<div dir="ltr"><div class="gmail_quote"><div dir="ltr">On Fri, Jun 15, 2018 at 11:38 PM Seth Hall <<a href="mailto:seth@corelight.com" target="_blank">seth@corelight.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Ugh, I didn't consider that. Bro has re-reached the point where <br>
touching any number of things can set off an avalanche of problems like <br>
this.<br></blockquote><div><br></div></div><div dir="ltr"><div class="gmail_quote"><div>The other aspect of Bro changes is in the logging format. This comment isn't specifically tied the DHCP change, but since we're talking about breaking things....</div><div><br></div><div>With the default TSV, any change can break export into the various back-end log stores and SIEMs. When adding new fields, it would be nice to see them added to the end of the Info structure. <br></div><div><br></div><div> ...alan</div></div></div></div>