> +lower priority :bro:see:`Notice::policy` hooks.

Is this replacing the $halt functionality? So would I just use a
high-prioritized Notice::policy hook and break if I wanted to skip a
certain notice?

    Matthias
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev

Reply via email to