[Bro-Dev] &log attribute
Robin Sommer
robin at icir.org
Wed Mar 23 08:21:06 PDT 2011
On Tue, Mar 22, 2011 at 22:42 -0400, you wrote:
> attribute in the script layer. It seems like we'd *have* to think of
> another use case for it to justify implementing the script level
> attribute creation
I was about to say something similar: why don't we go with the &log
attribute for now and generalize to user-definable attributes if/when
we find more use cases?
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev
mailing list