[Bro] Timestamp conversion code

James Welcher jwelcher at gmail.com
Mon Dec 2 07:03:10 PST 2013

Add cf to your command pipeline


On Monday, December 2, 2013, Terry Healy wrote:

> Hello- New here an tasked with injesting some Bro log files. All is fine
> except for the timestamp. I have found that I can use bro-cut to see the
> desired (or usable) format, but I can't use bro-cut in my work flow and
> was unable to reverse engineer what it was doing.
> I just need to get from the (proprietary?) timestamp format to something
> standard like:
> 2013-12-02T09:30:34-0500
> Thank.
> Terry
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org <javascript:;>
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

James Welcher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20131202/e36e11fa/attachment.html 

More information about the Bro mailing list