[Bro] Problem accessing additional Field in connection record
robin at icir.org
Mon Oct 20 10:08:33 PDT 2008
On Mon, Oct 20, 2008 at 18:21 +0200, Tobias Limmer wrote:
> What am I doing wrong? It seems that my variable is correctly set the first
> time, but afterwards it isn't? It is strange, as the variable should always
> be set in Connection::Connection.
Does it help to start Bro with "use_connection_compressor=F"? There
is another location inside the Compressor where connection records
are created (ConnCompressor::Event in ConnCompressor.cc).
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro