[Bro-Dev] &log attribute

Seth Hall seth at icir.org
Tue Mar 22 13:49:34 PDT 2011

On Mar 22, 2011, at 2:15 PM, Jonathan Siwek wrote:

>> It's a non-reusable attribute. It only applies in this one scenario,
> I think I understand now, tell me if this rephrasing is wrong -- in practice you'd only ever use &log in record types that get passed to the logging framework and it doesn't make sense to tag any other identifiers with it (which, if done, shouldn't actually do anything).

Yes, exactly. :)


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the bro-dev mailing list