[Bro-Dev] Empty log fields

Matthias Vallentin vallentin at icir.org
Sat Dec 3 15:08:11 PST 2011


> The here's another suggestion: let's set empty fields simply to
> "(empty)". How about that?

I like it because it is self-descriptive, but isn't that a little
verbose? I don't have really compelling alternatives though, maybe
"(0)", "()", or "(|)" as generic empty set representation?

    Matthias


More information about the bro-dev mailing list