[Bro] Problem accessing additional Field in connection record

Robin Sommer robin at icir.org
Mon Oct 20 10:08:33 PDT 2008

On Mon, Oct 20, 2008 at 18:21 +0200, Tobias Limmer wrote:

> What am I doing wrong? It seems that my variable is correctly set the first
> time, but afterwards it isn't? It is strange, as the variable should always
> be set in Connection::Connection.

Does it help to start Bro with "use_connection_compressor=F"? There
is another location inside the Compressor where connection records
are created (ConnCompressor::Event in ConnCompressor.cc). 


Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the Bro mailing list