[Bro-Dev] #685: Change default constant for empty or unset field of LogWriterAscii

Bro Tracker bro at tracker.bro-ids.org
Thu Nov 17 15:30:01 PST 2011


#685: Change default constant for empty or unset field of LogWriterAscii
--------------------+---------------------
 Reporter:  amannb  |       Type:  Problem
   Status:  new     |   Priority:  Normal
Milestone:          |  Component:  Bro
  Version:          |   Keywords:
--------------------+---------------------
 At the moment, the ascii logwriter uses the same string to represent empty
 fields and unset fields.
 Thus, when reading the logfiles later, for sets and vectors one cannot
 distinguish if the set/vector was unset or empty.

 Changing either one of the empty_field or unset_field values would solve
 the problem.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/685>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list