On Mon, Apr 01, 2013 at 16:36 -0400, you wrote:
> Ahh. I think the new approach of just disabling entire analyzers will > be more straightforward although I see the desire for the attribute > because it could make things even more flexible but I don't think it's > necessary. Yeah, for example one could turn off http_reply but not http_request. I'm fine either way, it's not a big deal to keep ot if we think it's still useful. Robin -- Robin Sommer * Phone +1 (510) 722-6541 * [email protected] ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org/robin _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
