[Bro] question about printing timestamps

Seth Hall seth at icir.org
Wed Mar 16 10:57:58 PDT 2011

I received a question privately about formatting timestamps in a human readable manner the other day and I thought I'd answer the question a bit more publicly.

To format "time" values as human readable, you can use either %D or %T in calls to fmt().  Like this:
	fmt("%D", network_time());

Hopefully this helps someone.  We'll try to make sure that things like this will be documented for the next release.

Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list