<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Take a look at these: <a href="https://github.com/zeek/zeek/issues/163">https://github.com/zeek/zeek/issues/163</a> & <a href="https://bro-tracker.atlassian.net/browse/BIT-984">https://bro-tracker.atlassian.net/browse/BIT-984</a></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">I've run into this issue, and my best practice is to use fully scoped event names, which is the recommended workaround.<br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Jim</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Oct 23, 2019 at 11:34 AM Jeff Barber <<a href="mailto:jsbarber60@gmail.com">jsbarber60@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">At <a href="https://docs.zeek.org/en/stable/frameworks/broker.html#a-reminder-about-events-and-module-namespaces" style="font-family:Arial,Helvetica,sans-serif" target="_blank">https://docs.zeek.org/en/stable/frameworks/broker.html#a-reminder-about-events-and-module-namespaces</a>, following a code sample, there is the statement:</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><blockquote style="margin:0px 0px 0px 40px;border:medium none;padding:0px"><i>This code runs without errors, however, the local <font face="monospace">my_event</font> handler will never be called and also not any remote handlers either, even if <font face="monospace">Broker::auto_publish</font> was used elsewhere for it. </i></blockquote><div><br></div><div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">My tests have not supported that assertion: the event handler is invoked - even via auto_publish. If it is so, how/when exactly would it manifest? Are there other factors that might cause it to be true in some cases? (Say, the same event name in a different namespace?)</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Just trying to figure out how careful I need to be of namespace issues. My tests have generally shown that if you get the namespace of some script element wrong, the script parsing stage gives you an 'undefined' right out of the gate.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Thanks,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Jeff</div><br></div></div>
_______________________________________________<br>
Zeek mailing list<br>
<a href="mailto:zeek@zeek.org" target="_blank">zeek@zeek.org</a><br>
<a href="http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek" rel="noreferrer" target="_blank">http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek</a></blockquote></div>