[Bro-Dev] &log attribute
Seth Hall
seth at icir.org
Mon Mar 28 14:00:12 PDT 2011
On Mar 28, 2011, at 4:49 PM, Vern Paxson wrote:
> What about requiring &log to be added to extensions (if one wants the
> entire extension logged by default), otherwise they go back to the normal
> behavior of only associating &log with fields for which it's explicitly
> mentioned?
Ah, I see what you're saying. I suppose that would work just fine.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/
More information about the bro-dev
mailing list