[Bro-Dev] &log attribute

Vern Paxson vern at icir.org
Mon Mar 28 09:45:10 PDT 2011


> The reason is that if I pass a record in for logging, chances are that
> I want something logged. If there's no explicit &log attribute

What about explicitly associating an &log with the entire record, rather
than with each of it fields?  (I'm not quite picturing the usage you have
in mind here, so this may or may not be appropriate.)

		Vern


More information about the bro-dev mailing list