[Bro-Dev] &log attribute

Robin Sommer robin at icir.org
Wed Mar 23 08:21:06 PDT 2011


On Tue, Mar 22, 2011 at 22:42 -0400, you wrote:

> attribute in the script layer.  It seems like we'd *have* to think of
> another use case for it to justify implementing the script level
> attribute creation

I was about to say something similar: why don't we go with the &log
attribute for now and generalize to user-definable attributes if/when
we find more use cases?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list