<div dir="ltr"><div dir="ltr">On Thu, Dec 19, 2019 at 8:21 AM Scot Harris <<a href="mailto:SHARRIS@hollywoodfl.org">SHARRIS@hollywoodfl.org</a>> wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-5750782578760947443WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Bigger issue possibly. A lot of zero values<u></u><u></u></span></p>
<p class="MsoNormal"></p></div></div></blockquote><div><br></div><div>That's probably a smaller issue :-) it's logging unknown or unset values as 0, when it should maybe just be optional fields that are logged as unset values.. unfortunately with timestamps 0 gets turned into 1969.. we can probably fix that in zeek-cut to not format 0 as a timestamp though. <br></div></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Justin</div></div></div>