[Bro-Dev] #558: /topic/gilbert/ascii-header

Bro Tracker bro at tracker.bro-ids.org
Wed Aug 17 13:06:25 PDT 2011


#558: /topic/gilbert/ascii-header
----------------------------+----------------------
  Reporter:  gclark         |      Owner:  robin
      Type:  Merge Request  |     Status:  assigned
  Priority:  Normal         |  Milestone:  Bro1.6
 Component:  Bro            |    Version:
Resolution:                 |   Keywords:  logging
----------------------------+----------------------

Comment (by robin):

 I just noticed that setting awk's FS only works inside BEGIN, not
 later. What I was hoping to use is something like this:

     {{{
     echo -e "#separator ;\n1;2;3;4\n" | awk '/#separator/ {FS=$2} {print
 $1}'
     }}}

 But that doesn't work unfortinately.

 >  With my darwin awk the following works:
 >     awk 'BEGIN { FS="\x09" }

 Yeah, but the question is how to do it if "\x09" is part of the input
 (and i.e., not decoded as parsw time).

 Robin

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/558#comment:7>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list