Missing Documentation
Keywords: doc-html

Next: The use of prefixes Up: The Bro 0.8 User Previous: The interconn Analyzer Contents Index

#
Missing Documentation

This chapter holds stubs for subjects that have yet to be documented. Some of these are actually already somewhat covered elsewhere in the manual. In addition, a major missing piece for the manual is the Bro language itself; below we mention some Bro language topics that come up elsewhere in the current version of the manual.

Subsections

- The use of prefixes
- The tcpdump save file that Bro writes
- The `bro.init` initialization file
- Assignment operators such as `+=`
- The notion of redefinition/refinement
- The logging model
- Timer management
- SYN-FIN filtering
- Split routing
- Scan dropping
- Operator precedence
- Partial connections
- Packet drops
- The `@load` directive
- Global statements
- Inserting tables into tables
- Demultiplexing
- Bro init file
- Hostnames vs. addresses
- The hot-report script
- Use of libpcap/BPF
- The problem of evasion
- Backscatter
- Playing back traces
- Discarders
- Differences between this release and the previous one
- Alert cascade
- The need for subtyping
- The need for CIDR masks
- The wish list
- Known bugs