On Mar 6, 2013, at 12:23 PM, Matthias Vallentin <[email protected]> wrote:
>> +Hooks can also abort later hook bodies with the ``break`` keyword. This >> +is primarily useful if one wants to completely preempt processing by >> +lower priority :bro:see:`Notice::policy` hooks. > > Is this replacing the $halt functionality? So would I just use a > high-prioritized Notice::policy hook and break if I wanted to skip a > certain notice? Correct. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro-ids.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
