[Bro-Dev] &log attribute
Vern Paxson
vern at icir.org
Tue Mar 22 17:08:55 PDT 2011
> type Info: record {
> uri: string &log;
> host: string &log;
This in general sounds better to me than the two-separate-records approach.
However, I wonder if this could be done in a non-use-case-specific manner.
You could picture something like:
type attribute &log; # declares "&log" as a new attribute,
# in this case without an associated value
and then (as I guess you already have in mind) the logging framework
can first test for whether $uri is present, and, if so, whether it
has &log set (via the existing ?$$ operator).
Something like that ...
Vern
More information about the bro-dev
mailing list