On Apr 1, 2013, at 4:37 PM, Robin Sommer <[email protected]> wrote: > Yeah, for example one could turn off http_reply but not http_request. > I'm fine either way, it's not a big deal to keep ot if we think it's > still useful.
Yep, it's probably better overall if we stay away from the notion of disabling analyzers in parts. Having the foundation that analyzers are either fully on or fully off is a nice thing to be able to assume. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
