[Bro-Dev] conn.bro

[Robin Sommer]

- ts: I'd prefer to keep this the timestamp of the first packet,
  that's more well defined.

- Did we decide whether we want to add the raw byte volume via
  Gregor's patch? I'd say so.  I'll see that that gets merged in.

- I'd say let's include history by default, but not addl.

- "logging" isn't used.

- Rename "connection$log" to "connection$conn" for consistency?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org