[Bro-Dev] &log attribute

[Seth Hall]

On Mar 22, 2011, at 2:15 PM, Jonathan Siwek wrote:

>> It's a non-reusable attribute. It only applies in this one scenario,
> 
> I think I understand now, tell me if this rephrasing is wrong -- in practice you'd only ever use &log in record types that get passed to the logging framework and it doesn't make sense to tag any other identifiers with it (which, if done, shouldn't actually do anything).

Yes, exactly. :)

.Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/