[Bro-Dev] [Bro-Commits] [git/bro] topic/policy-scripts-new: Extract packet data for the dpd.log (7c168e0)

Robin Sommer robin at icir.org
Thu Apr 21 07:42:08 PDT 2011


On Wed, Apr 20, 2011 at 22:00 -0700, you wrote:

> +	local packet_segment = sub_bytes(get_current_packet()$data, 0, packet_segment_size);

This is a nice idea but get_current_packet() has some fuzzy semantics:
the current packet is not necessarily the one triggering the event. It
probably works often, but not always, and I'm wondering if when it
doesn't, it could be very confusing to show the data here?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list