[Bro-Dev] #685: Change default constant for empty or unset field of LogWriterAscii

Bro Tracker bro at tracker.bro-ids.org
Fri Nov 18 07:55:03 PST 2011


#685: Change default constant for empty or unset field of LogWriterAscii
----------------------+--------------------
  Reporter:  amannb   |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro2.0
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by robin):

 On Fri, Nov 18, 2011 at 15:21 -0000, you wrote:

 >  Tough question.  Now that we have bro-cut and people can start
 processing
 >  logs with that and it understands the log format implicitly I think we
 >  should make empty fields empty.  NULL fields can still be "-".  What
 about
 >  that?

 Not sure I like that. That would indeed work well with bro-cut, but it
 make the logs really hard to read visually.

 Robin

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/685#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list