[Bro-Dev] Empty log fields
robin at icir.org
Sat Dec 3 14:47:17 PST 2011
On Thu, Dec 01, 2011 at 09:51 -0800, I wrote:
> I can live with Seth's "nil" as well. Deal?
Sorry for going back to this another time, but I just made the change
and doesn't really like the result. We now have tons of "nil" in there
just because there are so many non-set fields. "-" looks much better.
The here's another suggestion: let's set empty fields simply to
"(empty)". How about that? That looks much better and empty fields are
much less frequent than unset fields.
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev