On Aug 16, 2011, at 1:16 AM, Robin Sommer wrote:
When one starts Bro with no scripts at all (e.g.,
"bro -i ix1"), it
doesn't do anything because it will try to read from stdin. Seems we
should change that now so that it will just start processing?
Oh, I didn't realize this was behaving differently when sniffing a live interface.
It already does this when reading a tracefile. It seems reasonable to me to make this the
What was the reason for being able to provide Bro scripts on stdin? Does anyone use this
International Computer Science Institute
(Bro) because everyone has a network