ssl-ext.bro @@ -23,7 +23,7 @@ event bro_init() "reply_code", "reply", "reply_message")); } -event ftp_ext(id: conn_id, si: ftp_ext_session_info) +event ftp_ext(id: conn_id, si: ftp_ext_session_info) &priority=-10 { local log = LOG::get_file("ftp-ext", id$resp_h, F); logging.ftp-ext.bro @@ -41,7 +41,7 @@ event bro_init() "client_body")); } -event http_ext(id: conn_id, si: http_ext_session_info) +event http_ext(id: conn_id, si: http_ext_session_info) &priority=-10 { if ( id$resp_h in always_log ) { logging.http-ext.bro @@ -27,7 +27,7 @@ event bro_init() "path", "is_webmail", "agent")); } -event smtp_ext(id: conn_id, si: smtp_ext_session_info) +event smtp_ext(id: conn_id, si: smtp_ext_session_info) &priority=-10 { if ( si$mailfrom != "" ) { logging.smtp-ext.bro @@ -25,7 +25,7 @@ event bro_init() } -event ssh_ext(id: conn_id, si: ssh_ext_session_info) +event ssh_ext(id: conn_id, si: ssh_ext_session_info) &priority=-10 { local log = LOG::get_file("ssh-ext", id$resp_h, F); logging.ssh-ext.bro ssl-known-certs.bro 39194c84a9f8a61340bba28c718f60b99976c4fe Seth Hall hall.692@osu.edu http://github.com/sethhall/bro_scripts/commit/15332e36b04557298486d964329bca3a9b157bb9 15332e36b04557298486d964329bca3a9b157bb9 2009-11-13T12:00:32-08:00 2009-11-13T12:00:32-08:00 Renamed ssl-known-certs to ssl-ext. *_ext logging events are now all handled at lowered priority. cedc3be5bf4bee0c49ffee0e28cd623bc843842a Seth Hall hall.692@osu.edu