[Bro-Dev] &log attribute

Vern Paxson vern at icir.org
Mon Mar 28 13:49:58 PDT 2011

> redef record Info += {
> 	did_something: bool &default=F &log;
> 	ready_to_log: bool &default=F;
> };

What about requiring &log to be added to extensions (if one wants the
entire extension logged by default), otherwise they go back to the normal
behavior of only associating &log with fields for which it's explicitly

This is a bit different from how attributes currently propagate, but we
don't (I think) have other maybe-it's-the-whole-aggregate-maybe-it's-a-field
attributes, so the above wouldn't be inconsistent with existing practice.


More information about the bro-dev mailing list