[Bro-Dev] &log attribute

Vern Paxson vern at icir.org
Tue Mar 22 17:08:55 PDT 2011


> type Info: record {
> 	uri: string &log;
> 	host: string &log;

This in general sounds better to me than the two-separate-records approach.
However, I wonder if this could be done in a non-use-case-specific manner.
You could picture something like:

	type attribute &log;	# declares "&log" as a new attribute,
				# in this case without an associated value

and then (as I guess you already have in mind) the logging framework
can first test for whether $uri is present, and, if so, whether it
has &log set (via the existing ?$$ operator).

Something like that ...

		Vern


More information about the bro-dev mailing list