I'd really prefer that it be left at a single hyphen, as it cuts down on log size. It's also a convention that a ton of other programs use. The only acceptable alternative to me would be totally empty field as it still parsable because it's between the delimiters. You guys are debating what the visual output of the log files should be by manipulating the raw output when you're really debating how programs like bro-cut should output empty fields. For me, the logs are database data, and it would be silly to write out "nil" in a database, (the DB will understand the lack of data to be NULL). You want the logs to be a data model, and how they are presented to an end user should be dictated by the accessing program (view).<br>
<br>On Saturday, December 3, 2011, Bernhard Amann <<a href="mailto:bernhard@icsi.berkeley.edu" target="_blank">bernhard@icsi.berkeley.edu</a>> wrote:<br>> How about (-) (set of empty)? Would be kind of logical in my opinion (admittedly only for sets/vectors and not for strings).<br>
><br>> Bernhard<br>><br>> On Dec 3, 2011, at 3:08 PM, Matthias Vallentin wrote:<br>><br>>>> The here's another suggestion: let's set empty fields simply to<br>>>> "(empty)". How about that?<br>
>><br>>> I like it because it is self-descriptive, but isn't that a little<br>>> verbose? I don't have really compelling alternatives though, maybe<br>>> "(0)", "()", or "(|)" as generic empty set representation?<br>
>><br>>> Matthias<br>>> _______________________________________________<br>>> bro-dev mailing list<br>>> <a href="mailto:bro-dev@bro-ids.org" target="_blank">bro-dev@bro-ids.org</a><br>>> <a href="http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev" target="_blank">http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev</a><br>
><br>><br>> _______________________________________________<br>> bro-dev mailing list<br>> <a href="mailto:bro-dev@bro-ids.org" target="_blank">bro-dev@bro-ids.org</a><br>> <a href="http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev" target="_blank">http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev</a><br>
>