On Nov 1, 2012, at 5:01 PM, Daniel Thayer <[email protected]> wrote:
> I like this idea (it seems MUCH easier to use). How would > "suppress_for" be implemented in the evented model? Suppression is implemented at a pretty low level in the notice framework. That Notice::policy event would never be generated for suppressed notices (just like the notice policy variable currently isn't evaluated for suppressed notices). .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
