> On Jan 31, 2017, at 5:41 PM, Robin Sommer <ro...@icir.org> wrote: > > For RemoteSerializer, log events and log > filters run only on the originating nodes; those guys make all > decisions about what's getting logged exactly and they then send that > on to the manager, which just writes out the data it receives.
Just to pile onto this, I think it should be this way too. I'd really like to avoid script code executing on the logger. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
