diff --git a/CHANGES b/CHANGES index b240ad7772..be817f00c4 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,11 @@ +2.1-58 | 2012-10-08 10:10:09 -0700 + + * Fix a problem with non-manager cluster nodes applying + Notice::policy. This could, for example, result in duplicate + emails being sent if Notice::emailed_types is redef'd in local.bro + (or any script that gets loaded on all cluster nodes). (Jon Siwek) + 2.1-56 | 2012-10-03 16:04:52 -0700 * Add general FAQ entry about upgrading Bro. (Jon Siwek) diff --git a/VERSION b/VERSION index 72d5fb372d..9dc6ee4e74 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.1-56 +2.1-58 diff --git a/scripts/base/frameworks/notice/cluster.bro b/scripts/base/frameworks/notice/cluster.bro index 087c3ead51..3ee113acf3 100644 --- a/scripts/base/frameworks/notice/cluster.bro +++ b/scripts/base/frameworks/notice/cluster.bro @@ -23,7 +23,7 @@ redef Cluster::worker2manager_events += /Notice::cluster_notice/; @if ( Cluster::local_node_type() != Cluster::MANAGER ) # The notice policy is completely handled by the manager and shouldn't be # done by workers or proxies to save time for packet processing. -event bro_init() &priority=-11 +event bro_init() &priority=11 { Notice::policy = table(); }