On Tue, Feb 02, 2016 at 11:47 -0500, you wrote:
> I was a little concerned that you'd fine something like this. Could > we just do what I was suggesting last week where we try to see if we > can get rid of the need for that? I was thinking about that but do we really want to give up the ability to tell where some information is coming from? If nothing else, wouldn't you want to use it for logging, e.g., to record which Bro reported a notice? Without that, there's no way to trace something on the manager back to its source. Robin -- Robin Sommer * ICSI/LBNL * [email protected] * www.icir.org/robin _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
