[Bro-Dev] &log attribute

Adam J. Slagell slagell at ncsa.illinois.edu
Mon Mar 28 10:21:18 PDT 2011

On Mar 28, 2011, at 11:45 AM, Vern Paxson wrote:

>> The reason is that if I pass a record in for logging, chances are that
>> I want something logged. If there's no explicit &log attribute
> What about explicitly associating an &log with the entire record, rather
> than with each of it fields?  (I'm not quite picturing the usage you have
> in mind here, so this may or may not be appropriate.)

That was my suggestion that Seth didn't like.

Adam J. Slagell, CISSP
Sr. Security Engineer
National Center for Supercomputing Applications
University of Illinois at Urbana-Champaign

More information about the bro-dev mailing list