[Bro-Dev] #483: Logging framework using wrong name.

Bro Tracker bro at tracker.bro-ids.org
Fri Jun 24 10:09:06 PDT 2011

#483: Logging framework using wrong name.
 Reporter:  seth     |      Owner:  robin
     Type:  Problem  |     Status:  new
 Priority:  High     |  Milestone:  Bro1.6
Component:  Bro      |    Version:
 Keywords:           |
 When the logging framework creates filters, it has a problem with enums in
 modules.  If you do this:

 module Notice;

 export {
     redef enum Log::ID += { FOOBAR };

 event bro_init()
     Log::create_stream(FOOBAR, [$columns=XYZ]);

 If you leave it alone and don't create an output stream, it should be
 pulling the default path (file) name from the stream ID but in the case
 above it would end up using the path name "Notice" because it's not
 dealing with modules correctly.  The full value for the enum is

 I think it should just take the actual enum name without the module
 because in most cases it would result in redundantly named log files.

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/483>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list