More cluster framework fixes for BroControl.

policy/frameworks/cluster/base/node/manager.bro

@@ -1,4 +1,4 @@
-##! This is the core Bro script support for the notion of a cluster manager.
+##! This is the core Bro script to support the notion of a cluster manager.
 ##!
 ##! The manager is passive (the workers connect to us), and once connected
 ##! the manager registers for the events on the workers that are needed
@@ -7,15 +7,14 @@
 ##! This is where the cluster manager sets it's specific settings for other
 ##! frameworks and in the core.
 
+@prefixes += cluster-manager
+
 ## Turn off remote logging since this is the manager and should only log here.
 redef Log::enable_remote_logging = F;
 
 ## Use the cluster's archive logging script.
 redef Log::default_rotation_postprocessor = "archive-log";
 
-## The cluster manager does not capture packets.
-redef interfaces = "";
-
 ## We're processing essentially *only* remote events.
 redef max_remote_events_processed = 10000;
 

policy/frameworks/cluster/base/node/proxy.bro

@@ -1,6 +1,5 @@
 
-## No packet capture on proxy.
-redef interfaces = "";
+@prefixes += cluster-proxy
 
 ## The proxy only syncs state; does not forward events.
 redef forward_remote_events = F;

policy/frameworks/cluster/base/node/worker.bro

@@ -1,4 +1,6 @@
 
+@prefixes += cluster-worker
+
 ## Don't do any local logging.
 redef Log::enable_local_logging = F;
 
@@ -11,3 +13,6 @@ redef Log::default_rotation_postprocessor = "delete-log";
 ## Record all packets into trace file.
 # TODO: should we really be setting this to T?
 redef record_all_packets = T;
+
+# TODO: Workers need to have a filter for the notice log which doesn't 
+#       do remote logging since we forward the notice event directly.