Re: Deprecation of &persistent
Jim Mellander <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CADju=b61ZwpR+dPJL6o8+iwe14qt4JFSic-XQwQNTfuNi2a04A@mail.gmail.com> |
On Tue, Apr 23, 2019 at 1:13 PM Mike Dopheide <[email protected]> wrote: > <snip> > > I imagine you could write some boilerplate code that just fires off a > scheduled task via bro_init to update the store, all you'd need to do is > paste it in and update the variable name for each policy. > > Some sort of macro system for zeek policies could be useful, to ease use of generic code as suggested by Dop's comment. Anyone else ever had that thought? _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek