From 351b0b2aaa7eaf45b71b71cf71256587321bc4e3 Mon Sep 17 00:00:00 2001 From: Robin Sommer Date: Wed, 26 Oct 2011 14:30:15 -0700 Subject: [PATCH] Adding instructions to local.bro how to do ACTION_ALARM by default. --- CHANGES | 5 +++++ VERSION | 2 +- scripts/site/local.bro | 4 ++++ 3 files changed, 10 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 59797d7159..9f158041f0 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,9 @@ +1.6-dev-1498 | 2011-10-26 14:30:15 -0700 + + * Adding instructions to local.bro how to do ACTION_ALARM by + default. (Seth Hall) + 1.6-dev-1495 | 2011-10-26 10:15:58 -0500 * Updated unit test baselines. (Seth Hall) diff --git a/VERSION b/VERSION index c572db76c8..429661cfeb 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.6-dev-1495 +1.6-dev-1498 diff --git a/scripts/site/local.bro b/scripts/site/local.bro index f894a30432..597b92ba3d 100644 --- a/scripts/site/local.bro +++ b/scripts/site/local.bro @@ -20,6 +20,10 @@ redef Software::vulnerable_versions += { # This adds signatures to detect cleartext forward and reverse windows shells. redef signature_files += "frameworks/signatures/detect-windows-shells.sig"; +# Uncomment the following line to begin receiving (by default hourly) emails +# containing all of your notices. +# redef Notice::policy += { [$action = Notice::ACTION_ALARM, $priority = 0] }; + # Load all of the scripts that detect software in various protocols. @load protocols/http/software #@load protocols/http/detect-webapps