[Bro-Dev] #685: Change default constant for empty or unset field of LogWriterAscii
Bro Tracker
bro at tracker.bro-ids.org
Fri Nov 18 07:21:41 PST 2011
#685: Change default constant for empty or unset field of LogWriterAscii
----------------------+--------------------
Reporter: amannb | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.0
Component: Bro | Version:
Resolution: | Keywords:
----------------------+--------------------
Comment (by seth):
Tough question. Now that we have bro-cut and people can start processing
logs with that and it understands the log format implicitly I think we
should make empty fields empty. NULL fields can still be "-". What about
that?
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/685#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list