On Apr 1, 2013, at 4:27 PM, Robin Sommer <[email protected]> wrote:
> No, it was just an alternative way of disabling chunks of analyses
> (for load-levels I believe, though I don't actually remember).
Ahh. I think the new approach of just disabling entire analyzers will be more
straightforward although I see the desire for the attribute because it could
make things even more flexible but I don't think it's necessary.
> Btw, I'd appreciate any feedback on this branch if anybody is game to
> take a look. The main action is in src/{analyzer,plugin,protocols}/*
> and scripts/base/frameworks/analyzer/*
I'll start playing with it soon.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
