[Bro-Dev] Call for opinions on logging framework syntax problem

Seth Hall seth at icir.org
Wed Nov 30 08:41:17 PST 2011


On Nov 30, 2011, at 11:31 AM, Robin Sommer wrote:

> Vern might know whether there's anything that would severely break but
> my guess is that in principle we could do that. However, I like the
> port type, it provides additional context for type checking and
> understanding a script

I like it too, until I try to use it too much. :)  It provides a very nice convenience within the language but creates a large complication if you try to use the values outside of the language.  If you really think about it, it seems a little silly that we have to have a BiF for accessing the protocol of a port.  If it was a record or a field in a conn_id we would be able to reuse existing knowledge to access the protocol.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20111130/a67f9ff4/attachment.bin 


More information about the bro-dev mailing list