[Bro-Dev] Expire in policy scripts

[Gregor Maier]

Hi,

I have a question regarding expire in policy scripts:

If I use:
  global rpc_calls: table[conn_id] of table[count] of rpc_call_state
       &write_expire = rpc_timeout &expire_func=expire_rpc_call;

will the expire timer be linked to the table that's indexed by conn_id
or the table that's indexed by count? Can I specify the table that
should have an expire timer?

I want the timer linked to the table indexed by count.


thanks,
gregor
-- 
Gregor Maier
<gregor at icir.org>  <gregor at icsi.berkeley.edu>
Int. Computer Science Institute (ICSI)
1947 Center St., Ste. 600
Berkeley, CA 94704, USA
http://www.icir.org/gregor/