[Bro-Dev] Opinions on trace rewriter?
Vern Paxson
vern at icir.org
Mon Oct 25 22:48:01 PDT 2010
> That was indeed a thought I had, but because I don't want to
> *pledge* it, I didn't say it; but you see where the "separate tool"
> idea is coming from. :-)
Well, in terms of "separate tool" that's still just half of it, though.
One needs a Bro interpreter, too.
> We could do a compromise: Remove it, but turn all the code into a
> big patch that applies cleanly to the next release.
Okay, that works for me. I like the notion of capturing the necessary
pieces as a coherent whole.
Vern
More information about the bro-dev
mailing list