[Bro-Dev] #375: Extending record type fields

Bro Tracker bro at tracker.icir.org
Fri Feb 4 10:18:39 PST 2011


#375: Extending record type fields
------------------------------+---------------------
  Reporter:  seth             |      Owner:
      Type:  Feature Request  |     Status:  new
  Priority:  Normal           |  Milestone:  Bro1.6
 Component:  Bro              |    Version:
Resolution:                   |   Keywords:  logging
------------------------------+---------------------

Comment (by gregor):

 Reordering the fields makes a difference for the C++ part, when you use
 Assign().

 The problem is when you have *multiple* extensions with +=. Then the order
 of the fields depends on the order in which these extensions are parsed.

 (One question I guess is: is this likely to happen. Since the C++ layer
 would have to know that the record is extended. However, this might happen
 in bif's)

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/375#comment:3>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list