[Bro-Dev] Document final "state" of redef'ed records

Gregor Maier gregor at icir.org
Wed Aug 10 15:17:18 PDT 2011


given a bunch of scripts, that extend record types (I mostly thinking 
about the Info records used for logging) if there a way to get a autodoc 
generated file that shows the final version of the record?

The idea would be, that this "final version" is exactly what actually 
gets logged, so it would be a nice-to-have for users who want to 
understand all the columns in a log file. Now, they have to know all the 
scripts that are loaded that extend a particular record and look at 
their documentation to find out the meaning of columns / fields. This is 
fine for scripts in policy, but for the base scripts it would be nice to 
have a single place to go too.

Gregor Maier
<gregor at icir.org>  <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA

More information about the bro-dev mailing list