[Bro-Dev] &log attribute

Seth Hall seth at icir.org
Mon Mar 28 14:00:12 PDT 2011


On Mar 28, 2011, at 4:49 PM, Vern Paxson wrote:

> What about requiring &log to be added to extensions (if one wants the
> entire extension logged by default), otherwise they go back to the normal
> behavior of only associating &log with fields for which it's explicitly
> mentioned?

Ah, I see what you're saying.  I suppose that would work just fine.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/



More information about the bro-dev mailing list