[Bro] A way to check if record field is already set

Josh Liburdi liburdi.joshua at gmail.com
Thu Jun 26 06:43:25 PDT 2014

"?$" will check if a value exists for any field. For your example, put $http?$host in the script before you try to process the host field.


On Thu, Jun 26, 2014 at 09:34 AM, עומר עומר, wrote:

Bro mailing list
bro at bro-ids.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140626/24942a9a/attachment.html 

More information about the Bro mailing list