[Bro-Dev] Empty log fields

Robin Sommer robin at icir.org
Sat Dec 3 14:47:17 PST 2011

On Thu, Dec 01, 2011 at 09:51 -0800, I wrote:

> I can live with Seth's "nil" as well. Deal?

Sorry for going back to this another time, but I just made the change
and doesn't really like the result. We now have tons of "nil" in there
just because there are so many non-set fields. "-" looks much better.

The here's another suggestion: let's set empty fields simply to
"(empty)". How about that? That looks much better and empty fields are
much less frequent than unset fields.


Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org

More information about the bro-dev mailing list