[Bro-Dev] &log attribute

[Adam J. Slagell]

On Mar 28, 2011, at 11:45 AM, Vern Paxson wrote:

>> The reason is that if I pass a record in for logging, chances are that
>> I want something logged. If there's no explicit &log attribute
> 
> What about explicitly associating an &log with the entire record, rather
> than with each of it fields?  (I'm not quite picturing the usage you have
> in mind here, so this may or may not be appropriate.)

That was my suggestion that Seth didn't like.

------
Adam J. Slagell, CISSP
Sr. Security Engineer
National Center for Supercomputing Applications
University of Illinois at Urbana-Champaign
www.slagell.info
217.244.8965