On Feb 19, 2013, at 10:11 AM, Seth Hall <seth(a)icir.org> wrote:
I thought I should mention that I did some more
updates to make this work better and the current commit that is in my github repository is
broken. We're going to be fixing a bug in Bro and likely including this
functionality in Bro 2.2.
I just got a question asking about getting a working version. You can checkout a commit
after you clone the repository that does work like this..
git checkout edf424
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/