[Bro-Dev] &log attribute
Vern Paxson
vern at icir.org
Mon Mar 28 13:49:58 PDT 2011
> redef record Info += {
> did_something: bool &default=F &log;
> ready_to_log: bool &default=F;
> };
What about requiring &log to be added to extensions (if one wants the
entire extension logged by default), otherwise they go back to the normal
behavior of only associating &log with fields for which it's explicitly
mentioned?
This is a bit different from how attributes currently propagate, but we
don't (I think) have other maybe-it's-the-whole-aggregate-maybe-it's-a-field
attributes, so the above wouldn't be inconsistent with existing practice.
Vern
More information about the bro-dev
mailing list