[Bro-Dev] [Bro-Commits] [git/trace-summary] fastpath: Teach trace-summary to parse Bro's new conn.log format (closes #520) (975204a)

Robin Sommer robin at icir.org
Fri Jul 29 11:19:00 PDT 2011


On Thu, Jul 28, 2011 at 08:51 -0700, Jonathan Siwek wrote:

>     Teach trace-summary to parse Bro's new conn.log format (closes #520)

Thanks! But what would you think about keeping compatibility for the
old format as well? That might helpful for folks using trace-summary
on their own and potentiallu with old logs.

By default, trace-summary could try to figure out which format it is
(like by looking for the new "#" header), but then also have a switch
to set it explicitly. 

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list