[Bro] set initializers (Re: Bro scripts)

Vern Paxson vern at icir.org
Sat Oct 30 13:52:00 PDT 2010


> expression, I'd preferably have a set[string], but this cannot be
> statically defined in a record, i.e.,
> 
>     ["Facebook"]     = [$url=/facebook.com/, $cookies={"xs", "c_user", "sid"}],
>                                                       ^^^^^^^^^^^^^^^^^^^^^^^
> appears not to be correct Bro syntax, because I think variable-size
> types inside records cannot be initialized statically. Is that correct?

You can construct sets using

	.... $cookies=set("xs", "c_user", "sid")

for example.

		Vern



More information about the Bro mailing list